There is a bug in Zcash where you can ask a node to relay a malformed transaction. It will get rejected but nodes that own or have view keys of shielded address throw an exception and react differently, which you can see. So you can use it to find out which node owns a zaddr coin
