Isn't it significantly easier to just compare the IP of the visitor against a database of known VPN IPs?