They're definitely doing it based on IPs. I just hopped to a different VPN endpoint and it works for me again (same browser). For now.