I think your suggestion that there is a list of IP addresses associated with VPN servers is the most likely reason for
access denial by certain sites.
That's my understanding as well. Another possible way would be limit the number of concurrent connections from a single IP address but I don't know if any do that.