The banner calls ip.dsv.su.se and uses the returned information to determine whether the client is using a VPN connection.