Don’t underestimate him. But even if what you’re saying is true, that he was dumb enough to leave his VPN on at some point, then I’d have to manually go back and check every single day since he joined in September 2024.
That would take way too much time. The only way to avoid that is to check just the most recent days where there might have been overlap on both sites. But if that overlap exists, he’s basically busted. So there are only two options: either I go through months of data manually, which is almost impossible, or I take the gamble and catch him on a recent day.
Only bad outcomes for him.