Is this a French website? If it is, it's entirely possible that nginx's GeoIP2 module is being used to return a 404 for everyone not in France, though that's a nginx Plus feature.
Or it's some other mechanism not based on GeoIP but something else; but still, visitors are somehow being differentiated here and it's not based on whether it's a VPN or not.