How Detectors Estimate Perplexity Without Access to the Original Model