The Deutsche Bahn (DB) is quite some big user of these landing pages in WiFis and it's quite annoying.
It seems to use a popular offer named Hotsplots for that.
The page it accesses seems to be a GET request to (here with the Firefox detectportal): https://www.hotsplots.de/auth/login.php?res=already&uamip=192.168.44.1&uamport=80&called=00-****-99&mac=EC-****-46&ip=192.168.45.19&nasid=colibri-00c0***99&sessionid=6981***0000010&redirurl=&userurl=ll://dehttp://detectportal.firefox.com/canonical.html
Or: https://www.hotsplots.de/auth/login.php?res=success&uamip=192.168.44.1&uamport=80&called=00-****-99&uid=agb_accepted&mac=EC-****-46&ip=192.***.19&nasid=colibri-00*****99&sessionid=6981***00000010&redirurl=&userurl=ll%3a%2f%2fdehttp%3a%2f%2fdetectportal.firefox.com%2fcanonical.html
It seems like it refers to:
ip device IP
uamip router IP (apparently)
called router MAC?
mac local device MAC
Proposed solution
Allow placeholders in the URl that extract and insert that data.
Reference
The Deutsche Bahn (DB) is quite some big user of these landing pages in WiFis and it's quite annoying.
It seems to use a popular offer named Hotsplots for that.
The page it accesses seems to be a GET request to (here with the Firefox detectportal):
https://www.hotsplots.de/auth/login.php?res=already&uamip=192.168.44.1&uamport=80&called=00-****-99&mac=EC-****-46&ip=192.168.45.19&nasid=colibri-00c0***99&sessionid=6981***0000010&redirurl=&userurl=ll://dehttp://detectportal.firefox.com/canonical.htmlOr:
https://www.hotsplots.de/auth/login.php?res=success&uamip=192.168.44.1&uamport=80&called=00-****-99&uid=agb_accepted&mac=EC-****-46&ip=192.***.19&nasid=colibri-00*****99&sessionid=6981***00000010&redirurl=&userurl=ll%3a%2f%2fdehttp%3a%2f%2fdetectportal.firefox.com%2fcanonical.htmlIt seems like it refers to:
ipdevice IPuamiprouter IP (apparently)calledrouter MAC?maclocal device MACProposed solution
Allow placeholders in the URl that extract and insert that data.
Reference