[rippercushions]

I always figured this was due to DNS caching: if you got a domain you never visit, it has to actually fetch it and that triggers the captive portal login .

[zamnos]

Exactly right - which is why neverssl.com now redirects to a randomly generated subdomain.