I switched from cloudflare to quad9 as the dns provider for my LAN, and the issue went away. So it must be something with cloudflare not resolving captiveportal.kuketz.de after whatever change from Kuketz was implemented? Anyway, I am counting my issue as a “false positive”.