They require an extra fee to share connection via Wi-Fi.
Essentially, they can detect that your phone sends two types of ttl packets (your own and recipient device’s).
When they detect it, they cut 99% of your connection speed and redirect you to page with “Enable wifi sharing for 1$/day or continue at 60 kb/s”. (airplane mode toggle removes the speed cut-off).
This line is executed at boot by djs magisk plugin. When the default ttl is 63, it’ll match the ttl value of all Linux and Android recipient devices.
But I still haven’t defeated the Windows detection: for a start, Windows ttl is 127, but even if I change it on the recipient PC, my carrier could see windows-related packets and still blocks me out. I even tried the vpn, but that’s still not enough.