[Ms-J]

It's very interesting you mentioned this because I noticed this behaviour on another unrelated VPN service. It appeared to be a SSL stripping attack. Is that what happened to you, waselighis?