Recently employees in my office (about 5 people) have reported that sometimes web pages can not load for no reason, but after pressing refresh button in the browser, it first shows 'Redirecting you to www.....' then the page loads normally.
This only started to happen this week and it has happened to all users (so I've ruled out spyware / virus on individual PCs.)
Could this be a man-in-the-middle attack? I.e. someone is intercepting all web requests and forwarding them onto the real server. If so how could you tell?
internet --> |ADSL |--> wireless router --> office PCs |modem |--> web server