It wasn't that long ago and I don't think it was compromised. At least I hope not. It may have been a new plugin, but I'm fairly certain it was "Nowhere".

I'll have to look into HTTPS Everywhere. Thanks for the recommendation.