Security Warning - where did that hail from

Even worse this morning:
405

the site was working yesterday a link on the site that yesterday worked now gives a 405.
But if the linked url is entered direct in a new tab it works - this sadly remind me of Apache nonsense but this is a nginx server.

BTW this is the same VM that still has redirecting issues