My provider at home, Rogers Cable (Toronto), will inject things in the pages you see when you're approaching your bandwidth cap. It's extremely irritating and somewhat worrying.

Basically they mangle the HTML and slap in their own banner which means they must be doing some kind of stream inspection and processing to manage this. I do not have a proxy configured, and requests don't indicate that this is being done.