Guys maybe a trace using wireshark might show us something.
Do a trace zip it and PM it to me , Do 2 tests with blocking and without blocking phorm.com
Make sure you shut down other internet apps to reduce the amount of data captured.
http://www.wireshark.org/