Suspicious Abnormal HTTP Response Found

Sjoerd — Fri, 08 Sep 2017 13:53:44 GMT

My customers are complaing that they're not able to open the website www.sligrofoodgroup.nl

Our "Antvirus / Anti Spyware Block Page" kicks in, and in the threat monitor i see it's blocked cause off the vulnerability "Suspicious Abnormal HTTP Response Found" in the favicon.ico file:

https://threatvault.paloaltonetworks.com/?query=40393

What does this exactly mean and is it save to allow this traffic?

Re: Suspicious Abnormal HTTP Response Found

Rich_G — Wed, 10 Jan 2018 16:30:53 GMT

Here is some information on HTTP Evasion Detection Signatures which Suspicious Abnormal HTTP Response Found falls into.

https://live.paloaltonetworks.com/t5/Threat-Vulnerability-Articles/Understanding-HTTP-Evasion-Detection-Signatures/ta-p/79218

topic Re: Suspicious Abnormal HTTP Response Found in Advanced Threat Prevention Discussions

Suspicious Abnormal HTTP Response Found

Re: Suspicious Abnormal HTTP Response Found