It's a common problem, and Ray has the solution. http://blog.discountasp.net/pci-scan-fail-custom-error-handling-may-be-the-culprit/