Suspicious Traffic Of - Check Point CheckMates

Có thể bạn quan tâm

This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings. Accept Reject Preferences

ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ Sign In Sign In

Products
Learn
- CheckFlix
- CheckMates Go Cyber Security Podcast
- Check Point for Beginners
- Talking Cloud Podcast
- Training and Certification
- ATC Trainers
- CCSM
- CheckMates Labs
- TechTalks and AI Events
- CCSM Elite
Local User Groups
Partners
- Welcome Partners!
More

Products
- Hybrid Mesh
  - Firewall and Security Management
  - Maestro
  - OpenTelemetry/Skyline
  - SASE and Remote Access
  - SaaS
  - SD-WAN
  - SmartMove
  - Spark Firewall (SMB)
  - Cloud Firewall
  - WAF
- Workspace
  - Browse
  - Email and Collaboration
  - Endpoint
  - Mobile
  - XDR
- AI Security
  - AI Agents
  - GenAI Security
  - AI Events
  - AI Risk Matrix
  - AI Security Masters Series
  - General AI Discussion
  - Infinity AI Copilot
- Exposure Management
  - External Risk Management
  - Threat Exposure Management
- Services
  - Events
  - Infinity Portal
  - Playblocks
- Developers & More
  - Ansible
  - API / CLI Discussion
  - DevSecOps
- Check Point Trivia
- CheckMates Toolbox
- General Topics
- Products Announcements
Learn
- CheckFlix
- CheckMates Go Cyber Security Podcast
- Check Point for Beginners
- Talking Cloud Podcast
- Training and Certification
- ATC Trainers
- CCSM
- CheckMates Labs
- TechTalks and AI Events
- CCSM Elite
Local User Groups
- Upcoming Events
- Americas
  - Brazil
  - Canada
  - The Caribbean
  - Central US
  - Eastern US
  - Latin America
  - Mid-Atlantic US
  - Pacific Northwest
  - Southeast US
  - US Federal
  - Western US
  - US Utilities
- EMEA
  - Czech Republic and Slovakia
  - Denmark
  - Netherlands
  - Germany
  - Sweden
  - United Kingdom and Ireland
  - France
  - Spain
  - Norway
  - Ukraine
  - Baltics and Finland
  - Greece
  - Portugal
  - Austria
  - Kazakhstan and CIS
  - Switzerland
  - Romania
  - Turkey
  - Belarus
  - Belgium & Luxembourg
  - Russia
  - Poland
  - Georgia
  - DACH - Germany, Austria and Switzerland
  - Iberia
  - Africa
  - Adriatics Region
  - Eastern Africa
  - Israel
  - Nordics
  - Middle East and Africa
  - Balkans
  - Italy
  - Bulgaria
  - Cyprus
- APAC
  - Korea
  - Mongolia
  - Bangalore
  - Greater China
  - Australia/New Zealand
  - Philippines
  - Japan
  - Singapore
  - India
  - Thailand
  - Taiwan
  - Hong Kong
  - Indonesia
Partners
- Welcome Partners!
More
- Non-English Discussions
- More
  - Exclusive Content
  - CPX 2025 Content
  - R8x Training Videos
- Message Views
  - Recent Messages
  - Recent Threads
- Contests
  - How-To Video Contest
  - CheckMates Everywhere 5th Birthday
  - Paradigm Shifts: Adventures Unleashed
  - Toolbox Contest 2024
- Blogs
  - Careers at Check Point
  - The CheckMates Blog
  - Threat Intelligence Reports
- Off-Topic Discussions
ABOUT CHECKMATES & FAQ
- About CheckMates & FAQ
- Community Guidelines
Sign In
Leaderboard
Events

The Great Exposure Reset24 February 2026 @ 5pm CET / 11am EST

AI Security Masters E4: Introducing Cyata - Securing the Agenic AI Era

AI Security Masters E3: AI-Generated Malware

CheckMates Go:CheckMates Fest

Turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Search instead for

CheckMates
:
Products
:
General Topics
:
Suspicious Traffic of gvt1.com

Subscribe to RSS Feed
Mark Topic as New
Mark Topic as Read
Float this Topic for Current User
Bookmark
Subscribe
Mute
Printer Friendly Page

All communityThis categoryThis boardKnowledge baseUsersProducts

cancel

Turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Search instead for

Are you a member of CheckMates?

‎2018-02-16 10:10 AM

Suspicious Traffic of gvt1.com

Hi All,

I have taken monthly report of top 10 application from Smart Event and I found traffic for gvt1.com among them. Risk for this URL is 0-unknown for Checkpoint.

I have researched a bit so some are saying that it is for Chrome browser update and some are saying that it is malware. Anyone has idea about this. If it is virus/malware then how we can remove it, IPS Blade has any signature for this?

Tags:
suspicious traffic of gvt1.com

All forum topics
Previous Topic
Next Topic

‎2018-02-16 01:02 PM

We'd have to look at the actual traffic in question to see if it's malicious or not.

‎2018-02-18 05:07 PM

Hi, do you still see such traffic ? Do you have the same categorization ?

‎2018-02-19 04:35 AM

XavierBens

Hi,

Let me check with end users. I will update.

‎2018-02-20 03:12 AM

Gaurav_Pandya

Hi,

We have Scan the machine with Antivirus from which this URL is accessed but didn't find anything. Also checked in the smart event logs and this traffic comes immediate after google services so seems to be legitimate traffic.

However I will keep an eye.

Kudo

‎2018-10-22 10:54 PM

Gaurav_Pandya

Hello so far those sites are used to update chrome.

https://productforums.google.com/forum/#!topic/chrome-admins/I5WLpuxclI4;context-place=topicsearchin...

‎2018-10-22 10:10 PM

Hi,

gvt1.com owner is google.com see https://www.whois.com/whois/gvt1.com . GVT is an acronym for Google Video Transcoding and is used i.e. as local cache server for youtube videos and google product updates (chrome, google earth).

I don't think google is deploying malware. Therefore it's safe to say that traffic should be fine.

Don't trust those website saying this is a virus and offering some suspicious software to "remove" this "virus" off your systems.

Cheers,

Alex

‎2018-10-23 05:48 AM

Hi Alex/Pablo,

Thanks for the information.