Suspicious Traffic Of - Check Point CheckMates

Có thể bạn quan tâm

This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings. Accept Reject Preferences

ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ Sign In Sign In

Products
Learn
- CheckFlix
- CheckMates Go Cyber Security Podcast
- Check Point for Beginners
- Check Point Trivia
- LGPD
- ReelTalk
- Tip Of The Week
- Training and Certification
- ATC Trainers
- CCSM
- CheckMates Labs
- TechTalks and AI Events
- CCSM Elite
Local User Groups
Partners
- Welcome Partners!
More

Products
- Network & SASE
  - IoT Protect
  - Maestro
  - Management
  - OpenTelemetry/Skyline
  - Remote Access VPN
  - SASE
  - SD-WAN
  - Security Gateways
  - SmartMove
  - Smart-1 Cloud
  - SMB Gateways (Spark)
  - Threat Prevention
- Cloud
  - Cloud Network Security
  - CloudMates General
  - CloudGuard - WAF
  - Talking Cloud Podcast
  - Weekly Reports
- Workspace
  - Browse
  - Email and Collaboration
  - Endpoint
  - Mobile
  - SaaS
- Security Operations
  - Events
  - External Risk Management
  - Incident Response
  - Infinity AI
  - Infinity Portal
  - NDR
  - Playblocks
  - SOC
  - XDR/XPR
  - Threat Exposure Management
- AI Security
  - AI Agents
  - GenAI Security
  - AI Events
  - General AI Discussion
  - AI Security Masters Series
  - Infinity AI Copilot
- Developers & More
  - Ansible
  - API / CLI Discussion
  - DevSecOps
- Check Point Trivia
- CheckMates Toolbox
- General Topics
- Products Announcements
- Threat Prevention Blog
Learn
- CheckFlix
- CheckMates Go Cyber Security Podcast
- Check Point for Beginners
- Check Point Trivia
- LGPD
- ReelTalk
- Tip Of The Week
- Training and Certification
- ATC Trainers
- CCSM
- CheckMates Labs
- TechTalks and AI Events
- CCSM Elite
Local User Groups
- Upcoming Events
- Americas
  - Brazil
  - Canada
  - The Caribbean
  - Central US
  - Eastern US
  - Latin America
  - Mid-Atlantic US
  - Pacific Northwest
  - Southeast US
  - US Federal
  - Western US
  - US Utilities
- EMEA
  - Czech Republic and Slovakia
  - Denmark
  - Netherlands
  - Germany
  - Sweden
  - United Kingdom and Ireland
  - France
  - Spain
  - Norway
  - Ukraine
  - Baltics and Finland
  - Greece
  - Portugal
  - Austria
  - Kazakhstan and CIS
  - Switzerland
  - Romania
  - Turkey
  - Belarus
  - Belgium & Luxembourg
  - Russia
  - Poland
  - Georgia
  - DACH - Germany, Austria and Switzerland
  - Iberia
  - Africa
  - Adriatics Region
  - Eastern Africa
  - Israel
  - Nordics
  - Middle East and Africa
  - Balkans
  - Italy
  - Bulgaria
  - Cyprus
- APAC
  - Korea
  - Mongolia
  - Bangalore
  - Greater China
  - Australia/New Zealand
  - Philippines
  - Japan
  - Singapore
  - India
  - Thailand
  - Taiwan
  - Hong Kong
  - Indonesia
Partners
- Welcome Partners!
More
- Non-English Discussions
- More
  - Exclusive Content
  - CPX 2025 Content
  - R8x Training Videos
- Message Views
  - Recent Messages
  - Recent Threads
- Contests
  - How-To Video Contest
  - CheckMates Everywhere 5th Birthday
  - Paradigm Shifts: Adventures Unleashed
  - Toolbox Contest 2024
- Blogs
  - Careers at Check Point
  - The CheckMates Blog
  - Threat Intelligence Reports
- Off-Topic Discussions
ABOUT CHECKMATES & FAQ
- About CheckMates & FAQ
- Community Guidelines
Sign In
Leaderboard
Events

CheckMates Fest 2026Join the Celebration!

AI Security MastersE1: How AI is Reshaping Our World

MVP 2026: SubmissionsAre Now Open!

What's New in R82.10?

Overlap in Security ValidationHelp us to understand your needs better

CheckMates Go:R82.10 and Rationalizing Multi Vendor Security Policies

Turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Search instead for

CheckMates
:
Products
:
General Topics
:
Suspicious Traffic of gvt1.com

Subscribe to RSS Feed
Mark Topic as New
Mark Topic as Read
Float this Topic for Current User
Bookmark
Subscribe
Mute
Printer Friendly Page

All communityThis categoryThis boardKnowledge baseUsersProducts

cancel

Turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Search instead for

Are you a member of CheckMates?

‎2018-02-16 10:10 AM

Suspicious Traffic of gvt1.com

Hi All,

I have taken monthly report of top 10 application from Smart Event and I found traffic for gvt1.com among them. Risk for this URL is 0-unknown for Checkpoint.

I have researched a bit so some are saying that it is for Chrome browser update and some are saying that it is malware. Anyone has idea about this. If it is virus/malware then how we can remove it, IPS Blade has any signature for this?

Tags:
suspicious traffic of gvt1.com

All forum topics
Previous Topic
Next Topic

‎2018-02-16 01:02 PM

We'd have to look at the actual traffic in question to see if it's malicious or not.

‎2018-02-18 05:07 PM

Hi, do you still see such traffic ? Do you have the same categorization ?

‎2018-02-19 04:35 AM

XavierBens

Hi,

Let me check with end users. I will update.

‎2018-02-20 03:12 AM

Gaurav_Pandya

Hi,

We have Scan the machine with Antivirus from which this URL is accessed but didn't find anything. Also checked in the smart event logs and this traffic comes immediate after google services so seems to be legitimate traffic.

However I will keep an eye.

Kudo

‎2018-10-22 10:54 PM

Gaurav_Pandya

Hello so far those sites are used to update chrome.

https://productforums.google.com/forum/#!topic/chrome-admins/I5WLpuxclI4;context-place=topicsearchin...

‎2018-10-22 10:10 PM

Hi,

gvt1.com owner is google.com see https://www.whois.com/whois/gvt1.com . GVT is an acronym for Google Video Transcoding and is used i.e. as local cache server for youtube videos and google product updates (chrome, google earth).

I don't think google is deploying malware. Therefore it's safe to say that traffic should be fine.

Don't trust those website saying this is a virus and offering some suspicious software to "remove" this "virus" off your systems.

Cheers,

Alex

‎2018-10-23 05:48 AM

Hi Alex/Pablo,

Thanks for the information.