geforcepro[.]pro

PhishDestroy identifies geforcepro.pro as an active NVIDIA GeForce brand impersonation domain under investigation for credential theft operations. The domain, registered through Porkbun LLC on March 24, 2026, currently resolves to IP 188.114.97.3 and holds a Let's Encrypt SSL certificate. VirusTotal analysis shows zero detections (1/95 engines) as of seed 6ab921, indicating this threat remains undetected by most security vendors. The domain's recent creation date and low detection rate suggest an emerging campaign likely targeting gamers seeking NVIDIA drivers or services. This domain poses specific risks through its impersonation of NVIDIA's GeForce platform, a high-value target given the widespread use of NVIDIA services in gaming and professional graphics markets. The registration via Porkbun LLC, a registrar known for low-friction domain registration, combined with the use of legitimate SSL certificates, creates a deceptive appearance of authenticity. The domain's IP address (188.114.97.3) hosts other recently registered domains that may be part of the same campaign, though full infrastructure analysis remains ongoing. Users interacting with this domain risk credential theft, session hijacking, or malware delivery disguised as NVIDIA software updates or driver packages. Users who visited geforcepro.pro should immediately check their browsers for any saved credentials or active sessions related to NVIDIA services. If any interaction occurred, change passwords on official NVIDIA accounts and enable multi-factor authentication. Scan devices with updated antivirus software and monitor for unusual account activities or unauthorized transactions. Report any suspicious activities to NVIDIA's official support channels and consider blocking the domain at your network perimeter. Avoid downloading files from this domain and verify all NVIDIA-related links through official communication channels before interaction.