# fnhub.us — SUSPICIOUS

> Domain fnhub.us masquerades as FN Analytics to steal search rank data. This fake rank checker phishes login credentials.

## Summary
PhishDestroy identifies fnhub.us as an active fake rank checker phishing site designed to deceive users into entering sensitive login data under the guise of checking search rankings. The domain presents itself as FN Analytics Real Rank Checker, implying functionality that does not exist while harvesting credentials for malicious purposes. This is a clear credential theft campaign targeting SEO professionals and webmasters.  

This domain was flagged by PhishDestroy using seed ba9259 and shows no detections on VirusTotal (0/95 engines as of current scan). It was registered through DynaDots LLC on March 16, 2026, and resolved to IP 188.114.96.3. The site uses a valid Let’s Encrypt SSL certificate, adding false legitimacy. With no blocklist entries yet and low detection rates, this scam remains highly dangerous despite current obscurity.  

To mitigate exposure, users must avoid interacting with fnhub.us entirely. If credentials or sensitive data were entered, immediately reset passwords and enable two-factor authentication on affected accounts. Security teams should block the domain at the network level and report indicators to threat intelligence feeds. This campaign demonstrates how quickly phishing domains can scale using trust cues like valid SSL and professional branding before detection catches up.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP ?)
- Page title: FN Analytics | Real Rank Checker

## Domain Intelligence
- Registered: 2026-03-16 22:47:40
- Registrar: DYNADOT LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8b963331-8927-48c6-9b30-2283186aa1b4
- PhishDestroy: https://phishdestroy.io/domain/fnhub.us/
- LLM endpoint: https://phishdestroy.io/domain/fnhub.us/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fnhub.us/
Last updated: 2026-04-12