fnhub[.]us

PhishDestroy identifies fnhub.us as an active fake rank checker phishing site designed to deceive users into entering sensitive login data under the guise of checking search rankings. The domain presents itself as FN Analytics Real Rank Checker, implying functionality that does not exist while harvesting credentials for malicious purposes. This is a clear credential theft campaign targeting SEO professionals and webmasters.

This domain was flagged by PhishDestroy using seed ba9259 and shows no detections on VirusTotal (3/95 engines as of current scan). It was registered through DynaDots LLC on March 16, 2026, and resolved to IP 188.114.96.3. The site uses a valid Let’s Encrypt SSL certificate, adding false legitimacy. With no blocklist entries yet and low detection rates, this scam remains highly dangerous despite current obscurity.

To mitigate exposure, users must avoid interacting with fnhub.us entirely. If credentials or sensitive data were entered, immediately reset passwords and enable two-factor authentication on affected accounts. Security teams should block the domain at the network level and report indicators to threat intelligence feeds. This campaign demonstrates how quickly phishing domains can scale using trust cues like valid SSL and professional branding before detection catches up.