xkssuper[.]top

PhishDestroy analysis confirms xkssuper.top is operating as a Netflix credential phishing site designed to steal login details and payment information. The fraudulent domain mimics the legitimate Netflix login page, tricking visitors into entering their email address and password. Once harvested, these credentials are used to hijack Netflix accounts, make unauthorized purchases, or sold on dark-web marketplaces. The scam relies on social engineering—urging users to “verify account details” to avoid suspension—while the fake site collects everything entered into the bogus login form.

This domain was flagged by PhishDestroy on March 27, 2026, 00:24 UTC. Publicly available telemetry from VirusTotal shows 0 detections out of 95 engines as of the same moment, indicating the site remains undetected by most antivirus platforms. The domain was registered through Dynadot LLC and is currently resolving to IP address 188.114.97.3. Let’s Encrypt issued the SSL certificate, giving the phishing site an HTTPS padlock to appear legitimate. Despite its recent creation and low detection rate, the site is actively hosting a convincing replica of the Netflix login interface and is classified as active by PhishDestroy.

If you visited xkssuper.top or entered any information on the site, immediately change your Netflix password using the official site or app. Enable two-factor authentication on your Netflix account and review recent payment activity for unauthorized charges. Use a password manager to avoid manually typing credentials on suspicious sites in the future. Report the fraudulent domain to Netflix’s phishing inbox at reportphishing@netflix.com and forward any suspicious emails to that same address. Clear your browser cache and cookies to remove any saved session tokens that may have been exposed. Monitor your email and financial accounts closely for signs of account takeover or fraudulent transactions.