XacBank

ХасБанк · Bank

⚠ 3 active threat(s) detected

See the open-source evidence below. Bilig is not an official representative of XacBank.

3 threat(s) detected

3 fake site(s) impersonating XacBank’s name, logo or brand were found in open sources. Full evidence — domains, screenshots and risk assessment — is available in the complete report.

⚠ 2 of these carry a login / password form and may be actively harvesting credentials.

📣 1 fake ad(s) are actively running on Facebook/Instagram, using your name without authorization.

⭐ FREE SAMPLE — this is what the full evidence looks like

Threat report — XacBank

Prepared for: XacBank · 2026-08-17

🌐 Fake websites

Phishing 🔒 login/password form

e-xacbank.com

Risk: 95/100

What is it?

A fake website copying XacBank's logo and design to look like the official site (real address: xacbank.mn).

How it harms you

It shows a login / password form and steals the credentials you type — attackers then drain accounts or take loans in your name.

🛡️ How to stay safe

Check the address bar — only xacbank.mn is genuine. Never enter your password after clicking a link.

Technical evidence · captured: 2026-07-22 09:57 · final URL: https://e-xacbank.com/ · IP: 202.170.68.182
SHA-256: aec4b773fd746a4fae52f098bffb0b17b8d0d993e5a5eb3b01aff59b7387a47a

One finding is unlocked below — the report has exactly this level of detail. The remaining 2 finding(s) are in the full report.

🔒 Locked findings (2)

Risk 95/100 Phishing

e-x••••nk.mn

first seen: 2026-07-22 · 🔒 login/password form · IP 202.21.96.•••

Risk 95/100 Scam

Хас•••нк

Source: Meta Ad Library · captured: 2026-07-22

This is a summary list. Full domains and advertiser names, screenshot evidence, IPs, SHA-256 hashes and detailed analysis are in the full report.

Get the full report

A complete report with the domain, IP, screenshot, SHA-256 evidence hash and risk score of every detected site. One-time purchase.

Full domain and advertiser name for every detected site/ad
Screenshots — court-grade evidence with SHA-256 hashes
IP address, hosting, first-seen date, final URL
Risk score plus "what it is / how it harms / how to stay safe"
Cloaking probe results and campaign clusters when found
Security posture: exposed services, TLS, known data breaches

Get report · ₮349,000

Pay via QPay · report unlocks instantly

🔐 Security posture

✓ No matching records found in the public breach directory (HIBP).

2 exposed service(s) and 0 known vulnerabilit(y/ies) (CVE) were found on the official servers. The detailed technical list is withheld from the public to avoid aiding attackers — it is shared responsibly with the company only.

Source: Shodan InternetDB (passive, open) · TLS certificate. No servers were probed.

Report a scam

Seen a suspicious ad, page or message spreading under XacBank’s name? Let us know — an analyst will verify it and add it to monitoring.

Bilig is not an official representative of this company. This report is the result of open-source monitoring and is for informational purposes.