01. Definition of phishing
Phishing is a fraudulent practice involving the sending of electronic communications that appear to originate from trusted sources —such as HSO Petroleum Services— with the aim of deceiving the recipient into revealing confidential information, such as passwords, bank account numbers, or credit card details. These communications often use logos, designs, and email addresses that mimic official ones, creating a false sense of legitimacy.
02. HSO Petroleum Services' commitment
HSO Petroleum Services undertakes a total and unwavering commitment to combating phishing and any form of identity theft. We adhere to the highest standards of security, business ethics, and industry best practices to protect both our customers and the community at large. Under no circumstances will HSO Petroleum Services:
- Send unsolicited emails or messages requesting sensitive personal information, such as passwords, bank account numbers, or credit card numbers.
- Use domains or email addresses that fraudulently imitate those of other entities.
- Tolerate third parties using our brand, logos, or systems to carry out phishing attacks.
03. Liability disclaimer
The User must respond exclusively to emails received from the company's official domains. Any communication received from a different domain —such as variations with hyphens, generic domains like @gmail.com or @yahoo.com, or domains with typographical errors— does not originate from our organization, must be reported immediately, and HSO Petroleum Services assumes no responsibility for damages, losses, or incidents of any nature arising from such fraudulent communications.
04. Official email domains by entity
Legitimate electronic communications must originate only from domains actually controlled, verified and authorized by the relevant entity. HSO does not state that all entities may use all domains interchangeably. The following table must be kept current according to the domains actually verified.
| Entity | Authorized email domains |
|---|---|
| HSO Petroleum Services LLC | @hsopetroleum.com |
| Huron Smith Oil Co. | @huronsmithoil.com |
| HSO Global LLC | @hsoglobal.xyz |
| HSO Trade LLC | @hsotrade.com |
05. Security measures implemented
To prevent forgery and misuse of our corporate identity, we have implemented multiple layers of security:
- Robust email authentication: we have strictly configured SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting & Conformance) protocols on all our domains to prevent email spoofing.
- Communication encryption: all communications between our servers and users' browsers are conducted over HTTPS with TLS (Transport Layer Security) encryption, ensuring the confidentiality and integrity of transmitted data.
- Internal awareness: we periodically train all our employees in detecting and preventing social engineering and phishing attacks, reinforcing the security culture.
- Continuous monitoring: we proactively monitor the use of our platforms and APIs to detect anomalous patterns that could indicate compromised accounts or unauthorized access attempts.
06. User advice
To protect yourself against phishing, we recommend following these practices:
- Always verify that any communication appearing to come from HSO uses only the authorized domain of the corresponding entity. Be cautious of hyphenated variations, generic domains, typographical errors or domains not listed in the table above.
- Do not click on suspicious links or download attachments from unexpected or unsolicited emails.
- If you receive a communication requesting confidential information in an urgent or threatening manner, do not reply and report it immediately through our official channels.
- Always access the Site by typing the URL https://www.hsopetroleum.com directly into your browser's address bar; avoid accessing it via links received through instant messaging, SMS, or email.
07. Reporting procedure
If you suspect you have been the victim of a phishing attempt involving HSO Petroleum Services, or if you receive any fraudulent message using our name or brand, please notify us immediately via email at contact@hsopetroleum.com. Our security team will act as quickly as possible to investigate the incident, take appropriate corrective measures, and cooperate with the relevant authorities if necessary.
08. Contact
For any matters related to this policy:
- Email: contact@hsopetroleum.com
- Phone: +1 (866) 954-5938
- Postal address: 204 Hays St, Batesville, Mississippi, 38606, USA