Anti-Phishing Policy

1. DEFINITION OF PHISHING

Phishing is a fraudulent practice consisting of sending electronic communications that appear to originate from reliable sources, with the aim of unlawfully obtaining confidential information (passwords, banking data, card numbers).

2. HSO GLOBAL'S COMMITMENT

HSO Global is fully committed to the fight against phishing and any type of identity theft. We adhere to the highest standards of security and business ethics to protect both our customers and the community at large. Under no circumstances will HSO Global:

Send emails or messages requesting sensitive personal information (passwords, account numbers) in an unsecured manner.
Use domains or addresses that fraudulently imitate other entities.
Tolerate third parties using our brand or systems to carry out phishing attacks.

Liability Disclaimer: The User must only respond to emails received from the official domains @hsoglobal.xyz or @huronsmithoil.com. Any communication received from a different domain does not originate from our organization, must be reported immediately, and HSO Global shall not be held liable for any damages, losses, or incidents of any nature arising from such fraudulent communications.

3. OFFICIAL EMAIL DOMAINS

All legitimate electronic communications from HSO Global, its entities, and its employees will be sent exclusively from the following official domains:

@hsoglobal.xyz
@huronsmithoil.com

Any email purporting to come from HSO Global but using a different domain (e.g., variations with hyphens, generic domains such as @gmail.com or @yahoo.com, or domains with typographical errors) must be considered fraudulent and reported immediately.

4. SECURITY MEASURES IMPLEMENTED

Robust Authentication: we implement SPF, DKIM, and DMARC on all our official domains to prevent email spoofing.
TLS Encryption: all communications between our servers and users' browsers are conducted under secure protocols (HTTPS).
Internal Awareness: we periodically train our employees in detecting and preventing social engineering attacks.
Continuous Monitoring: we monitor API usage and access to detect anomalous patterns that could indicate a compromised account.

5. USER ADVICE

Always verify that the sender of any communication appearing to come from HSO Global uses exclusively the official domains @hsoglobal.xyz or @huronsmithoil.com.
Do not click on suspicious links or download attachments from unexpected emails.
If you receive a communication requesting confidential information, do not reply and report it immediately to our team.
Always access the Site by typing the URL directly into the browser; avoid accesses from links received via instant messaging or email.

6. REPORTING PROCEDURE