hhasb[.]com

This domain is flagged for elevated-risk generic phishing activity targeting entities associated with Petronas-licensed engineering and maintenance services. Analysis indicates the site impersonates HHA Associates, a legitimate contractor, to deceive visitors into submitting sensitive corporate or financial information under false pretenses. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain hhasb.com was registered on July 22, 2006, through Web Commerce Communications Limited dba WebNic.cc and currently resolves to IP address 202.187.32.74. Security vendors on VirusTotal flag the domain with 13 out of 95 detections, while it appears on one active security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, indicating no credibility. The site uses an SSL certificate issued by Google Trust Services and deploys technologies including PHP, Nginx, OpenResty, Unpkg, jsDelivr, and AOS, which are consistent with modern phishing infrastructure designed to evade detection and enhance legitimacy. To mitigate exposure, organizations should block the domain hhasb.com and its associated IP 202.187.32.74 at the network perimeter. Security teams are advised to scan endpoint logs for connections to this domain or IP, particularly from systems used by procurement, finance, or engineering personnel. User awareness training should emphasize the risk of impersonation sites claiming affiliation with energy sector contractors. Additionally, domain registrars and hosting providers should be notified of the malicious activity to facilitate takedown procedures and prevent further abuse of the infrastructure.