Search by domain, entity or sector, or filter by category and server. Third-party marks
domains best read as ordinary Gaia customers rather than part of the estate; they are included here
because they share infrastructure, not because they share an owner.ابحث حسب النطاق أو الكيان أو القطاع، أو صفِّ حسب الفئة والخادم. "عميل طرف ثالث" يشير إلى نطاقات تُقرأ
كعملاء اعتياديين لغايا لا كجزء من الشبكة؛ أُدرجت هنا لأنها تتشارك البنية التحتية، لا لأنها تتشارك مالكًا.
Most of these are no longer live (check the Status column). A suspended domain is
not weaker evidence than a live one: registration, hosting and mail records outlast a website
going dark.معظم هذه النطاقات لم تعد تعمل (راجع عمود الحالة). النطاق الموقوف ليس دليلًا أضعف من العامل:
سجلات التسجيل والاستضافة والبريد تبقى بعد اختفاء الموقع.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-15
DNSDNS
A → Cloudflare-proxied (172.67.207.225, 104.21.22.246); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 ip4:188.40.140.252 ip4:159.69.139.89 +a +mx ~all; carries a Google Search Console verification TXT
No DMARC record
WHOISWHOIS
Matches the existing record: created 2017-08-02, Dynadot Inc.
Live siteالموقع الحي
A "SOON" coming-soon landing page with placeholder images.
Waybackأرشيف Wayback
A 403 from 2018, then routine crawler noise.
Assessmentالتقييم
Linked to the adaa-motors entity — Firas Al-Dabbas's car-assembly/trade company, JAC Motors (China) licensee, and 2018 buyer of an unstated stake in Siamco (see siamco.sy below and the siamco entity). Also the registrant organization behind siamco.sy — the one link discovered between two otherwise-separate bare domains in this list.
alardia.net
Al Ardia News Agency · وكالة الأرضية الأخبارية — Arabic-language news portalوكالة الأرضية الأخبارية — بوابة إخبارية باللغة العربية
Third-party clientعميل طرف ثالث
Liveيعمل
2025-10-26
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A, direct); NS → edna.ns.cloudflare.com / glen.ns.cloudflare.com
SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all
DMARC: p=none, rua=dmarc-reports.cloudflare.net
WHOISWHOIS
Matches the existing record: created 2025-10-26, Dynadot Inc.
Live siteالموقع الحي
The domain is NOT sinkholed right now — it resolves normally to Server A and serves a live, fully built Arabic-language news portal, وكالة الأرضية الأخبارية ("Al-Ardia News Agency"): sections for Politics/Business/Science/World news, social video, podcasts, user registration/login, and articles dated as recently as January 2026.
Assessmentالتقييم
This directly contradicts the existing purpose text ("currently sinkholed by a security vendor; no recoverable content"). Whatever sinkhole was observed previously either lifted or was specific to that network/point in time — the domain is now a real, active, content-heavy site hosted directly on Server A. Given it's on Server A itself (not just Cloudflare-fronted), this is worth flagging for a purpose-text update and a closer look at who operates it — a functioning news agency is a much more significant tenant on this infrastructure than a dead sinkholed domain.
MX → mail.asas.sy → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers)
No SPF or DMARC record at all
WHOISWHOIS
.sy registry record: registered 2018-07-03. Sponsoring Registrar: "Syrian Monster" — a domestic Syrian registrar, not Dynadot. Registrant Organization: "ASAS" (its own real name, not privacy-redacted) — matches its purpose, اساس للتطوير والعمران (Asas for Development and Urbanism).
Waybackأرشيف Wayback
Snapshots 2023–2024, HTTP 200.
Assessmentالتقييم
Independently registered through a different, domestic registrar (not the estate's Dynadot account), with its own real registrant name on file — a clean operator-independence signal. Originally read from that alone as one of the cleanest "unrelated" domains in this batch; corrected 2026-08-14 after an Enab Baladi report on a boycott campaign named "أساس للتطوير والعمران" directly as one of Mohammed Hamsho's companies, an exact match for this registrant name (see the new asas entity and enabbaladi-hamsho-boycott-2026 source). The technical independence still stands as a fact about who operates the domain; it was simply the wrong signal to read for ownership. MX confirmed on Server B — no cross-server split.
atlasoflaw.com
Law firm — third-party clientمكتب محاماة — عميل خارجي The only domain in the dataset not registered at Dynadotالنطاق الوحيد في قاعدة البيانات غير المسجَّل لدى Dynadot
Third-party clientعميل طرف ثالث
Liveيعمل
2019-04-03
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
Registered 2019-04-03. Registrar: Hosting Concepts B.V. d/b/a Registrar.eu — not the estate's Dynadot account. Registrant Organization: "UCG L.L.C." (United Arab Emirates), not privacy-redacted.
Live siteالموقع الحي
Unreachable during this pass — both direct fetch and plain curl timed out with no response.
Waybackأرشيف Wayback
Multiple snapshots 2021–2023, all HTTP 200. Title "أطلس القانون" (Atlas of Law) — a real Arabic-language law-firm site.
Assessmentالتقييم
"UCG L.L.C." is United Communication Group, an Abu Dhabi/Damascus web-hosting and development vendor — the developer/registrar-of-record for this client, not a Hamsho or Gaia signal. Same vendor also registered elegantautomotive.sy below.
awtad-albarakeh.com
Awtad Al Barakeh — stone cladding, a named Gaia clientأوتاد البركة — تكسية حجرية، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2025-02-24
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A (apex) → 65.21.200.112 — Server A itself
NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)
MX → apex → 65.21.200.112
SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all
DMARC: p=none
WHOISWHOIS
Registered 2025-02-24. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Snapshots from Feb and Jul 2025, plus an api. subdomain.
Assessmentالتقييم
Genuine Syrian stone-export business with a Gaia design credit (the site's own footer spells it "Gaya", a stylistic variant, not a different vendor) — ordinary client profile.
awtad-alkheir.vip
Awtad Al Kheir — interior design and contracting, Cairoأوتاد الخير — تصميم داخلي ومقاولات، القاهرة DMARC rua points to the Gaia operator's Gmail addressعنوان الإبلاغ في سجل DMARC يشير إلى حساب Gmail الشخصي لمشغّل شركة "غايا"
Third-party clientعميل طرف ثالث
Liveيعمل
2025-03-26
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
Snapshots from July 2025 — contact-us, get-in-touch, investors and a portfolio page (Madinaty apartment finishing).
Assessmentالتقييم
The DMARC-to-Gmail pattern is the same technical fingerprint this register elsewhere treats as strong operator evidence (e.g. Union Electrical Group) — but per the register's own rule that is an operator signal (Gaia administers this client's mail), not an ownership signal. Combined with a real, unrelated Cairo interior-design business and no textual link to Hamsho or Sama Alsham, this reads as Gaia providing full mail administration for an ordinary client, not a hidden estate holding.
ayawater.com
Aya Waterآيا ووتر
Consumerاستهلاكي
Mail onlyبريد فقط
2006-11-12
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all — notably does not include 188.40.140.252
No DMARC record
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Created 2006-11-12, Dynadot Inc — not previously on record; adding created/registrar here.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice seen across this cluster.
Assessmentالتقييم
No entity attached. SPF omits the usual Server B address (188.40.140.252) that most of this cluster carries — read with the BOC relay line above, this is not a divergence: ayawater.com (2006-11-12) is a BOC-era domain whose SPF was never migrated to Server B, the cleanest single illustration of the BOC→Gaia handover in the register.
baladei.com
Baladi — foodبلدي — أغذية
Consumerاستهلاكي
Mail onlyبريد فقط
2018-08-29
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.24.64, 172.67.217.81); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
Created 2018-08-29T18:55:43Z, Dynadot Inc — not previously on record; adding created/registrar here. Identical timestamp, to the second, to baladi-m.com's creation date.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, a generic hosting-suspended notice.
Assessmentالتقييم
No entity attached. The identical registration timestamp with baladi-m.com indicates both were registered in the same batch/session — likely the same operator registering both spellings at once, same pattern as the Sham Aqua Park and Tahweel clusters.
baladi-m.com
Baladi — foodبلدي — أغذية
Consumerاستهلاكي
Mail onlyبريد فقط
2018-08-29
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
Extensive real content from 2003 (about.html, activities-a.html) — a genuine, built early-2000s corporate site.
Assessmentالتقييم
"CEC" already exists elsewhere in this register as Cham Engineering and Contracting's abbreviation in a different context (see the sama-al-arab-tv/CEC Wayback-quirk note) — worth checking whether this domain is the same CEC or a coincidental initialism before drawing any connection; not established here.
chamcontracting.com
Cham Engineering and Contractingشركة شام للهندسة والمقاولات Now serves only an "Under Construction" placeholder; the 2016 site survives in the Internet Archive. SPF authorises ip4:188.40.140.252 (Server B) directly.لا يعرض النطاق حالياً سوى صفحة "قيد الإنشاء"؛ موقع عام 2016 محفوظ في أرشيف الإنترنت. سجل SPF يصرّح مباشرة لعنوان IP 188.40.140.252 (الخادم B).
Industryصناعة
Dormantخامل
2015-07-25
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.94.126, 172.67.135.251); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
DMARC: p=none, rua → Cloudflare's own aggregator — not the [email protected] pattern seen elsewhere in the estate
WHOISWHOIS
Registered 2026-03-23 — a brand-new registration, not a legacy domain. Registrar: Hosting Concepts B.V. d/b/a Registrar.eu (IANA #1647) — not the Dynadot account the rest of the estate sits in. Registrant redacted under standard privacy.
Live siteالموقع الحي
A bare Apache/cPanel directory listing (cgi-bin/ only) — effectively unbuilt, last touched 2026-03-24.
Waybackأرشيف Wayback
2021 snapshot: a placeholder page, "Website under construction — Powered By Network EGYPT" (networkegypt.com), an unrelated Egyptian web-hosting shop. No Hamsho or Gaia trace at any point in its history.
Assessmentالتقييم
Consistent with third_party: independent DNS and a different registrar, no textual or ownership tie to Hamsho or Sama Alsham beyond sharing Gaia's hosting box.
dakfood.net
DAK / Dar Al-Khair — FMCG · داك فوود للغذائياتداك فوود — أغذية سريعة الاستهلاك Sama Alsham Group's own subsidiary page gives this as DAK's own domain and fax number — the same fax number Unipac lists as one of its own landlines.[email protected] هو عنوان التواصل الخاص بشركة الاتحاد للعبوات والتغليف (يونيباك) بحسب ملفها في دليل industrysy.com — النطاق نفسه ليس تحت علامة يونيباك.
Consumerاستهلاكي
Liveيعمل
2013-10-12
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
Created 2013-10-12, Dynadot Inc — not previously on record; adding created/registrar here.
Live siteالموقع الحي
A real, built FMCG site — nav for About/Products/Gallery/Quality/Services/Contact, an image slideshow, and a PHP contact form. The footer carries a web-vendor credit: "Design by Afkar" (www.afkar.sy) — a name not seen elsewhere in this register.
Assessmentالتقييم
The site is clearly live and built, not just a mail vhost — worth revisiting the mail_only status. "Afkar" (afkar.sy) is a new, previously-unrecorded web vendor credit; worth checking whether it built any other domains in the estate.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Created 2011-10-24, Dynadot Inc — not previously on record; adding created/registrar here.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate) — consistent with an unmaintained mail-only vhost.
Assessmentالتقييم
No entity currently attached. The SPF/MX pattern is identical to the rest of the consumer cluster on Server B; consistent with the cluster but no standalone confirmation of who runs it specifically.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.63.99, 172.67.145.34); NS → distinct Cloudflare pair (walk.ns.cloudflare.com, wilson.ns.cloudflare.com) — the only domain in the entire register on this pair, not just this batch; a full census found 62 domains on adam/brenna and 10 on edna/glen
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
No DMARC record
WHOISWHOIS
Created 2015-08-23, the same day as eblaair.com. Registrar: Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2023 (861 bytes — likely a stub/redirect page).
Assessmentالتقييم
Consistent with the existing ebla-airlines entity. Its singleton Cloudflare nameserver pair is administered from a different account than the rest of the estate, but Cloudflare draws pairs from a pool of roughly 2,500, so this carries a real coincidence rate (~1-in-2,500) for a single domain — read as a weak corroborating signal, not proof of a distinct operator.
DMARC: p=none, rua=mailto:[email protected] — the operator fingerprint already documented elsewhere in this register
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2013-01-29, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2018.
Assessmentالتقييم
Consistent with the existing ebla-trade-offshore entity; the DMARC-to-Gaia pattern adds another operator-level data point alongside Union Copper and Union Electrical Group.
elegantautomotive.sy
Elegant Automotiveإيليغانت أوتوموتيف
Third-party clientعميل طرف ثالث
Liveيعمل
2026-03-10
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
.sy registry record: registered 2026-03-10 — brand new. Sponsoring Registrar: "UCG" (United Communication Group), Registrant United Communication Group (UCG), contact [email protected] — UCG is the accredited .sy registrar of record here, not merely a footer credit.
Live siteالموقع الحي
Elegant Automotive Group — an automotive business with Damascus-area phone numbers; no address or vendor credit visible.
Waybackأرشيف Wayback
Not checked — the domain was only registered 2026-03-10, too recent for archived history.
Assessmentالتقييم
Same UCG vendor pattern as atlasoflaw.com: a real Damascus/Abu Dhabi web-hosting and registrar vendor handling this client's domain directly (as the .sy sponsoring registrar itself, not just a footer credit), unconnected to the Hamsho/Gaia cluster.
elmas-invest.com
Elmas Invest — Damascus real estate development, a named Gaia clientإلماس للاستثمار — تطوير عقاري في دمشق، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2025-06-16
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A (apex) → 65.21.200.112 — Server A itself
NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)
MX → apex → 65.21.200.112
SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all
DMARC: p=none
WHOISWHOIS
Registered 2025-06-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
الماس للتطوير العقاري والهندسي (Elmas for Real Estate Development and Engineering) — residential/commercial sales, rentals and property management in Damascus (Kafarsouseh, Shams Market). Footer: "من تطوير Gaia group" (Developed by Gaia group).
Waybackأرشيف Wayback
Snapshots from July 2025 (homepage, blog, contact, FAQs, listings) — an actively built multi-page site.
Assessmentالتقييم
Genuine operating real-estate business with an explicit "Developed by Gaia group" credit — the profile of an ordinary paying client, not an estate member.
emberly.vip
Emberlyإمبرلي
Third-party clientعميل طرف ثالث
Mail onlyبريد فقط
2025-07-31
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.12.83, 172.67.151.237)
MX → mail.emberly.vip → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers, matches SPF)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua → Cloudflare's own aggregator
WHOISWHOIS
Registered 2025-07-31. Registrar: Dynadot Inc. Registrant redacted under standard privacy.
Live siteالموقع الحي
Not tested live, consistent with mail_only status.
Waybackأرشيف Wayback
No snapshots found — too new/unindexed.
Assessmentالتقييم
Mail-only client on Server B; too new to have web history to check. MX and SPF agree on Server B — no cross-server split.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2014-06-01, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2018.
Assessmentالتقييم
No entity currently attached. The equestrian theme echoes Al-Ghabra and Seif Alsham elsewhere in this register, but nothing recovered here ties it to a specific person or company beyond the domain name — a lead, not a finding.
eso-solution.com
ESO SolutionsESO للحلول
Third-party clientعميل طرف ثالث
Mail onlyبريد فقط
2014-09-06
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.45.254, 172.67.221.177)
MX → mail.eso-solution.com → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers, matches SPF)
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Registered 2014-09-06 — the oldest creation date among the mail-only batch. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
Not tested live, consistent with mail_only status.
Waybackأرشيف Wayback
Snapshots 2018–2024, most recent real content 2023-10-30/2024-04-17 (HTTP 200) — a real, longstanding historical web presence.
Assessmentالتقييم
Mail-only client on Server B with genuine web history; nothing tying it to Hamsho or Sama Alsham. MX and SPF agree on Server B — no cross-server split.
DMARC: p=quarantine, pct=1, rua=mailto:[email protected] — the exact fingerprint already listed for this domain in data/servers.json
WHOISWHOIS
Created 2020-12-01, Dynadot Inc — not previously on record; adding created/registrar here.
Live siteالموقع الحي
A bare Apache "Index of /" directory listing with no files — consistent with its role as the corporate mail host (server3.gaia-group.co) rather than a public website.
Assessmentالتقييم
Confirms the existing gaia entity; matches data/servers.json's own fingerprint table exactly.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A, direct — not Cloudflare-proxied despite Cloudflare NS); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all
DMARC: p=none, rua=mailto:[email protected] — the same fingerprint documented in data/servers.json
WHOISWHOIS
Matches the existing record: created 2021-02-19, Dynadot Inc.
Live siteالموقع الحي
HTTP 200 with a zero-byte body on both http:// and https:// — resolves straight to Server A but serves nothing.
Assessmentالتقييم
Confirms the existing gaia entity via the DMARC fingerprint; the vhost itself is currently empty despite status: live.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2004-12-05, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2006; later entries include a suspended-account page (2025), consistent with mail_only status.
Assessmentالتقييم
Consistent with the existing ghabra entity.
hadeed-mmc.com
Hadeed MMC — steelحديد MMC — الصلب [email protected] is the official contact address on a 2016 letter signed by Mohammed Hamsho as Chairman of the Syrian Council for Metals and Steel[email protected] هو عنوان التواصل الرسمي في رسالة مؤرخة 2016 موقَّعة من محمد حمشو بصفته رئيس مجلس إدارة المجلس السوري للمعادن والصلب
Industryصناعة
Liveيعمل
2011-12-08
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 188.40.140.252 (Server B directly, not Cloudflare-proxied); NS → ns5/ns6.gaia-group.co — Gaia's own branded nameservers
Matches the existing record: created 2011-12-08, Dynadot Inc.
Waybackأرشيف Wayback
No snapshots retrieved in this pass.
Assessmentالتقييم
Consistent with the existing hadeed-mmc entity — the direct (non-proxied) Server B IP and Gaia's own nameservers are a slightly tighter operator signal than the Cloudflare-fronted domains elsewhere in this cluster.
hamsho-group.com
Hamsho Groupمجموعة حمشو Still a configured vhost with a mail. entry, but no public DNS. Registered two days after sama-holding.com.لا يزال مضيفاً افتراضياً مُهيَّأً بإدخال mail.، لكن دون DNS علني. سُجِّل بعد يومين من sama-holding.com.
Hamsho-namedحمشو
Not resolvingلا يُحلَّل
2018-06-28
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → none; NS → none; MX → none; TXT → none — no public DNS at all, on 1.1.1.1/8.8.8.8 alike
WHOISWHOIS
Matches the existing record: created 2018-06-28, Dynadot Inc.
Live siteالموقع الحي
Does not resolve — connection fails outright, consistent with status: unresolved.
Assessmentالتقييم
Confirms the existing record. The vhost/mail. entry referenced in the note is server-side configuration invisible from outside; nothing new to add from public DNS or WHOIS.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2013-07-11, Dynadot Inc.
Waybackأرشيف Wayback
Extensive real content from 2003–2004 (about_a.html, aboutus.html, accessories.html, activities.html) — a genuine, built GSM-handset retail site from that era.
Assessmentالتقييم
Consistent with the existing hamsho-communication entity.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) and 37.58.80.226 = server1.bocme.net (BOC, IBM/SoftLayer NL) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2006-09-19, Dynadot Inc.
Live siteالموقع الحي
HTTP 200 with a zero-byte body on both http:// and https:// — a genuinely empty vhost, not an error page. Consistent with status: mail_only.
Assessmentالتقييم
Consistent with the existing jupiter-investment-tourism entity; no new findings.
maak-sy.com
Maak — fuel distribution app, a named Gaia clientمعاك — تطبيق توزيع وقود، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2025-09-06
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A (apex) → 65.21.200.112 — Server A itself
NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)
MX → apex → 65.21.200.112
SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all
DMARC: p=none
WHOISWHOIS
Registered 2025-09-06. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
Maak (معَك) — a Syrian fuel-delivery app (gas, diesel, fuel tanks) with home delivery, Damascus. Reports 2,067 downloads, 982 customers. Footer: "Powered by Gaia Group" (gaia.sy).
Waybackأرشيف Wayback
Not checked separately — footer credit and live content already confirm the Gaia relationship directly.
Assessmentالتقييم
Genuine consumer delivery app with an explicit Gaia credit — ordinary client.
marcom.sy
Marcom Company — media and marketingشركة ماركوم — الإعلام والتسويق Previously observed at sinkhole.paloaltonetworks.com (Palo Alto DNS Security); as of 2026-08-13 resolves normally on three resolvers — the block was network-specific, not a property of the domain.شوهد سابقاً موجَّهاً إلى sinkhole.paloaltonetworks.com (خدمة DNS Security التابعة لـ Palo Alto)؛ اعتباراً من 2026-08-13 يُحلَّل بشكل طبيعي على ثلاثة خوادم حل مختلفة — كان الحظر خاصاً بشبكة معينة، لا خاصية للنطاق نفسه.
Consumerاستهلاكي
Liveيعمل
—
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.50.245, 172.67.215.5) — confirmed on the default resolver, @1.1.1.1, and @8.8.8.8 alike, no sinkhole address on any of them
No public WHOIS — .sy domains generally have none.
Live siteالموقع الحي
A live, bare Apache "Index of /" directory listing with no files — real content, not an error.
Assessmentالتقييم
This domain resolves normally on three independent public resolvers today — the Palo Alto sinkhole the existing note describes is not reproducing now, which is exactly the network-specific artifact DOMAIN-RESEARCH.md warns about. Either the vendor block has lifted, or it was specific to the network the original observation was made from. Worth updating status away from unresolved if this holds up.
memoict.com
MEMO — electronicsميمو — الإلكترونيات Redirects to en/index.php, which currently returns a server error.يُعيد التوجيه إلى en/index.php، التي تُرجع حالياً خطأ خادم.
Consumerاستهلاكي
Dormantخامل
2008-01-13
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:188.40.140.247 ~all — an extra IP (.247) beyond the usual Server B address
DMARC: p=quarantine, pct=1, rua=mailto:[email protected] — the same reporting address the register already tracks as a Server B/Gaia fingerprint
WHOISWHOIS
Matches the existing record: created 2008-01-13, Dynadot Inc.
Live siteالموقع الحي
The root 302-redirects to /en/index.php, which returns HTTP 500 — matches the existing note exactly.
Assessmentالتقييم
Consistent with the existing memo entity. The DMARC rua address is the same [email protected] fingerprint already documented in data/servers.json, reaffirming this domain's place in the shared Server B/Gaia operator infrastructure.
meo-eng.net
MEO Engineering — site erroring/unreachable since at least 2023MEO للهندسة — الموقع متعطل/لا يعمل منذ 2023 على الأقل
Third-party clientعميل طرف ثالث
Liveيعمل
2021-11-17
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A, direct); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +a +mx +ip4:65.21.200.112 -all (hard fail, stricter than the ~all used elsewhere)
Matches the existing record: created 2021-11-17, Dynadot Inc.
Live siteالموقع الحي
No longer erroring — it now serves a proper "scheduled maintenance" holding page ("We'll be back with something amazing shortly"), with an email-signup prompt and Facebook/Twitter/Instagram links.
Assessmentالتقييم
Consistent with the existing third_party/live record, though the site's presentation has moved on from a bare error to an intentional maintenance page since the purpose text was last written — a soft update, not a contradiction.
palmyravillage.com
Tamary Palmyra Village — resortقرية ومنتجع تدمر Holding page's P.O. Box and fax match Hamsho International Group's own contact detailsصندوق البريد ورقم الفاكس في الصفحة التعريفية يطابقان بيانات التواصل الخاصة بمجموعة حمشو الدولية نفسها
Consumerاستهلاكي
Mail onlyبريد فقط
2007-11-05
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.133.187, 104.21.14.11); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) and 37.58.80.226 = server1.bocme.net (BOC, IBM/SoftLayer NL) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2007-11-05, Dynadot Inc.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, a generic hosting-suspended notice — no longer the custom holding page with the Hamsho P.O. Box/fax described in the existing note.
Assessmentالتقييم
Consistent with the existing palmyra-village-resort entity. The holding page the note describes appears to predate the account suspension — worth a Wayback check to confirm it still exists in history.
plainxfashion.com
PlainX Fashionبلين إكس فاشن
Third-party clientعميل طرف ثالث
Mail onlyبريد فقط
2025-08-02
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (104.21.59.18, 172.67.167.150)
MX → mail.plainxfashion.com → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers, matches SPF)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua → Cloudflare's own aggregator
WHOISWHOIS
Registered 2025-08-02 — the newest in this sub-batch. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
Not tested live, consistent with mail_only status.
Waybackأرشيف Wayback
No snapshots found — too new/unindexed.
Assessmentالتقييم
Mail-only client on Server B; too new to have web history to check. MX and SPF agree on Server B — no cross-server split.
realitybalance.com
Reality Balance — personal-development coaching, a named Gaia clientريأليتي بالانس — تدريب على التطور الشخصي، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2025-01-07
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
MX → mail.retjenu.com → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers, matches SPF)
SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all — includes Server B's own IP directly
No DMARC record
WHOISWHOIS
Registered 2022-06-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
Not tested live, consistent with mail_only status.
Waybackأرشيف Wayback
Old snapshots 2011–2016 (redirects, ending in a 403) — a long-dead prior web presence, consistent with the domain now being mail-only.
Assessmentالتقييم
Mail-only client on Server B; historical web content long gone. MX and SPF agree on Server B — no cross-server split.
royaltobacco.co
Royal Tobaccoرويال توباكو
Consumerاستهلاكي
Mail onlyبريد فقط
2025-09-01
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua=dmarc-reports.cloudflare.net (Cloudflare's own default reporting address, not a custom one)
WHOISWHOIS
Created 2025-09-01, Dynadot Inc — not previously on record; adding created/registrar here. Much more recent than the rest of the consumer cluster, which mostly dates to 2006–2019.
Live siteالموقع الحي
A plain Arabic "Under Construction" (الموقع قيد الإنشاء) page with no other content.
Assessmentالتقييم
No entity attached. A recent (September 2025) addition to the Server B consumer cluster, still in the setup stage — worth revisiting once it's built out further.
sah-metaltrading.com
SAH Metal TradingSAH لتجارة المعادن
Industryصناعة
Mail onlyبريد فقط
2022-02-08
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.147.53, 104.21.47.110); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
Matches the existing record: created 2022-02-08, Dynadot Inc.
Live siteالموقع الحي
HTTP 526 (Cloudflare SSL handshake failure to the origin) — unreachable.
Waybackأرشيف Wayback
Real content from 2023, plus a cpanel subdomain snapshot.
Assessmentالتقييم
No entity currently attached. "SAH" reads plausibly as an initialism, but nothing recovered here identifies the underlying company beyond the domain name.
salamatak-hse.com
Salamatak — HSE equipment, a named Gaia clientسلامتك — معدات السلامة والصحة المهنية، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2024-10-23
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DMARC: p=quarantine, rua → Cloudflare's own aggregator — not the Gaia Gmail pattern
WHOISWHOIS
Registered 2024-10-23. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
SALAMATAK (سلامتك) — Damascus (Bramakeh) occupational health-and-safety equipment supplier, claiming forty years in the field. Names client testimonials (Nadeem Mazloom, Rama Al-Salahi, Bashar Al-Tunesi). No web-vendor credit visible on this page.
Waybackأرشيف Wayback
Snapshots since December 2024.
Assessmentالتقييم
Genuine, long-established safety-equipment business — ordinary client, no textual link to Hamsho or Sama Alsham.
sama-athletic.com
Server A's own reverse-DNS hostname (sport.sama-athletic.com) — also hosts ns1/ns2 for the whole clusterسجل DNS العكسي الخاص بالخادم A نفسه (sport.sama-athletic.com) — يستضيف أيضاً خوادم الأسماء ns1/ns2 للعنقود بأكمله Server A's reverse DNS is sport.sama-athletic.com — its own canonical hostname, not a filler site. Recycled Arabic football articles (April 2018) are real content, still not an ownership signal.سجل DNS العكسي للخادم A هو sport.sama-athletic.com — وهو الاسم المضيف الرسمي للخادم نفسه، لا موقع حشو. مقالات كرة قدم عربية معاد تدويرها (نيسان 2018) محتوى حقيقي، ولا تزال لا تُقرأ كإشارة ملكية.
Sama holdingسما القابضة
Liveيعمل
2021-09-28
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A, its own home server); NS → ns1/ns2.sama-athletic.com (itself)
Matches the existing record: created 2021-09-28, Dynadot Inc.
Assessmentالتقييم
Confirms the existing note: this domain is the vanity-NS host for elmas-invest.com, trixaglobal.com, awtad-albarakeh.com and maak-sy.com in the third_party list, among others.
Registered 2012-09-07, registrar Dynadot Inc, registrant redacted (Super Privacy Service LTD c/o Dynadot). Registration current through 2026-09-07.
Live siteالموقع الحي
Live site is a 1xBet Egypt sports-betting/casino landing page — unrelated to television, no Sama or Hamsho trace.
Waybackأرشيف Wayback
Only pre-2025 snapshot (2012) returns a 503; nothing else archived resembles genuine Sama TV content.
Assessmentالتقييم
myip.ms's reverse-IP change history (not visible to a live dig/whois pass) shows this domain sat on Server A itself — 65.21.200.112, reverse DNS sport.sama-athletic.com — from 02 May 2025 to 26 Sep 2025, and on 176.9.55.34 (server1.gaia-services.net, the Server B nameserver box) from 10 Jun 2023 to 01 Jul 2023, with two more Hetzner your-server.de static addresses in between (2022). That is multiple independent placements on named estate infrastructure over roughly three years — a real historical operator link, not a name coincidence. From 17 Oct 2025 it moved off-estate (AWS Global Accelerator, then a rotating Bunny.net CDN cluster from Nov 2025), consistent with the domain being sold, abandoned to registrar privacy, or lapsing out of estate control — it has stayed on Bunny.net through Aug 2026 serving the unrelated 1xBet content found above.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
WHOISWHOIS
Registered 2025-01-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Waybackأرشيف Wayback
Real content as recently as January 2025 (homepage plus a cpanel subdomain snapshot) — confirms this was a live, built site well after the "site in preparation" purpose text was written, and well before today's unreachability.
Assessmentالتقييم
The domain was genuinely live within the last two years per Wayback; its current unreachability from this environment specifically cannot be attributed to the domain being down, abandoned, or compromised — that would need checking from an unfiltered network.
Matches the existing record: created 2015-05-12, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2010 onward, including a directory-listing snapshot as recently as May 2026 — matches the current "empty directory index" note.
Assessmentالتقييم
Consistent with the existing sama-alsham-group entity.
samaalsham.net
Sama Alsham Group — placeholder / under constructionمجموعة سما الشام — نطاق احتياطي / قيد الإنشاء Static "Under Construction" page since 2018. A record 188.40.140.248 shares Server B's server3.gaia-group.co reverse-DNS; SPF directly authorises 188.40.140.252 and 176.9.55.34. Registered 2011, predating samaalsham.com by ~4 years.صفحة "قيد الإنشاء" ثابتة منذ 2018. سجل A على 188.40.140.248 يشترك بإدخال DNS العكسي server3.gaia-group.co مع الخادم B؛ SPF يصرّح مباشرة لـ188.40.140.252 و176.9.55.34. سُجِّل عام 2011، قبل samaalsham.com بنحو أربع سنوات.
Sama holdingسما القابضة
Liveيعمل
2011-08-18
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 188.40.140.248 (adjacent to but distinct from Server B's 188.40.140.252 — same /24, consistent with the existing note)
NS → ns5/ns6.gaia-group.co — Gaia's own branded nameservers, a more direct operator signal than the sama-athletic.com vanity NS used elsewhere
SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 ~all; also carries a Google Search Console verification TXT record
DMARC: p=none
WHOISWHOIS
Matches the existing record: created 2011-08-18, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2011 onward (arabisque.html, a CMS reference to "SyrianMonster" — the same .sy registrar seen elsewhere in this register).
Assessmentالتقييم
Consistent with the existing sama-alsham-group entity and its already-documented notes.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.131.160, 104.21.10.160); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
No DMARC record
WHOISWHOIS
Matches the existing record: created 2021-03-16, Dynadot Inc.
Live siteالموقع الحي
Redirects to a hosting-provider "account suspended" page — no content.
Waybackأرشيف Wayback
Real content from 2013, predating the current registration.
Assessmentالتقييم
See samapower.sy for the direct "Hamsho Group" registrant record — the samapower-hamsho-registrant finding rests on that record, not this one. Notably, this domain sits on the adam/brenna Cloudflare account while samapower.sy sits on edna/glen — the same declared business split across the estate's two main Cloudflare accounts.
samapower.sy
Sama Powerسما باور Registrant Organization on the .sy registry record reads "Hamsho Group" — not privacy-redacted, a direct primary-source link between this domain and the Hamsho name that this register did not previously have.حقل Registrant Organization في سجل .sy يذكر "Hamsho Group" — غير مموَّه بالخصوصية، وهو رابط مباشر من مصدر أساسي بين هذا النطاق واسم حمشو لم يكن هذا السجل يمتلكه سابقاً.
Sama holdingسما القابضة
Mail onlyبريد فقط
2021-12-28
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.183.84, 104.21.18.202); NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
No DMARC record
WHOISWHOIS
.sy registry record: registered 2021-12-28. Sponsoring Registrar: Syrian Monster. Registrant Organization: "Hamsho Group" — stated directly, not privacy-redacted (the .sy registry doesn't offer the same redaction .com registrations get through Dynadot).
Live siteالموقع الحي
Account-suspended page — no content beyond a webmaster contact address.
Assessmentالتقييم
A primary-source registry record naming "Hamsho Group" as registrant — a cleaner, more direct ownership signal than most of the DNS/hosting evidence this register otherwise relies on; see the samapower-hamsho-registrant finding. This domain sits on the edna/glen Cloudflare account while samapower.com sits on adam/brenna — the same declared business split across the estate's two main accounts.
scbc.sy
SCBCSCBC
Financeمالية
Mail onlyبريد فقط
—
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua=dmarc-reports.cloudflare.net
WHOISWHOIS
No public WHOIS — .sy domains generally have none.
Live siteالموقع الحي
A live, bare Apache "Index of /" directory listing with no files.
Assessmentالتقييم
No entity attached. Same SPF fingerprint as the rest of the Server B cluster; no content to identify who runs it.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) and 37.58.80.226 = server1.bocme.net (BOC, IBM/SoftLayer NL) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Created 2008-06-26T08:27:24Z, Dynadot Inc — same batch as the .com pair. Not previously on record; adding created/registrar here.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice as its .com siblings.
Assessmentالتقييم
Consistent with the existing sham-aqua-park entity — the third domain in the same registration batch.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 188.40.140.252 (Server B, direct — not Cloudflare-proxied); NS → ns5.gaia-group.co / ns6.gaia-group.co, Gaia's own nameservers on Server B
SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 ~all — the second IP matches ns3/ns4.gaia-group.co per data/servers.json
No DMARC record
WHOISWHOIS
Matches the existing record: created 2019-02-16, Dynadot Inc.
Live siteالموقع الحي
A bare "Under construction" notice, no other content.
Assessmentالتقييم
Notably different from the rest of the consumer cluster: this domain is hosted directly on Server B under Gaia's own nameservers, rather than fronted by Cloudflare — a closer technical tie to Gaia's own infrastructure than most of its consumer-cluster neighbours.
siamco.sy
Siamco — Syrian-Iranian Automobile Manufacturing Companyسيامكو — الشركة السورية الإيرانية لصناعة السيارات Registrant Organization on the .sy registry record reads "adaa motors" — consistent with Adaa Motors's 2018 purchase of a stake in Siamco, and links this domain directly to adaa-motors.com elsewhere in this register.حقل Registrant Organization في سجل .sy يذكر "adaa motors" — ما يتّسق مع شراء أداء موتورز حصة في سيامكو عام 2018، ويربط هذا النطاق مباشرة بـ adaa-motors.com في موضع آخر من هذا السجل.
Industryصناعة
Mail onlyبريد فقط
2018-05-28
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-15
DNSDNS
A → 188.40.140.252 (Server B directly); NS → ns5/ns6.gaia-group.co
Not reachable as a distinct page — only Wayback-crawled well-known probe paths, all 404.
Waybackأرشيف Wayback
Real content from 2008.
Assessmentالتقييم
Siamco, the Syrian-Iranian joint venture behind the "Sham" car, is a real and substantial company (Adra Industrial City plant, $60M founding capital) — not a bare shell. The "adaa motors" registrant organization is now explained: Adaa Motors bought a stake in Siamco in 2018 (see syrianexpert-siamco-adaa-partner) and appears to administer this domain on the company's behalf.
sigma-tic.com
Sigma TICسيغما TIC
Industryصناعة
Mail onlyبريد فقط
2025-06-04
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.128.116, 104.21.2.5); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua → Cloudflare's own aggregator
WHOISWHOIS
Matches the existing record: created 2025-06-04, Dynadot Inc.
Live siteالموقع الحي
A bare cPanel directory listing (cgi-bin/ only) — unbuilt, matching its recent registration.
Waybackأرشيف Wayback
Real content from 2013, predating the current registration by over a decade — a prior, unrelated use of the name.
Assessmentالتقييم
No entity currently attached; too new to have built content yet.
sinalco.sy
Sinalco Syria — soft drinks · سينالكو للمشروبات الغازيةسينالكو سوريا — مشروبات غازية Own /about page names الشركة المتحدة للإستثمارات الصناعية (UCII) as the operating company. SPF directly authorises ip4:188.40.140.252, Server B.صفحة "عن الشركة" الخاصة به تسمّي الشركة المتحدة للاستثمارات الصناعية (UCII) كجهة مشغِّلة. سجل SPF يصرّح مباشرة لعنوان IP 188.40.140.252، الخادم B.
Consumerاستهلاكي
Liveيعمل
—
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 78.46.0.188 (reverse DNS: dedi2288.your-server.de — a Hetzner dedicated-server hostname, not Server A or B); NS → Cloudflare (not proxied)
SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all — authorises Server B for mail, as the existing note says
No DMARC record
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
No public WHOIS — .sy domains generally have none.
Live siteالموقع الحي
A live, built WordPress site (with TranslatePress for translation) for Sinalco Syria, branded "consumer trust since 1905" with Facebook/Instagram links. No web-vendor credit visible on the homepage.
Assessmentالتقييم
Confirms the existing ucii entity and live status. New technical detail: the site itself is hosted on a separate Hetzner box (78.46.0.188) distinct from Server A and Server B, while mail routes through Server B via SPF — a third Hetzner address worth keeping in mind if it recurs elsewhere.
.sy registry record (whois.tld.sy): registered 2018-02-01 through sponsoring registrar Syrian Monster, expires 2027-02-01. Registrant Antoon Shawi ([email protected]); admin/tech/billing contacts all list "Maher Shikho SyrianMonster" ([email protected]) — read as the registrar reseller's own contact, not a company officer. The registrant "Organization" field returned "Example Inc.", a placeholder from the lookup tool rather than real data, and is not used here. Neither Shawi nor Shikho otherwise appears in this register.
Live siteالموقع الحي
A hosting-provider "This Account has been suspended" page, contact [email protected] — the same cPanel-suspension pattern used across the Server B consumer/finance domains, on a .sy TLD.
Assessmentالتقييم
Linked to the smartmoney entity. Registered 2018-02-01, roughly nine months before the Ministry of Internal Trade and Consumer Protection approved the company's founding charter on 27 November 2018 (manhom-firas-aldabbas-smartmoney) — consistent with the domain being secured ahead of formal incorporation. Same shared hosting fingerprint (SPF, suspension-page template) as the rest of the Server B cluster.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.163.75, 104.21.34.169); NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
DMARC: p=none, rua → Cloudflare's own aggregator
WHOISWHOIS
Matches the existing record: created 2008-03-20, Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2010; later entries are a mix of a suspicious injected script (bUzZckQJT.js, 2025) and routine Cloudflare assets — the injected-looking filename is worth a second look if this domain is revisited.
Assessmentالتقييم
Consistent with the existing syria-metal-industries entity.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.197.106, 104.21.90.81); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
No DMARC record
WHOISWHOIS
Created 2015-09-08T12:48:40Z, Dynadot Inc — same minute as the other three spellings.
Live siteالموقع الحي
https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice as its siblings.
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Created 2015-09-08T12:48:41Z, Dynadot Inc.
Live siteالموقع الحي
A hosting-provider "This Account has been suspended" page (Cloudflare email-protected contact link).
Assessmentالتقييم
Consistent with the existing tahweel entity. All four spelling variants (tahweil/ta7weil/tahwiel/ta7wiel) were registered within the same minute, confirming a single coordinated registration of the brand-variant cluster.
taajir.co
Tajjir — rental platform, a named Gaia clientتأجير — منصة تأجير، عميل مسمّى لدى غايا
Third-party clientعميل طرف ثالث
Liveيعمل
2025-11-06
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
Registered 2025-11-06. Registrar: Dynadot Inc. Registrant redacted under standard privacy.
Live siteالموقع الحي
تأجير (Taajir) — a Syrian multi-category rental app (real estate, vehicles, equipment, clothing). No contact details or vendor credit on the homepage.
Waybackأرشيف Wayback
One snapshot, 2024-09-07 — predates the current 2025-11-06 registration date, meaning the domain likely had a different prior registration; earlier content not investigated further.
Assessmentالتقييم
Ordinary consumer-app client. The pre-registration Wayback snapshot is a minor loose end, not pursued here.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.162.89, 104.21.15.111); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all
No DMARC record
WHOISWHOIS
Registered 2008-06-12, one second after tatweer-sy.com. Registrar: Dynadot Inc.
Waybackأرشيف Wayback
Real content from 2011.
Assessmentالتقييم
Consistent with the existing tatweer entity.
team-spirit.co
Team Spirit — matches the name of a Damascus show-jumping brand ("Team Spirit Masters") a Hamsho daughter competed inتيم سبيريت — يطابق اسم علامة مسابقات قفز حواجز في دمشق ("Team Spirit Masters") شاركت فيها ابنة من عائلة حمشو
Sama holdingسما القابضة
Mail onlyبريد فقط
2016-01-10
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.203.89, 104.21.14.123)
MX → mail.team-spirit.co → 188.40.140.252 (corrected 2026-08-14: originally mis-recorded as 65.21.200.112/Server A; re-verified against system and 1.1.1.1 resolvers, matches SPF)
SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all — the widest relay list of this batch
No DMARC record
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) and 37.58.80.226 = server1.bocme.net (BOC, IBM/SoftLayer NL) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Registered 2016-01-10. Registrar: Dynadot Inc. Registrant redacted under standard privacy.
Live siteالموقع الحي
Not tested live, consistent with mail_only status.
Waybackأرشيف Wayback
2016–2019 snapshots, alternating 200/403 — an old, largely dormant site.
Assessmentالتقييم
Longstanding mail-only client on Server B. MX and SPF agree on Server B — no cross-server split. Also the sixth domain in the narrowest BOC relay set in the register (37.58.80.226/server1.bocme.net), alongside five confirmed Sama Alsham hospitality and tourism entities (Jupiter, Palmyra Village, Sham Aqua Park) — a same-operator signal, not an ownership claim, but distinctive enough to move it out of third_party. The name match is no longer infrastructure alone: Seif Alsham Equestrian Club's own Facebook page names a real "Team Spirit Masters" show-jumping competition and credits a Hamsho daughter with a win in it — see the seif-alsham-equestrian finding. That confirms "Team Spirit" as a brand in the family's equestrian circle; it does not establish that this domain is what the club posted about.
trixaglobal.com
Trixa Globalتريكسا غلوبال
Third-party clientعميل طرف ثالث
Liveيعمل
2025-07-09
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A (apex) → 65.21.200.112 — Server A itself
NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)
MX → apex → 65.21.200.112
SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all
DMARC: p=none
WHOISWHOIS
Registered 2025-07-09. Registrar: Dynadot LLC. Registrant redacted under standard privacy.
Live siteالموقع الحي
Unreachable — both direct fetch and curl return HTTP 403 Forbidden from the server itself (a real server-side block, not a fetch-tool artifact).
Waybackأرشيف Wayback
No snapshots found.
Assessmentالتقييم
No content recoverable by any method tried. Purpose recorded from the domain name only — unverified beyond DNS/WHOIS. Worth a recheck later.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com
SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all — two Hetzner IPs beyond Server A itself, shared across most of the union-*.com cluster
DMARC: p=none
WHOISWHOIS
Matches the existing record: created 2017-01-12, Dynadot Inc.
Waybackأرشيف Wayback
A real 2013 snapshot; later crawl noise (.well-known probes) is not meaningful content.
Assessmentالتقييم
Consistent with the existing union-cables entity — no new findings, DNS/WHOIS confirm what's already on record.
Registered 2018-01-23, one year after union-cable.com. Registrar: Dynadot Inc.
Waybackأرشيف Wayback
301-redirect snapshot from 2018, consistent with being the secondary/alternate spelling.
Assessmentالتقييم
Consistent with the existing union-cables entity.
union-copper.com
Union Copper Companyشركة الاتحاد للنحاس DMARC rua points to the Gaia operator's Gmail addressعنوان الإبلاغ في سجل DMARC يشير إلى حساب Gmail الشخصي لمشغّل شركة "غايا"
Union estateشبكة الاتحاد
Liveيعمل
2017-01-13
Server A
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A); NS → Cloudflare (adam/brenna.ns.cloudflare.com) — unlike most of the union cluster, this one doesn't use Gaia's vanity NS
SPF: v=spf1 +a +mx +ip4:65.21.200.112~all
DMARC: p=none, rua=mailto:[email protected] — the operator fingerprint already on record
WHOISWHOIS
Matches the existing record: created 2017-01-13, Dynadot Inc.
Assessmentالتقييم
Consistent with the existing union-copper entity and its DMARC-to-Gaia finding.
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com
SPF: v=spf1 +ip4:65.21.200.112 +ip4:193.43.149.11 +include:_spf.google.com ~all — a distinct IP (193.43.149.11) and a Google Workspace include not seen on its siblings
193.43.149.11 = RIPE netblock SY-WAFATELECOM-20191114, descr Tarassul Internet Service Provider, org Wafa Telecom J.S.C., registered address "Mazzeh Highway - Syrian Telecom Building" — the only in-country Syrian address anywhere in this register's infrastructure
DMARC: p=none
WHOISWHOIS
Registered 2017-02-01, about two weeks after the main site. Registrar: Dynadot Inc.
Assessmentالتقييم
Consistent with the existing union-electrical-group entity; the extra SPF include suggests this alternate-spelling domain has (or had) its own separately configured mailbox. The 193.43.149.11 address and the Google Workspace include are also this register's only in-country Syrian node and only Google Workspace tenant, respectively.
Registered 2018-01-23, same day as union-cables.com — the two alternate-spelling registrations were evidently a matched pair.
Assessmentالتقييم
Consistent with the existing union-transformers entity.
unipac-sy.com
Unipac — PET packagingيونيباك — تعبئة وتغليف PET SPF authorises ip4:188.40.140.252 (Server B) directly. Serves only an empty directory index; no archived content found.سجل SPF يصرّح مباشرة لعنوان IP 188.40.140.252 (الخادم B). لا يعرض النطاق سوى فهرس مجلد فارغ؛ لم يُعثر على محتوى مؤرشف.
Industryصناعة
Dormantخامل
2018-04-19
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.158.233, 104.21.90.176); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
Matches the existing record: created 2018-04-19, Dynadot Inc.
Waybackأرشيف Wayback
A directory-listing snapshot from 2021 — consistent with the existing note that no real archived content was found.
Assessmentالتقييم
Consistent with the existing unipac entity.
yafouresort.com
Yafour Hotel and Resort · فندق ومنتجع يعفورفندق ومنتجع يعفور Currently serves a generic "Coming Soon" template; a real WordPress-based hotel site survives in the Internet Archive from 2012–2021.يعرض حالياً قالباً عاماً "قريباً"؛ موقع فندقي حقيقي مبني على ووردبريس محفوظ في أرشيف الإنترنت من 2012 إلى 2021.
Hamsho-namedحمشو
Dormantخامل
2006-10-10
Server B
Online research snapshotلقطة بحث عبر الإنترنتRetrievedتاريخ الاطلاع 2026-08-13
DNSDNS
A → Cloudflare-proxied (172.67.183.78, 104.21.18.197); NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)
SPF authorises 52.72.12.188 = server2.bocme.net (BOC, AWS US) — a pre-2017 operator artifact, see the boc entity
WHOISWHOIS
Matches the existing record: created 2006-10-10, Dynadot Inc.
Live siteالموقع الحي
A generic "Coming Soon" countdown-timer template with no business name or contact details — matches the existing note.
Assessmentالتقييم
Consistent with the existing yafour-resort entity; no new findings from DNS/WHOIS/live site. Archive.org rate-limited every CDX query attempted during this pass, so the 2012–2021 WordPress history the note describes was not re-verified here.
No domain matches that filter.لا نطاق يطابق هذا المرشّح.