{ "generated_at": "2026-08-13", "schema_version": 1, "entities": [ { "id": "mohammed-hamcho", "name": "Mohammed (Saber) Hamcho", "aka": [ "Mohammed Hamsho", "Muhammad Hamsho", "Mohamed Hamcho", "Mohammed Hamshou", "محمد حمشو", "المصدي" ], "hover_alt": "المصدي", "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "sector": "Diversified industry, telecoms, contracting", "established": "b. 20 May 1966, Damascus", "passport": "002954347", "positions": [ "General Secretary, Damascus Chamber of Commerce (from December 2014)", "Chairman, China–Syria Bilateral Business Council (from March 2014)", "Chairman, Syrian Council for Metals and Steel (from December 2015)", "Member, People's Council (2012–2016)" ], "summary": "Syrian businessman, founder of Hamsho International Group in 1989. Sanctioned by OFAC, the EU and the UK, and re-designated under E.O. 13894 effective 1 July 2025 so the listing would survive the termination of Syria sanctions. His designation rationale describes close business relationships with regime figures, including Maher al-Assad. On the regime's fall (8 December 2024) he fled to Beirut and gave up his steel plant; he returned to Damascus and settled with the interim government in January 2026, the state recovering roughly $800 million. A 2016 letter to Syria's Director General of Customs, on Syrian Council for Metals and Steel letterhead and signed by Hamsho himself as Chairman of the Board, is the clearest primary-source document placing his signature on a specific piece of the estate's infrastructure — the Council's contact address sits on the hadeed-mmc.com domain.", "note": "His wife Rania al-Dabbas and all four children — Ahmad, Amr, Ali and Sumaya — were designated together under the US Caesar Act on 17 June 2020. His mother is reported to be from Qardaha, the Assad family's home town in Latakia. Beyond Hamsho International Group, directory profiles credit him as GM and founding partner of Al-Shahba Communications, Dawa, Hamsho for Investments, Tatweer and Seif Alsham, plus Syria International for Artistic Production and a stake in Al-Dunya TV.", "related_to": [ "rania-al-dabbas", "ahmad-saber-hamcho", "amr-hamsho", "ali-hamsho", "emad-hamsho" ], "sources": [ "os-mohammed-hamcho", "os-mohammed-hamcho-q137381681", "ofac-20250630", "syriadirect-settlement", "reuters-economy", "hadeed-letter-2016", "aljazeera-hamsho-2026", "enabbaladi-hamsho-return-2026", "baath-b2bsy-council-decree-2015" ] }, { "id": "ahmad-saber-hamcho", "name": "Ahmad Saber Hamcho", "aka": [ "Ahmad Sabir Mohammed Hamsho", "Ahmad Hamcho", "Ahmed Saber Mohammed Hamshou", "أحمد صابر حمشو", "ابن المصدي" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "sector": "Holding group management", "established": "b. 25 Nov 1992, Damascus", "passport": "N005364444", "address": "Damascus, Syria · Dubai, UAE · London, UK", "photo": "/assets/documents/ahmad-saber-hamcho-fb-2026.jpg", "positions": [ "Chief Executive Officer, Sama Alsham Group (per the group's own 2015 site)", "Founding partner, 11% (1,100 shares), Jupiter for Investments", "Founding partner, 9% (27 shares), Seif Alsham Company" ], "summary": "Eldest son of Mohammed Hamcho and separately sanctioned — designated with his mother and three siblings under the US Caesar Act on 17 June 2020. Named as Chief Executive Officer of Sama Alsham Group on that group's own website — the only place in this investigation where a named Hamsho family member is placed on a specific operating group's paperwork by a primary source rather than by inference. His own manhom.com directory profile adds two quantified shareholdings: a founding 11% (1,100 shares) of شركة جوبيتر للاستثمارات (Jupiter for Investments) and a founding 9% (27 shares) of شركة سيف الشام (Seif Alsham) — the first shareholder-level confirmation in this register that the Hamsho sons own the Jupiter vehicle, matching OCCRP's ownership claim. OpenSanctions lists addresses in Damascus, Dubai and London.", "parent": null, "related_to": [ "mohammed-hamcho", "amr-hamsho", "ali-hamsho" ], "sources": [ "sama-ceo-2015", "os-ahmad-hamsho", "fei-ahmad-hamcho", "newarab-dictators-men", "manhom-ahmad-hamsho", "ahmad-hamcho-fb" ] }, { "id": "amr-hamsho", "name": "Amr Mohamed Hamsho", "aka": [ "عمرو حمشو", "ابن المصدي", "Amre Hamcho", "Amrou Mohammed Hamsho" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "established": "b. 7 Mar 1995, Damascus", "passport": "N005361043", "address": "Damascus, Syria", "photo": "/assets/documents/amr-hamsho-fb-2026.jpg", "summary": "Son of Mohammed Hamcho and separately sanctioned. One of four Hamcho children designated together with their mother, Rania al-Dabbas, under the US Caesar Act on 17 June 2020. Reported alongside his brother in the records of the family's Lebanese offshore vehicle. His passport, N005361043, is consecutive with his brother Ali's (N005361042) — the two were evidently issued together.", "related_to": [ "mohammed-hamcho", "ahmad-saber-hamcho", "ali-hamsho" ], "sources": [ "os-amr-hamsho", "newarab-dictators-men", "aljazeera-hamsho-2026", "amr-hamsho-fb" ] }, { "id": "ali-hamsho", "name": "Ali Mohamad Hamcho", "aka": [ "Ali Mohammed Hamshou", "Ali Muhammad Hamsho", "علي حمشو", "ابن المصدي" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "established": "b. 3 Nov 1998, Damascus", "passport": "N005361042", "address": "Damascus, Syria · Paris, France", "summary": "A third son of Mohammed Hamcho, separately sanctioned and on the US OFAC SDN list since 20 April 2023. He is the previously unidentified \"fourth\" sanctioned Hamsho relative flagged in this register's Jupiter entity: with his father, his brothers Ahmad and Amr, and his mother Rania al-Dabbas, he was designated under the Caesar Act on 17 June 2020. His passport, N005361042, is consecutive with his brother Amr's (N005361043). OpenSanctions lists a Paris address alongside Damascus.", "related_to": [ "mohammed-hamcho", "ahmad-saber-hamcho", "amr-hamsho" ], "sources": [ "os-ali-hamsho", "aljazeera-hamsho-2026" ] }, { "id": "rania-al-dabbas", "name": "Rania al-Dabbas", "aka": [ "رانيا الدباس", "Rania Hamsho" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "photo": "/assets/documents/rania-al-dabbas-fb-2026.jpg", "summary": "Wife of Mohammed Hamcho and mother of his four children (Ahmad, Amr, Ali and Sumaya). Designated with the four children under the US Caesar Act on 17 June 2020. Her maiden name places her in the Al-Dabbas family — the same surname carried by DAK's owners Fadi, Ghiyath and Abeer Al-Dabbas, and by Fadi al-Dabbas, reported co-founder of the Hamsho-protection security firm Hisn al-Sham. Whether she is a direct relative of DAK's Al-Dabbas owners is not established here, but the marriage is the first documented family bridge between the Hamsho line and the Al-Dabbas names that recur through the Sama Alsham food cluster.", "related_to": [ "mohammed-hamcho" ], "note": "Reporting also names a brother-in-law of Mohammed Hamsho, Ruslan al-Khayyat, as an alleged accomplice in sanctions evasion — not the same surname as Rania's, so the exact family link is unresolved and carried only as a lead.", "sources": [ "aljazeera-hamsho-2026", "syriadirect-settlement", "rania-al-dabbas-fb" ] }, { "id": "emad-hamsho", "name": "Emad Hamsho", "aka": [ "عماد حمشو" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "sector": "Steel and metals", "summary": "Relative of Mohammed Hamcho, separately sanctioned by the EU, UK, Switzerland, France and Monaco. Senior management at Hamsho Trading, Vice-President of the Syrian Council of Iron and Steel, and owner of Syria Metal Industries. Represents a second, independent metals branch of the family alongside Mohammed Hamcho's telecoms, media and construction interests.", "related_to": [ "mohammed-hamcho" ], "sources": [ "ngo-emad-hamsho" ] }, { "id": "hamsho-international-group", "name": "Hamsho International Group", "aka": [ "Hamcho International", "Hamsho Group", "Hmisho Economic Group", "مجموعة حمشو الدولية" ], "type": "holding", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "sector": "Diversified holding, approx. 20 subsidiaries", "established": "1989", "address": "Baghdad Street, Building 31, P.O. Box 8254, Damascus · Hamsho Centre, Adaye Street, Damascus · Damascus countryside, Northern Ring Road", "contact": [ "+963 112316675", "+963 113227530", "+963 112 168 02", "fax +963 112318875", "info@hamshointl.com", "hamshogroup@yahoo.com", "info@hamsho-group.com", "www.hamshointl.com" ], "legal_form": "Company", "registry_status": "Active", "external_ids": [ "PermID 5041755506", "SAM UEI J87YKER5GTC5", "SAM UEI KCKRLQJFP8M1", "SAM UEI NDDYL2G8KL25", "SAM UEI TJ68K9WW5VM7", "SAM UEI UKBWK4AKDM15" ], "summary": "Syrian holding company designated for being controlled by Mohammed Hamcho. OFAC's designation narrative lists roughly twenty subsidiary sectors including metal fabrication, construction, electrical machinery, civil contracting, hotels and resorts, car rental, carpet distribution, animal farming and horse trading, printing services and ice cream production. Several of those business lines have matching domains on the estate's mail server.", "controlled_by": [ "mohammed-hamcho" ], "note": "OpenSanctions separately lists a subsidiary called \"Syria Steel\" — possibly this register's Syria Metal Industries, possibly not; not merged without more evidence. It also describes the group as associated with groups including the former Assad-regime-affiliated Shabiha militias. One listed phone number, +963 113227530, is the same number this register already found on horizon-cont.com's own contact page — corroboration of that link from an unrelated source.", "sources": [ "os-hig", "uk-eu-annex", "gem-hamsho-trading-ownership" ] }, { "id": "hamsho-trading", "name": "Hamsho Trading", "aka": [ "Hmisho Economic Group", "Hmisho Trading Group", "Hamisho", "Hamsho Trade And Construction", "Hamsho Trading EST.", "Hamsho Trading Establishment" ], "type": "company", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "address": "Hamsho Centre, Adaye Street, Damascus · Hamsho Building 31, Baghdad Street, Damascus", "contact": [ "+963 112316675", "fax +963 112318875", "hamsho-group@inco.com.lb", "info@hamshointl.com", "hamshogroup@yahoo.com" ], "summary": "UK-designated (Sanctions List ref SYR0305, listed 09/03/2015) as a subsidiary of, and controlled by, sanctioned individual Mohammed Hamsho and sanctioned entity Hamsho International Group — \"prominent business... supports and benefits from the Syrian regime through business contracts.\" Also a documented 100%-owned subsidiary of Hamsho International Group per the Global Energy Monitor ownership tracker aggregated by OpenSanctions. Its UK-listed alias \"Hamsho Trade And Construction\" is the English rendering of \"مجموعة حمشو للتجارة والعمران\", the name Middle East Contracting Company / Horizon's own website uses to describe itself in its company history — see middle-east-contracting.", "parent": "hamsho-international-group", "sources": [ "gem-hamsho-trading-ownership", "uk-eu-annex" ] }, { "id": "hmisho-steel", "name": "Hmisho Steel", "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Steel", "summary": "Per the same ownership tracker, a 100%-owned subsidiary of Hamsho Trading — the second link in a fully quantified three-tier chain running Hamsho International Group → Hamsho Trading → Hmisho Steel. Not independently researched beyond this ownership record; not yet matched to a domain or website in this estate.", "parent": "hamsho-trading", "sources": [ "gem-hamsho-trading-ownership" ] }, { "id": "sama-alsham-group", "name": "Sama Alsham Group", "aka": [ "Sama Al Sham", "سما الشام", "سما الشام القابضة" ], "type": "holding", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Diversified holding — contracting, electronics, aviation, hospitality, pharma, food, media", "established": "Reported variously as 1985 and 1987", "address": "Damascus, Syria", "summary": "Holding group whose own website names Ahmad Saber Hamcho as Chief Executive Officer. Its published activity list spans engineering and contracting, electronics, automotive, aviation, hospitality, pharmaceuticals, FMCG, media and general trading, and it declares three foreign subsidiaries: AMH Group in the UAE, Ebla Trade Off-shore in Lebanon, and EGC in Egypt. The group itself is not designated; its CEO is.", "note": "A third domain, samaalsham.net, was registered 2011-08-18 — nearly four years before samaalsham.com — and still serves only a static \"Under Construction\" page. Its A record shares Server B's own reverse-DNS entry, the strongest infrastructure link found for this group. A LinkedIn company page titled \"Sama Alsham Holding\" surfaced separately but is not independently verified past LinkedIn's login wall.", "controlled_by": [ "ahmad-saber-hamcho" ], "sources": [ "sama-ceo-2015", "sama-amh-2015", "sama-eblatrade-2015", "obs-dns-20260812" ] }, { "id": "hamsho-communication", "name": "Hamsho Communication", "aka": [ "Hamsho Com", "Hamshocom" ], "type": "company", "jurisdiction": "SY", "sanctions": "named_in_designation", "confidence": "strong", "sector": "Telecoms — GSM and satellite handset distribution", "summary": "Named directly in the EU/UK designation of Mohammed Hamcho as one of the companies in which he holds a financial interest or an executive position. The archived 2003–04 site confirms the business: marketing, distribution and technical support for GSM and satellite handsets including Thuraya and Sony Ericsson. Its mail runs on the estate's corporate mail server.", "parent": "hamsho-international-group", "sources": [ "uk-eu-annex", "hamshocom-2004", "obs-dns-20260812" ] }, { "id": "hamsho-carpet", "name": "Hamsho Carpet", "type": "company", "jurisdiction": "SY", "sanctions": "named_in_designation", "confidence": "strong", "sector": "Carpet distribution", "summary": "Carpet distribution is an explicit Hamsho International Group business line in OFAC's designation narrative, and hamshocarpet.com carries its mail on the estate's corporate mail server. The website itself is suspended.", "parent": "hamsho-international-group", "sources": [ "os-hig", "obs-dns-20260812" ] }, { "id": "syria-metal-industries", "name": "Syria Metal Industries", "aka": [ "SMI", "Syrian Metal Industries" ], "type": "company", "jurisdiction": "SY", "sanctions": "named_in_designation", "confidence": "strong", "sector": "Steel and scrap smelting, approx. 500,000 t/yr", "summary": "Named in the EU/UK designation of Mohammed Hamcho and owned by Emad Hamsho. Its mail runs on the estate's corporate mail server. The sector fit matters: copper and metal production is Emad Hamsho's documented business, not Mohammed's, which is why any link between the Union copper line and this branch of the family is worth pursuing specifically.", "controlled_by": [ "emad-hamsho" ], "sources": [ "uk-eu-annex", "ngo-emad-hamsho", "obs-dns-20260812" ] }, { "id": "ghabra", "name": "Al-Ghabra Stable", "aka": [ "Ghabra", "الغبراء" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Arabian horse breeding — matches the \"animal farming and horse trading\" line in Hamsho International Group's OFAC designation", "summary": "ghabra.com's own archived horse-registry pages name Mohammed Hamcho directly as both owner (المالك) and breeder (المربي) — registry no. A01750, \"Hasnaa Al-Sham\", a mare foaled 1997 at the Al-Ghabra stable. That is the domain's own primary content naming him, the same pattern as the hadeed-mmc.com letterhead and the horizon-cont.com contact page, and it lines up exactly with animal farming and horse trading, one of the business lines named in OFAC's designation narrative for Hamsho International Group. A second, independent archived page — the site's prose welcome message, captured eleven days earlier — is signed with his name as its only identifying signature, corroborating the registry entry from a second angle.", "controlled_by": [ "mohammed-hamcho" ], "sources": [ "ghabra-archive-2007", "ghabra-wayback-2007", "os-hig" ] }, { "id": "seif-alsham", "name": "Seif Alsham", "aka": [ "سيف الشام", "شركة سيف الشام", "Seif Alsham Equestrian Club", "نادي سيف الشام للفروسية" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Equestrian club and machinery — a Hamsho family company", "summary": "A Hamsho family company named directly in the family's own directory records. Per Ahmad Saber Hamcho's manhom.com profile, Mohammed Hamsho is General Manager and a founding partner of شركة سيف الشام, and his son Ahmad holds 27 shares (9%) of it. A related name, شركة سيف الشام للآليات (Seif Alsham for Machinery), appears in the family's company list. The register's previously-unlinked domain seifalsham.com — described on its own record as نادي سيف الشام للفروسية (Seif Alsham Equestrian Club) — sits on the estate's corporate mail server, tying the family's documented equestrian interests (see Al-Ghabra Stable, and Ahmad's Olympic show-jumping career) to a live piece of the digital estate.", "controlled_by": [ "mohammed-hamcho" ], "note": "The equestrian-club and machinery-company uses of the \"Seif Alsham\" name are carried together here as one brand family pending clearer separation; the shareholding figures are Ahmad's manhom profile, a directory source, not a corporate registry extract.", "sources": [ "manhom-ahmad-hamsho", "obs-dns-20260812" ] }, { "id": "jupiter-investment-tourism", "name": "Jupiter for Investment and Tourism", "aka": [ "Jupiter Rent-a-Car" ], "type": "company", "jurisdiction": "SY", "sanctions": "named_in_designation", "confidence": "strong", "sector": "Tourism and vehicle rental", "summary": "Named in the EU/UK designation of Mohammed Hamcho. Two domains — jupiter-hi.com and jupiterrentacar.com — carry its mail on the estate's corporate mail server, matching the car-rental business line in OFAC's designation narrative. OCCRP/SIRAJ reporting (Oct 2022, drawing on an SLDP/OPEN study) separately names \"Jupiter for Investments SA\" as a recipient of over $500,000 in UNICEF procurement money for \"management and admin services,\" owned by relatives of Mohammed Hamcho, \"including four who are under sanctions.\"", "note": "OCCRP's \"Jupiter for Investments SA\" is not confirmed as the same legal entity as this \"Jupiter for Investment and Tourism\" — possibly a distinct vehicle, not merged without more evidence. Ahmad Saber Hamcho's directory profile names him a founding 11% (1,100-share) partner of شركة جوبيتر للاستثمارات — the first shareholder-level corroboration of the sons' ownership. OCCRP's \"four\" sanctioned relative-owners are now all documented here: Ahmad, Amr, Ali Mohamad Hamcho, and Emad Hamsho.", "parent": "hamsho-international-group", "controlled_by": [ "ahmad-saber-hamcho" ], "sources": [ "uk-eu-annex", "obs-dns-20260812", "occrp-un-funding-2022", "manhom-ahmad-hamsho" ] }, { "id": "hadeed-mmc", "name": "Hadeed MMC", "aka": [ "حديد للصناعات المعدنية" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Steel — melts scrap metal into billets for rebar production", "summary": "Melts metal scrap and produces steel billets to international standards, used to produce steel rebar for construction — hadeed is Arabic for iron. Per its own LinkedIn profile it offers an extensive product range at competitive prices with wide delivery options. Sits on the estate's corporate mail server and, unusually for this group, its website is still live. A 2016 letter to Syria's Director General of Customs, on Syrian Council for Metals and Steel letterhead, is signed by Mohammed Hamsho himself as Chairman of the Board and lists info@hadeed-mmc.com as the Council's official contact address — the strongest primary-source document in the register, placing Hamsho's own signature directly on this domain's infrastructure rather than on shared hosting alone.", "controlled_by": [ "mohammed-hamcho" ], "priorities": [ "Provide a quality product and services.", "Maintain an excellent relation with all stakeholders — customers, partners, suppliers, strategic allies, government, community, distributors and industrial peers.", "Attract talented people, enrich their career through training and learning, build a strong team with superior technical abilities, and provide an eco-efficient, ergonomically designed workplace." ], "note": "The letter proves Hamsho chaired the industry council that used this address for its correspondence; it is not, by itself, a corporate ownership record for Hadeed MMC as a company. See the Syrian Council for Metals and Steel entity for the council itself.", "sources": [ "obs-dns-20260812", "hadeed-letter-2016", "hadeed-linkedin", "boycott-graphic-2026" ] }, { "id": "isnad-steel", "name": "Isnad Steel Company", "aka": [ "Isnad", "اسناد للهياكل المعدنية" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Structural steel — residential, commercial and industrial steelwork, telecom and power towers", "established": "2008; new management from 2018 broadened the product range", "contact": [ "+963 11 4016" ], "summary": "Produces structural steel — residential buildings, stores, factories, platforms, and telecom and power towers — to international standards, per its own LinkedIn profile. New management from 2018 expanded the range into architectural and decorative structural steel. Its domain isnad-sy.com sits on the same Gaia-operated Server B as the rest of the Hamsho estate. LinkedIn lists its website as www.isnadsteel-sy.com, but that domain does not currently resolve and WHOIS shows no matching registration — isnad-sy.com, already in this register, appears to be the operating domain rather than the one LinkedIn lists.", "sources": [ "isnad-linkedin", "obs-dns-20260812", "boycott-graphic-2026" ] }, { "id": "syrian-council-metals-steel", "name": "Syrian Council for Metals and Steel", "aka": [ "المجلس السوري للمعادن والصلب", "Syrian Council of Iron and Steel" ], "type": "association", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Metals and steel industry council", "established": "PM Decision 3592, Dec 2015; Hamsho chairman of its 17-member board", "summary": "A Syrian industry council for the metals and steel sector, addressing customs procedures for scrap and rebar mills on behalf of the trade. Its founding decree — PM Wael al-Halqi's Decision 3592, reported contemporaneously by Al-Baath — created it as a Damascus-seated public-benefit legal person with a 17-member board (Ministries of Economy and Industry and the Omran establishment represented) for a renewable four-year term, naming \"الصناعي محمد حمشو\" (industrialist Mohammed Hamsho) chairman from the outset. A 2016-03-02 letter to the Director General of Customs, on the Council's letterhead, is signed by Hamsho as Chairman of the Board — the clearest document tying him personally to the estate; its footer gives contact address info@hadeed-mmc.com, already in the estate. OpenSanctions separately dates his chairmanship to Dec 2015, matching the decree — three independent sources agree.", "controlled_by": [ "mohammed-hamcho" ], "note": "Emad Hamsho is separately reported as Vice-President of the same body under the name \"Syrian Council of Iron and Steel\" — consistent with Mohammed as Chairman and Emad as VP, not a conflict between sources. SECO's Emad Hamsho listing independently names Ayman Jabir as a fellow designated businessman on this body — see ayman-jabir. manhom.com's own Ayman Jabir profile instead calls him the Council's head, an unresolved discrepancy with the Chairman attribution above.", "sources": [ "hadeed-letter-2016", "ngo-emad-hamsho", "os-mohammed-hamcho-q137381681", "seco-syria-20250307", "manhom-ayman-jabir", "baath-b2bsy-council-decree-2015" ] }, { "id": "middle-east-contracting", "name": "Middle East Contracting Company / Horizon", "aka": [ "شركة الشرق الأوسط للمقاولات", "شركة هورايزون", "بيت المتوسط للتسويق لإنتاج البيتون المجبول", "مجموعة حمشو للتجارة والعمران", "Hamsho Trade And Construction" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Contracting and ready-mix concrete", "address": "Northern Ring Road, Al-Firdous Junction, Damascus / Rural Damascus", "contact": [ "00963113227530", "00963991023737" ], "summary": "Trades under three Arabic names, all three of which were also recovered from the old gaia-printing.com/hamsho/ install, along with the same address and the same phone numbers that appear as Hamsho Group's own contact details. Its own company-history page goes further, naming the company outright — twice — as \"مجموعة حمشو للتجارة والعمران\" (Hamsho Group for Trade and Construction), the Arabic original of \"Hamsho Trade And Construction\": the UK Sanctions List alias (ref SYR0305) for Hamsho Trading, a designated subsidiary of Hamsho International Group. A primary-source self-identification with a specific designated alias, not just a shared contact detail. Its current site was registered in September 2025 and carries a \"© Gaia Company 2025\" footer.", "note": "horizon-cont.com's contact page lists both 00963113227530 and 00963991023737; an independent business directory, Khan Al-Handasah, lists that same 00963991023737 mobile number as Hamsho Group's own contact and states directly that Middle East Contracting Company is one of Hamsho Group's two subsidiaries (alongside the Hamsho Reconstruction Foundation).", "parent": "hamsho-trading", "sources": [ "horizon-cont", "horizon-cont-sample-page", "khan-alhandasah-hamsho", "uk-eu-annex", "obs-dns-20260812" ] }, { "id": "union-electrical-group", "name": "Union Electrical Group", "aka": [ "UEG", "Union Electric Group", "مجموعة الاتحاد للكهرباء", "الاتحاد للكهرباء" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Cable, PVC and transformer manufacturing", "established": "Union Cables established late 2016", "address": "Adra Industrial City, Damascus Suburb, Syria — P.O. Box 2494", "contact": [ "+963 11 9259", "fax +963 11 5854447", "info@union-electricalgroup.com" ], "logo": [ "/assets/logos/union-electrical-group.png" ], "summary": "A real, physically substantial industrial group: 155,000 m² in Adra Industrial City, producing 1,500 t/month of copper and aluminium cable, 1,000 t/month of PVC and 500 distribution transformers per month through five subsidiaries. Independently photographed expanding its factories in 2018. Sama Alsham Group's own site names it directly as a subsidiary: \"Union Electric Group is a group comprising four facilities including cables, electric meters, PVC and transformers\" — the clearest primary-source bridge in this register between the Sama Alsham naming cluster and the Union naming cluster. \"Electric meters\" doesn't match any of the five Union subsidiaries otherwise documented here, an open lead.", "note": "Its manhom.com profile names Rashad Basatna (رشاد بساتنة) as Marketing Director — the first named staff member found for this entity — and lists only three of its five documented subsidiaries (Union Cables, Union Transformers, Union Plastic), omitting Union Copper and Union Winding. Its ten domains also run on the same Gaia-operated infrastructure — hosting, nameservers, and the single Dynadot registrar account — as the rest of the group.", "parent": "sama-alsham-group", "controlled_by": [ "mohammed-hamcho" ], "sources": [ "sama-uieg-2017", "ueg-certificates", "union-cable-contact", "alamy-ueg-2018", "syria-report-ueg", "obs-dns-20260812", "boycott-graphic-2026", "manhom-union-electrical-group" ] }, { "id": "union-cables", "name": "Union Cables Company", "aka": [ "الاتحاد للكابلات" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Power, control and overhead cable", "established": "Late 2016", "summary": "The largest of the Union subsidiaries and the country's leading cable manufacturer. Produces low, medium, high and extra-high voltage power cable, control cable, overhead lines, bare copper and winding wire.", "parent": "union-electrical-group", "sources": [ "union-cable-contact", "syria-report-ueg", "boycott-graphic-2026" ] }, { "id": "union-copper", "name": "Union Copper Company", "aka": [ "الاتحاد للنحاس" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Bare copper", "summary": "Union subsidiary. Its domain is the one in the Union estate whose DMARC reporting address is the Gaia operator's own Gmail account, which is what first bridged the Union cluster to the Gaia infrastructure.", "parent": "union-electrical-group", "sources": [ "obs-dns-20260812", "boycott-graphic-2026" ] }, { "id": "union-transformers", "name": "Union Transformers Company", "aka": [ "الاتحاد للمحولات" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Distribution transformers, 25–5,000 KVA", "summary": "Union subsidiary producing roughly 500 distribution transformers a month.", "parent": "union-electrical-group", "sources": [ "ueg-certificates", "boycott-graphic-2026" ] }, { "id": "union-plastic", "name": "Union Plastic Company", "aka": [ "الاتحاد للبلاستيك", "شركة الاتحاد للبلاستيك", "UNION Plastic Company" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "PVC compound, approx. 1,000 t/month", "address": "Rural Damascus, Syria — P.O. Box 2494", "contact": [ "+963-11-9259", "fax +963-11-585-4447", "info@union-pvc.com", "union-pvc.com" ], "summary": "Union subsidiary supplying PVC to the cable lines and to the market. Its own manhom.com profile describes plasticized (soft) and non-plasticized (dry) PVC compounds in granule or powder form, custom-designed to client specification, plus colour masterbatch concentrates.", "parent": "union-electrical-group", "sources": [ "ueg-certificates", "boycott-graphic-2026", "manhom-union-plastic" ] }, { "id": "union-winding", "name": "Union Winding Company", "aka": [ "الاتحاد للبوبيناج" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Winding wire", "summary": "Union subsidiary listed on the group's own site among its five manufacturers.", "parent": "union-electrical-group", "sources": [ "ueg-certificates", "boycott-graphic-2026" ] }, { "id": "amh-group", "name": "AMH Group", "aka": [ "AMH Investment Group" ], "type": "vehicle", "jurisdiction": "AE", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Diversified UAE holding", "established": "2013", "address": "Emirates Towers, Sheikh Zayed Road, Dubai, UAE", "logo": [ "/assets/logos/amh-group.png" ], "summary": "The group's declared UAE arm, described on Sama Alsham's own site as \"a group within the mother Sama Al Sham Group, that runs and operates the UAE branch.\" Holds a chain of Syrian restaurants (Tamary), Little Village Nursery, the general trading company Expert Blue, and the media production house Sama Al Fan. Its recruitment domain was registered one second after Expert Blue's, which places both brands in a single registrar account.", "parent": "sama-alsham-group", "sources": [ "sama-amh-2015", "expertblue-2014", "obs-dns-20260812" ] }, { "id": "expert-blue", "name": "Expert Blue General Trading L.L.C.", "aka": [ "Expert Blue L.L.C.", "Expert Blue FZC", "اكسبرت بلو للتجارة العامة ش.ذ.م.م" ], "type": "vehicle", "jurisdiction": "AE", "sanctions": "not_designated", "confidence": "confirmed", "sector": "General trading and livestock export", "established": "2012-10-04 per registry; AMH Group's 2015 site instead gives 2013", "address": "Office Building, 23rd floor, Jumeirah Emirates Towers, Sheikh Zayed Road, Dubai, UAE", "contact": [ "+971 4 3799968", "fax +971 4 3799639", "info@expert-blue.com" ], "logo": [ "/assets/logos/expert-blue.png" ], "registry_id": "273399", "registry_number": "677135", "registry_status": "Active", "emirate": "Dubai", "incorporation_date": "2012-10-04", "legal_form": "Limited liability company", "paid_capital": "600,000 AED", "authorized_capital": "600,000 AED", "activity_codes": [ "512107 — Livestock Trading", "521904 — General Trading" ], "note": "Registered as a Dubai mainland L.L.C., not a free-zone entity — worth checking whether the \"FZC\" suffix on expertbluefzc.com names a distinct free-zone sister entity or is simply a brand and domain choice made without legal significance.", "summary": "A privately owned UAE company operating from Dubai, describing itself as engaged in \"all commercial and business activities\" with a broad base of livestock and general trading. Its own news items record exporting 10,000 sheep to Qatar, 3,000 sheep to the UAE, cattle to Kuwait during Ramadan 2013, and starting cattle-raising in 2014. Its footer reads \"A member of AMH Investment Group\". Independently confirmed active in the Dubai company registry under the fuller legal name Expert Blue General Trading L.L.C., CBLS 273399, registry number 677135, with paid and authorized capital of 600,000 AED and registered activities matching exactly what its own site describes. A Dubai-domiciled trading vehicle under a declared UAE branch of a Syrian group whose CEO is sanctioned is a materially better evasion lead than any other in this file.", "parent": "amh-group", "sources": [ "expertblue-2014", "sama-expertblue-2015", "obs-dns-20260812", "b2bhint-expertblue" ] }, { "id": "ebla-trade-offshore", "name": "Ebla Trade Off-shore", "aka": [ "Ebla Trade Services S.A." ], "type": "vehicle", "jurisdiction": "LB", "sanctions": "designated", "confidence": "confirmed", "sector": "General trade, investments, contracting and distribution", "address": "Beirut, Lebanon", "summary": "Described on Sama Alsham's own site as the group's first expansion outside Syria. Ebla Trade Services S.A. is a designated Lebanese offshore company, listed for involvement in supplying gas to the former regime's war effort, and reporting has placed both of Mohammed Hamcho's sons in its records. The Lebanese commercial register is the most likely published route to a shareholder list.", "parent": "sama-alsham-group", "sources": [ "sama-eblatrade-2015", "newarab-dictators-men" ] }, { "id": "ebla-airlines", "name": "Ebla Airlines", "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Aviation", "logo": [ "/assets/logos/ebla-airlines.png" ], "summary": "The aviation line on Sama Alsham's declared activity list. Four domains across .com and .net carry its mail on the estate's corporate mail server.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015", "obs-dns-20260812" ] }, { "id": "egc", "name": "EGC Company", "type": "vehicle", "jurisdiction": "EG", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Food manufacturing", "logo": [ "/assets/logos/egc.png" ], "summary": "Named on Sama Alsham's own site as its Egyptian subsidiary, and separately as its food-manufacturing line. Nothing further has been established about it — the least-explored of the three declared foreign arms.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015" ] }, { "id": "sama-holding", "name": "Sama Holding", "type": "holding", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Holding", "summary": "Registered 26 June 2018, two days before hamsho-group.com and in the same Dynadot registrar account — consistent with a single 2018 restructuring or rebranding exercise carried out across both brands at once. A second, independent thread points the same way: between the 2015 and 2017 archived captures of Sama Alsham Group's own \"Message from the CEO\" page, the closing signature naming Ahmad Saber Hamcho as Chief Executive Officer was removed — the identical text now runs unsigned. A group actively scrubbing its CEO's name from its own site in 2017, then registering a freshly-named, unbranded holding domain in the same registrar cluster as \"Hamsho Group\" in 2018, reads as one continuous de-identification effort rather than two coincidences. sama-holding.com itself is now suspended and carries no independent content of its own.", "note": "Read with the Union Electrical Group, UCII and Cham Contracting confirmations elsewhere in this register — all three now directly named as Sama Alsham Group subsidiaries by the group's own site — Sama Holding's 2018 timing fits a group-wide rebrand away from identifying names (\"Hamsho\", \"Alsham\"), not a distinct venture. No primary source states \"Sama Holding is Sama Alsham Group renamed\" outright, which is why this stays \"strong\" rather than \"confirmed\".", "sources": [ "obs-dns-20260812", "sama-ceo-2015", "sama-ceo-2017-anonymized" ] }, { "id": "tatweer", "name": "Tatweer", "aka": [ "تطوير للتقانة" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Engineering and contracting", "summary": "The engineering and contracting line on Sama Alsham's declared activity list.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015", "boycott-graphic-2026" ] }, { "id": "samatel", "name": "SamaTel", "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Electronics", "logo": [ "/assets/logos/samatel.png" ], "summary": "One of two electronics lines on Sama Alsham's declared activity list. Reuters describes the Hamsho family's enterprises as spanning cable production, metalworks, electronics and film studios — this is the electronics half of that description.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015", "reuters-economy" ] }, { "id": "itsal-plus", "name": "Itsal Plus", "aka": [ "ITSAL Plus SY", "اتصال بلس" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Mobile phone distribution — OPPO's Syrian agent", "summary": "OPPO's exclusive agent in Syria, and — on independent evidence — run as the same commercial operation as SamaTel rather than a separate company. A Damascus mobile-retail professional's own LinkedIn employment history lists one combined role, \"Samatel - Itsal plus - OPPO Syria\", not three separate employers. An investigative piece on the Hamsho family's holdings separately names Itsal Plus as part of the group. Previously carried in this register as a generic third-party mail client on Gaia's Server B; the mail-hosting fact hasn't changed, but the ownership read was wrong.", "parent": "samatel", "sources": [ "sit-follow-the-money-37", "itsalplus-samatel-linkedin", "itsalplus-fb" ] }, { "id": "sama-al-fan", "name": "Sama Al-Fan Production", "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Media production", "logo": [ "/assets/logos/sama-al-fan.png" ], "summary": "Media production house, listed both under Sama Alsham's media activities and among AMH Group's UAE holdings. Together with SAMA Al-Arab TV and Arabesque Radio this is the \"film studios\" element of the Reuters description of the family's businesses.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015", "sama-amh-2015", "reuters-economy" ] }, { "id": "dawaco", "name": "Dawaco", "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Pharmaceuticals", "address": "Damascus Free Zone, Syria", "contact": [ "+963 1121490166", "info@dawacopharma.com" ], "logo": [ "/assets/logos/dawaco.png" ], "summary": "The pharmaceuticals line on Sama Alsham's declared activity list, manufacturing IV solutions, capsules, supplements and external-use products from a facility in the Damascus Free Zone.", "parent": "sama-alsham-group", "sources": [ "sama-ceo-2015" ] }, { "id": "tahweel", "name": "\"Tahweel\" remittance brand", "type": "company", "jurisdiction": "XX", "sanctions": "unknown", "confidence": "suggestive", "sector": "Money transfer (unconfirmed)", "established": "Domains registered 8 September 2015", "summary": "Tahweel is Arabic for money transfer. Four transliterations of the name were block-registered within one second of each other in September 2015 and all four are now suspended. Alongside smartmoney.sy this is the only financial-services thread in the estate, and nothing has been recovered about what the business was or whether it ever operated. Given the sanctions context, informal value transfer is the sector where it would matter most.", "sources": [ "obs-dns-20260812" ] }, { "id": "gaia", "name": "Gaia", "aka": [ "شركة جايا", "Gaia Group" ], "type": "vendor", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Web design, hosting and DNS", "address": "Damascus, Syria", "contact": [ "gaia.group.sy@gmail.com (DMARC reporting address)" ], "summary": "A real Damascus web studio with genuine unrelated clients — and also the operator of the entire Hamsho and Sama Alsham digital estate. It runs both servers, holds the DNS, carries the corporate mail for roughly ninety of the group's domains on a dedicated machine, and holds the single registrar account the whole estate sits in. That is the role of a captive or in-house IT provider rather than a website contractor. Whoever controls its Gmail address and its Dynadot account has administrative control over the digital estate of multiple sanctioned entities. Its owner and CEO, Anas Othman, is now identified by his own Facebook profile — see anas-othman.", "controlled_by": [ "anas-othman" ], "sources": [ "gaia-sy", "horizon-cont", "obs-dns-20260812", "anas-othman-fb" ] }, { "id": "anas-othman", "name": "Anas Othman", "aka": [ "أنس عثمان" ], "type": "person", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "confirmed", "sector": "Web design, hosting and DNS", "address": "Damascus, Syria", "positions": [ "Owner and CEO, Gaia Group — مجموعة غايا (per his own Facebook profile, Aug 2019 – present)" ], "summary": "Identified by his own Facebook profile as Owner and CEO of Gaia Group — the Damascus web studio this register already documents (see gaia) as the captive operator of the entire Hamsho and Sama Alsham digital estate. The same profile lists him as married to Shefaa Hamsho Othman since 27 February 2016; her own Facebook profile carries the Hamsho surname and lists her work as design at Sama TV, a Sama Alsham Group subsidiary — the first personal, rather than purely technical, connection identified between Gaia and the estate it operates.", "note": "The Hamsho surname is consistent with Shefaa Hamsho Othman being a member of the Hamsho family, but — as with Rania al-Dabbas's Al-Dabbas surname elsewhere in this register — the exact family link to Mohammed Hamcho's line is not established here and should not be treated as more than a lead. His profile also lists a family connection to one Mohamed Adib Osman, and education at Al-Thakafi and Tishreen University — neither otherwise identified here.", "sources": [ "anas-othman-fb", "shefaa-hamsho-othman-fb" ] }, { "id": "palmyra-village-resort", "name": "Palmyra Village & Resort", "aka": [ "Tamary Palmyra Village", "منتجع تدمر" ], "type": "company", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "sector": "Hospitality — resort", "address": "P.O. Box 8254, Damascus, Syria", "contact": [ "+963 11 2312857", "fax +963 11 2318875", "info@palmyravillage.com", "+963 11 2129960 (2016, per Sama Alsham's own subsidiary page)", "fax +963 11 2131025 (2016)" ], "logo": [ "/assets/logos/palmyra-village-resort.png" ], "summary": "The resort Sama Alsham Group's own site declares under its Hospitality activities as \"Tamary Palmyra Village\". Its own holding page — \"we are currently upgrading our website\" — lists a Damascus P.O. Box and fax number that match Hamsho International Group's own listed contact details exactly, independent of any DNS or hosting evidence.", "parent": "sama-alsham-group", "note": "P.O. Box 8254 and fax +963 11 2318875 are identical, digit for digit, to the P.O. Box and fax OpenSanctions lists for Hamsho International Group's Baghdad Street office. Sama Alsham's own 2016 subsidiary page gives a different phone/fax pair — the same pair as its Sham Aqua Park page, another resort/hospitality line.", "sources": [ "sama-palmyra-2016", "palmyravillage-holding-page", "sama-ceo-2015", "os-hig" ] }, { "id": "unipac", "name": "Union Packaging and Wrapping Company", "aka": [ "Unipac", "UNIpac", "شركة الاتحاد للعبوات والتغليف" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Plastic packaging — PET blow-molded containers, plastic and aluminium bottle caps for beverage and juice bottling", "established": "2018, per Ministry of Internal Trade and Consumer Protection Decision No. 407", "address": "Adra Industrial City, Damascus Suburb, Syria · Daraa International Highway, Rural Damascus (per industrysy.com)", "contact": [ "info@dakfood.net", "4434981", "5855052", "0932532232", "0930333733" ], "legal_form": "Limited liability company", "paid_capital": "5,000,000 SYP", "summary": "A Syrian PET-packaging and bottle-cap manufacturer in Adra Industrial City, established 2018. Press reporting on Khalil Jawad — an Iraqi-born former Director General of the state General Organization for Food Industries and husband of Bashar al-Assad's political and media advisor Bouthaina Shaaban — states he now runs the company with his son Reda Khalil Jawad and daughter Nazek Khalil Jawad, the latter married to American businessman Muthanna Saleh. The company's own manhom.com profile independently lists Reda and Nazek Khalil Jawad among its founding partners, plus Nahed Khalil Jawad and Karim Wael Al-Ghabra. Its published directory contact address, info@dakfood.net, matches the fax number of DAK — a documented Sama Alsham/UCII subsidiary, see the dak entity — not just a shared mail server.", "note": "Its own domain, unipac-sy.com, registered 2018-04-19 through Dynadot Inc — the registrar account the rest of the estate sits in — and its SPF record directly authorises ip4:188.40.140.252, Server B; the domain now serves only an empty directory index. Neither this nor the DAK fax match is a documented ownership/control link yet. The LinkedIn post is by someone reported to have worked at Sama Alsham Group at the time, not independently verified past LinkedIn's login wall.", "sources": [ "manhom-unipac", "eqtsad-jawad-unipac-2018", "industrysy-unipac", "linkedin-nour-kalho-unipac", "obs-dns-20260812" ] }, { "id": "ucii", "name": "United Company for Industrial Investments", "aka": [ "UCII", "الشركة المتحدة للإستثمارات الصناعية", "شركة المتحدة للاستثمارات الصناعية" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Food manufacturing and soft-drink bottling — Syrian licensee of the Sinalco brand", "established": "2015 per its site; L.L.C. 2016-02-17, converted to PJSC 2016-10-18", "address": "Al-Harika, Ibn Khaldoun St., Shaghour Jawani, Damascus, Syria · branches in Adra Industrial City and Sheara, Daraa", "legal_form": "Private joint stock company (converted from L.L.C.)", "paid_capital": "100,000,000 SYP per 2016 registry cert. (manhom: 1M SYP)", "registry_number": "17834", "logo": [ "/assets/logos/ucii.jpg", "/assets/logos/ucii-sinalco.png" ], "summary": "Sinalco Syria's own site names this company as its operator: founded 2015 with about 150 staff, producing canned foods, tomato paste and jams through its Dar Al-Khair branch — DAK, documented separately here. In 2016 it partnered with Sinalco International and in 2018 began launching Sinalco-brand soft drinks locally, growing to about 250 staff. Founding partners Ibrahim bin Majed Mashael and Mohammed Samer Qasim Al-Mulhem, and manager Ammar Younes Younes, who separately holds 33.4% of it. A 2016 registry certificate additionally names GM Haidara Makhlouf, admin director Wassim Moussali and lab manager Hala Ghossn, and lists its charter as covering vehicle/motorcycle/bus assembly and dairy manufacturing. Sama Alsham Group's own site independently confirms the Sinalco license and carries a bare stub titled \"uiic\".", "note": "sinalco.sy's mail runs on Server B, SPF directly authorising ip4:188.40.140.252 — the same server carrying roughly ninety domains across the Hamsho-named entities, Sama Alsham's operating companies, and the Dubai/Beirut vehicles. \"Haidara Makhlouf\" shares a surname with sanctioned Assad-family businessman Rami Makhlouf; not established here as a relation, just a name worth checking.", "parent": "sama-alsham-group", "controlled_by": [ "ammar-younes-younes" ], "sources": [ "sinalco-about", "manhom-ucii", "obs-dns-20260812", "sama-sinalco-2016", "sama-uiic-2017", "sinalco-hamsho-dabbas-report" ] }, { "id": "ammar-younes-younes", "name": "Ammar Younes Younes", "aka": [ "عمار يونس يونس" ], "type": "person", "jurisdiction": "SY", "sanctions": "not_designated", "confidence": "strong", "address": "Syria", "positions": [ "Company Manager (مدير الشركة), United Company for Industrial Investments", "Founding partner, 33.4% (334 shares, 334,000 SYP), United Company for Industrial Investments", "Founding partner, 50% (25,000 shares, 2,500,000 SYP), Marcom Company (شركة ماركوم)" ], "summary": "Company Manager and 33.4% founding partner of United Company for Industrial Investments — the Syrian company that, per its own Sinalco Syria website, operates the Sinalco soft-drink brand locally. Also a 50% founding partner of Marcom Company (شركة ماركوم), whose own domain, marcom.sy, is already in this register. Syrian national, resident in Syria, per his manhom.com profile.", "sources": [ "manhom-ammar-younes" ] }, { "id": "marcom", "name": "Marcom Company", "aka": [ "Marcom", "شركة ماركوم" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Media and marketing", "summary": "Per Ammar Younes Younes's own manhom.com profile, he is a 50% founding partner (25,000 shares, 2,500,000 SYP) of Marcom Company. Its domain, marcom.sy, was already in this register's domain list — mail-hosted on Server B alongside UCII/Sinalco and the rest of the estate — but had not previously been linked to an entity.", "note": "marcom.sy currently resolves to sinkhole.paloaltonetworks.com via Palo Alto Networks' DNS Security, an active third-party security block rather than a routing failure — other .sy domains in this register resolve normally, so this is specific to marcom.sy and worth watching, not yet explained.", "controlled_by": [ "ammar-younes-younes" ], "sources": [ "manhom-ammar-younes" ] }, { "id": "cham-contracting", "name": "Cham Engineering and Contracting Company", "aka": [ "Cham Contracting", "CEC", "شركة شام للهندسة والمقاولات" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Engineering studies, interior/exterior design, contracting, maintenance, building automation and IT infrastructure", "address": "Damascus, Syria — P.O. Box 8222 · HQ at Qura al-Assad, Rural Damascus", "contact": [ "+963 11 2290237", "fax +963 11 2313061", "info@chamcontracting.com" ], "logo": [ "/assets/logos/cham-contracting.png" ], "summary": "An engineering and contracting firm per its own archived site: studies, interior/exterior design, maintenance and building automation/IT, covering factories, villas and companies' premises. Sama Alsham Group's own site carries a word-for-word matching English description of \"CEC\" as its own subsidiary, adding sewage treatment plants in Homs and Hama, an organic fertilizer factory in Damascus, and membership in the UN Organization for International Marketing (UNMG). Its own project portfolio includes a 28,000 m² steel-production plant in Adra Industrial City — named simply \"حديد\" (Hadeed/iron), possibly this register's Hadeed MMC, not confirmed; its own HQ at Qura al-Assad; and a security-systems job at UNDOF's headquarters at Al-Saboura — Yaafour Resort, itself a Sama Alsham hospitality property per this register's yafour-resort entity, not an unconnected client after all.", "note": "chamcontracting.com sits on Server B and its SPF record directly authorises ip4:188.40.140.252, registered 2015-07-25 through Dynadot Inc — the same registrar account, mail server and pattern documented across the rest of the Hamsho/Sama Alsham/Union estate.", "parent": "sama-alsham-group", "sources": [ "sama-cec-2017-en", "cham-about-2016", "cham-contact-2016", "cham-project-hadeed-2019", "cham-project-hq-2019", "cham-project-undof-2017", "obs-dns-20260812" ] }, { "id": "dak", "name": "DAK / Dar Al-Khair", "aka": [ "Dar Alkhair", "دار الخير", "DAK Food", "Dar Al-Khair Import and Export Company", "شركة دار الخير للاستيراد والتصدير" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "FMCG — cooking oil, canned tuna, rice, ghee import and packing", "established": "2013, capital 4,000,000 SYP", "address": "Damascus, Syria — Baghdad Street", "contact": [ "+963 11 4434980", "fax +963 11 4434981", "info@dakfood.net", "www.dakfood.net" ], "logo": [ "/assets/logos/dak.png" ], "summary": "An FMCG import/packing brand — cooking oil, canned tuna, rice, ghee — per its own subsidiary page on Sama Alsham Group's site, and per UCII's own about page, \"one of our branches\" (أحد فروع شركتنا). Its fax number, +963 11 4434981, is the same number industrysy.com lists as one of Unipac's own landlines — see the unipac entity — and its address sits on Baghdad Street, Damascus, the same street as Hamsho International Group's own OFAC-listed office. A bilingual investigative report names its four founding owners — Naeem Al-Khair (25%) and Fadi, Ghiyath and Abeer Al-Dabbas (25% each) — describing it as \"affiliated with the Sama Al-Sham Group, owned and managed by Mohammad Hamsho and his sons,\" and as the party that signed the original 2015 Sinalco partnership before UCII was founded in 2016.", "note": "None of DAK's four named owners is a Hamsho by name — but Mohammed Hamcho's wife, Rania al-Dabbas, carries the same surname as DAK's Al-Dabbas owners (Fadi, Ghiyath, Abeer). Whether she is a direct relative of theirs is unproven, so the marriage is a lead, not a shareholding link. Owner Fadi Al-Dabbas separately recurs as co-founder, with Ammar Younes Younes, of the security firm Hisn Al-Sham. Not itself independently sanctioned.", "parent": "ucii", "controlled_by": [ "fadi-al-dabbas", "naeem-al-khair" ], "sources": [ "sama-dak-2016", "industrysy-unipac", "os-hig", "sinalco-hamsho-dabbas-report", "manhom-fadi-aldabbas" ] }, { "id": "memo", "name": "MEMO", "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Electronics — technical software, hardware and after-sales services", "address": "Damascus, Syria", "contact": [ "+963 11 2110786", "fax +963 11 2110498", "info@memoict.com", "www.memoict.com" ], "logo": [ "/assets/logos/memo.png" ], "summary": "Sama Alsham Group's second electronics line alongside SamaTel, per its own subsidiary page: \"providing technical software and hardware and after sales services solutions to the changing needs of the market.\" memoict.com's mail runs on Server B and its SPF record directly authorises ip4:188.40.140.252, registered 2008-01-13 through Dynadot Inc — the same registrar account as the rest of the estate, and the oldest domain-registration date found in it so far.", "parent": "sama-alsham-group", "sources": [ "sama-memo-2016", "obs-dns-20260812" ] }, { "id": "abou-waheed", "name": "Abou Waheed", "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Hospitality — restaurant", "address": "Syria", "contact": [ "+963 11 3735187", "facebook.com/abouwahed" ], "logo": [ "/assets/logos/abou-waheed.png" ], "summary": "A Syrian restaurant per its own Sama Alsham Group subsidiary page: \"Authentic Syrian delicacies in a friendly and cozy atmosphere.\" Thin evidence beyond the group's own listing — no address or further corporate detail recovered.", "parent": "sama-alsham-group", "sources": [ "sama-abouwaheed-2016" ] }, { "id": "zaman-al-khair", "name": "Zaman Al-Khair", "aka": [ "زمان الخير" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "suggestive", "logo": [ "/assets/logos/zaman-al-khair.png" ], "summary": "A named subsidiary on Sama Alsham Group's own site — logo and a dedicated page exist under its subsidiary index — but the page itself was never filled in with body text, sector or contact details. Kept on the record as a declared but undocumented group member, not walked further without more to go on.", "parent": "sama-alsham-group", "sources": [ "sama-zamanalkhair-2016" ] }, { "id": "arabesque-radio", "name": "Arabesque Radio", "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Media — FM radio broadcasting", "address": "Damascus, Syria", "contact": [ "+963 11 3045", "fax +963 11 4474065", "102.3 FM" ], "logo": [ "/assets/logos/arabesque-radio.png" ], "summary": "\"100% Syrian Broadcasting radio... a youth variety of social and purposeful radio 102.3 broadcasts from Damascus to every single meter in Syria\", per its own Sama Alsham Group subsidiary page. Already referenced in passing in this register's sama-al-fan entity, alongside SAMA Al-Arab TV, as the \"film studios\" element of Reuters' description of the family's businesses — now independently confirmed with its own contact details.", "parent": "sama-alsham-group", "sources": [ "sama-arabesque-2016" ] }, { "id": "sama-al-arab-tv", "name": "Sama TV", "aka": [ "SAMA Al-Arab TV" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "suggestive", "sector": "Media — television", "summary": "Referenced by name in this register's sama-al-fan entity as part of the \"film studios\" element of Reuters' description of the family's businesses, and carries its own logo (samatv_trans) on Sama Alsham Group's homepage carousel. Its detail-page link on the homepage does not resolve to distinct content — it returns the CEC subsidiary page instead, a Wayback playback quirk rather than evidence the two are connected. No independent contact details recovered.", "note": "Shefaa Hamsho Othman's own Facebook profile lists her as working in design at Sama TV — the first named staff member found for this entity, and notable for connecting to Gaia's owner Anas Othman by marriage (see anas-othman).", "parent": "sama-alsham-group", "logo": [ "/assets/logos/sama-al-arab-tv.png" ], "sources": [ "sama-home-2017", "sama-ceo-2015", "shefaa-hamsho-othman-fb" ] }, { "id": "little-village-nursery", "name": "Little Village Nursery", "type": "company", "jurisdiction": "AE", "sanctions": "unknown", "confidence": "suggestive", "sector": "Childcare / nursery", "summary": "Named in this register's amh-group entity as one of AMH Group's UAE holdings, alongside Expert Blue and Sama Al-Fan. Carries its own logo on Sama Alsham Group's homepage carousel, but its own detail page (littlenursery2) is a bare stub with no body text, address or contact details.", "parent": "amh-group", "logo": [ "/assets/logos/little-village-nursery.png" ], "sources": [ "sama-amh-2015", "sama-activities-nav-2016" ] }, { "id": "yafour-resort", "name": "Yafour Hotel and Resort", "aka": [ "Yaafour Resort", "Yafour Tourist Resort", "فندق ومنتجع يعفور", "منتجع يعفور" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Hospitality — four-star hotel and resort", "established": "Opened circa 2011, per trade press", "address": "Yaafour, Rural Damascus, Syria — on the Damascus–Beirut highway", "contact": [ "+963 11 3921555", "+963 11 5099", "fax +963 11 3921574", "info@yafouresort.com", "resa@yafouresort.com", "sales@yafouresort.com", "facebook.com/YafourHotel" ], "summary": "The hotel's own site describes itself as \"renowned throughout the area for the sheer opulence of its rooms and suites... and the grandeur of its facilities\", giving a Damascus/Yaafour address and stating \"our corporate office serves as base operations for all hotels\" — implying more than one property, not otherwise identified. A lighting-industry trade article dated 2 March 2011 opens: \"Owned by Hamsho Group International, the four star hotel, located in the nature reserve region of Yafour, outside Damascus.\" SANA separately reports a 2022 ceremony held \"at Yafour tourist resort\", attended by \"Chairman of Syrian-Chinese Business Council, Muhammad Hamsho\" — Mohammed Hamcho's own documented position. Its domain, yafouresort.com, sits on Server B, SPF directly authorising ip4:188.40.140.252, registered 2006-10-10 via Dynadot Inc.", "note": "Parent set to Hamsho International Group on the press ownership statement, not Sama Alsham Group, whose site displays the logo but never describes it — \"hotels and resorts\" is an OFAC-listed Hamsho business line, and other Sama-branded hospitality entities carry Hamsho contact details too (see palmyra-village-resort). \"Strong\" not \"confirmed\": press, not primary. Same Yaafour location where Cham Contracting installed UNDOF's security system, Jan 2015; see cham-contracting.", "parent": "hamsho-international-group", "logo": [ "/assets/logos/yafour-resort.png" ], "sources": [ "yafour-resort-about-2012", "yafour-resort-contact-2017", "yafour-lightsoundjournal-2011", "yafour-sana-2022", "yafour-fb", "sama-home-2017", "cham-project-undof-2017", "obs-dns-20260812" ] }, { "id": "haima-plant", "name": "Haima Plant", "aka": [ "Hainan Mazda" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Automotive — CKD/SKD vehicle assembly", "summary": "Sama Alsham Group's own subsidiary page describes Haima (Hainan Mazda) as a Chinese passenger-vehicle and minivan manufacturer headquartered in Haikou, with a factory in Zhengzhou and R&D in Shanghai, selling to 35+ countries and running SKD/CKD assembly in three nations — www.en.haima.com. Matches \"Car Assembly\", listed twice among current projects on Sama Alsham's own 2017 homepage, and plausibly the same line as the car-assembly project UCII's own charter permits.", "parent": "sama-alsham-group", "sources": [ "sama-haima-2016" ] }, { "id": "tamary", "name": "Tamary", "type": "company", "jurisdiction": "AE", "sanctions": "unknown", "confidence": "confirmed", "sector": "Hospitality — Syrian street food chain", "address": "Dubai, UAE", "contact": [ "+971 4 3444770", "www.tamary.com" ], "summary": "\"Launched in Dubai in early 2015, Tamary brings the authentic old Syrian street food in a modern way to the market of the UAE\", per Sama Alsham Group's own subsidiary page. Already referenced in passing in this register's expert-blue entity as one of AMH Group's UAE holdings. tamary.com itself resolves outside the Gaia-operated estate (AWS/GoDaddy SPF, Microsoft 365 mail) — a genuinely separate retail operation, not tracked in the domain register.", "parent": "amh-group", "sources": [ "sama-tamary-2016" ] }, { "id": "sham-aqua-park", "name": "Sham Aqua Park", "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "confirmed", "sector": "Hospitality — water park", "address": "near Damascus, Syria", "contact": [ "+963 11 2129960", "fax +963 11 2131025" ], "summary": "A water park \"minutes away from Damascus\", per Sama Alsham Group's own subsidiary page — its phone and fax numbers are the same pair given on Sama Alsham's own Palmyra Village page, suggesting shared administration between the two resort lines. Three domains already in this register — sham-aquapark.com, shamaquapark.com and shamaquapark.net, all on Server B via Dynadot Inc — were previously untied to any entity.", "parent": "sama-alsham-group", "sources": [ "sama-shamaquapark-2016", "obs-dns-20260812" ] }, { "id": "fadi-al-dabbas", "name": "Fadi Al-Dabbas", "aka": [ "Mohammad Fadi Raslan Al-Dabbas", "محمد فادي رسلان الدباس", "فادي الدباس" ], "type": "person", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "positions": [ "25% owner, Dar Al-Khair Import and Export Company (DAK)", "Co-founder, Hisn Al-Sham security and protection company" ], "summary": "Named in a bilingual investigative report as a 25% owner of Dar Al-Khair (DAK) alongside siblings Ghiyath and Abeer Al-Dabbas and a fourth partner, Naeem Al-Khair, and separately as co-founder — with Ammar Younes Younes — of Hisn Al-Sham, a security and protection company the report says \"undertook the protection of Mohammad Hamsho and carried out suspicious military operations.\" The two appearances, in different companies, are what make him a recurring figure rather than a one-off name. A biographical profile independently corroborates the DAK link, naming him a founding partner (شريك مؤسس) of Dar Al-Khair Import and Export Company — outside that, it covers only his Syrian football administration career (federation president 2018–2019, national-team director 2014–2018), unrelated to the Hamsho estate.", "sources": [ "sinalco-hamsho-dabbas-report", "manhom-fadi-aldabbas" ] }, { "id": "naeem-al-khair", "name": "Naeem Al-Khair", "aka": [ "Naeem Ahmad Al-Khair", "نعيم أحمد الخير" ], "type": "person", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "positions": [ "25% owner, Dar Al-Khair Import and Export Company (DAK)", "33.3% owner, Sama Holding Company (شركة سما القابضة)" ], "summary": "Named in a bilingual investigative report as a 25% owner of Dar Al-Khair (DAK) alongside Fadi, Ghiyath and Abeer Al-Dabbas. A registry-style biographical profile independently corroborates this — founding partner (شريك مؤسس) holding 25 shares (25%) worth 1,000,000 SYP — and adds a second, separate holding: founding partner in \"شركة سما القابضة\" (Sama Holding Company) with 3,330,000 shares (33.3%) worth 333,000,000 SYP, alongside a second named founding partner, Mohammed Maher Mohammed Ghanmeh (also 33.3%, not yet in this register).", "note": "The Sama Holding link is notable: this register's existing \"sama-holding\" entity was inferred purely from DNS/registrar timing (sama-holding.com registered alongside hamsho-group.com in the same account). This profile is the first source naming a real, registered \"Sama Holding Company\" with named shareholders — neither of whom carries the Hamsho or Al-Dabbas name. Whether this is the same legal entity behind sama-holding.com is not established here.", "sources": [ "sinalco-hamsho-dabbas-report", "manhom-naeem-alkhair" ] }, { "id": "hisn-al-sham", "name": "Hisn Al-Sham", "aka": [ "حصن الشام" ], "type": "company", "jurisdiction": "SY", "sanctions": "unknown", "confidence": "strong", "sector": "Private security and protection services", "summary": "Co-founded by Ammar Younes Younes and Mohammad Fadi Raslan Al-Dabbas, per a bilingual investigative report, which states the company \"undertook the protection of Mohammad Hamsho and carried out suspicious military operations\" and publishes a photo of armed Hisn Al-Sham pickup trucks at \"Hamsho's farm,\" alongside a screenshot of the company's own statute/registration document. A serious allegation from a single unbranded source, not independently corroborated here.", "note": "The security-company/personal-protection detail sits well outside this register's usual estate/DNS/corporate-registry evidence base — treat the \"suspicious military operations\" characterization as the report's own claim, not verified independently.", "controlled_by": [ "ammar-younes-younes", "fadi-al-dabbas" ], "sources": [ "sinalco-hamsho-dabbas-report" ] }, { "id": "ayman-jabir", "name": "Ayman Jabir", "aka": [ "Aiman Jaber", "Jaber", "Ayman Mehriz Jaber", "Ayman Mohriz Jaber", "Ayman Muhriz Jabir", "أيمن جابر" ], "type": "person", "jurisdiction": "SY", "sanctions": "designated", "confidence": "confirmed", "sector": "Steel, oil trading, media, pro-regime militias", "established": "b. 17 Jan 1967, Latakia, Syria (SECO); Syrian Memory gives 1969", "address": "Latakia governorate, Syria (per manhom.com)", "passport": "003308607", "photo": "/assets/documents/ayman-jabir-syrianmemory.webp", "positions": [ "Chairman, Arab Company for Iron Rolling / ESCO (الشركة العربية لدرفلة الحديد), Jableh", "Member, Arab Union for Iron and Steel (الاتحاد العربي للحديد والصلب)", "Partner, Cham Holding (شركة شام القابضة)", "Co-founder, Al-Dunya TV", "Honorary President, Wafa lil-Watan association", "Founder, Suqur al-Sahraa and Maghawir al-Bahr pro-regime militias" ], "summary": "Syrian businessman from Latakia, sanctioned by the US, EU, UK and Switzerland since 2012-2015 for leading the pro-regime \"Suqur al-Sahraa\" (Desert Hawks) and \"Maghawir al-Bahr\" (Marine Commandos) militias, and for interests in steel, oil trading and media: Al Jazira/El Jazireh (oil imports), Dunia TV and Sama Satellite Channel. Began in smuggling at Latakia port before building ties to the Assad family; partner in Rami Makhlouf's Cham Holding. In 2017 his militias were disarmed by the 4th Division and absorbed into the Russian-backed 5th Corps; his assets were seized on 27 April 2021. Switzerland's Emad Hamsho listing places him, without further detail, alongside Emad as a fellow designated businessman on the Syrian Council of Iron and Steel that Mohammed Hamcho chairs -- the only documented point of contact with the Hamsho network found so far (see note).", "note": "manhom.com's own profile instead describes Jabir as heading (\"يرأس\") the Iron and Steel Council in Syria, and lists a \"Muhammad Hamash\" (محمد حمش -- missing the final و, not confirmed as Hamsho) as a Council member, alongside a named Treasurer. This conflicts with the Chairman attribution to Mohammed Hamcho on syrian-council-metals-steel and is unresolved. No family, ownership or personal tie to any Hamsho is documented in these sources.", "sources": [ "seco-syria-20250307", "os-ayman-jabir", "syrianmemory-ayman-jabir", "manhom-ayman-jabir", "ayman-jabir-syrianmemory-photo" ] } ], "findings": [ { "id": "hamsho-signed-hadeed-letter", "order": 1, "title": "Hamsho's own signature, on the estate's own letterhead", "confidence": "confirmed", "summary": "A 2016 letter to Syria's Director General of Customs, on Syrian Council for Metals and Steel letterhead, is signed by Mohammed Hamsho himself as Chairman of the Board — and lists info@hadeed-mmc.com, a domain already in this estate, as the Council's official contact address.", "quote": { "text": "المجلس السوري للمعادن والصلب — رئيس مجلس الإدارة — محمد حمشو", "cite": "Letter to the Director General of Customs, ref. ص ع 16/28 · ص و 16/20, dated 2 March 2016", "image": "/assets/documents/hadeed-mmc-com-letter.jpg" }, "detail": [ "The letter is addressed to Fawaz Al-Asaad, Director General of Customs, and concerns temporary import and re-export procedures for steel scrap and rebar mills, proposing that a technical committee within the Council give a professional opinion before customs directorates approve such requests.", "Its footer gives three contact points: fax 011-0585170-4, tel 011-0585170-2, and — the one that matters here — info@hadeed-mmc.com. That is the same domain already in this register as \"Hadeed MMC\", previously rated suggestive on infrastructure alone.", "This is the strongest primary-source document in the entire register: not a website snapshot or a DNS record, but Mohammed Hamsho's own signature, on official letterhead, naming a specific address on a specific domain in the estate as his own council's point of contact.", "Emad Hamsho is separately reported as Vice-President of the same body — consistent with Mohammed as Chairman and Emad as VP, not a conflict between sources." ], "entities": [ "mohammed-hamcho", "hadeed-mmc", "syrian-council-metals-steel", "emad-hamsho" ], "sources": [ "hadeed-letter-2016", "ngo-emad-hamsho", "akkad-ig-hadeed-letter" ] }, { "id": "named-principal", "order": 2, "title": "A named, sanctioned principal", "confidence": "confirmed", "summary": "The archived corporate site of Sama Alsham Group carries a \"Message from the CEO\". It is signed by a man who is himself under sanctions — the son of Mohammed Hamcho.", "quote": { "text": "Ahmad Saber Hamcho, Chief Executive Officer", "cite": "samaalsham.com/ceo.html — Internet Archive, 4 September 2015" }, "detail": [ "This is the first time in the investigation that a named Hamsho family member has been placed on a specific operating group's paperwork by a primary source rather than by inference.", "The same page carries the group's own activity list — engineering and contracting, electronics, automotive, aviation, hospitality, pharmaceuticals, FMCG, media and general trading — and names its three foreign subsidiaries." ], "entities": [ "ahmad-saber-hamcho", "sama-alsham-group", "mohammed-hamcho" ], "sources": [ "sama-ceo-2015", "os-ahmad-hamsho" ] }, { "id": "offshore-layer", "order": 3, "title": "A declared three-country offshore layer", "confidence": "confirmed", "summary": "Sama Alsham's own site names its foreign subsidiaries outright: AMH Group in Dubai, EBLA Trade Off-shore in Beirut, and EGC in Egypt. Ebla Trade Services S.A. is already a designated entity.", "quote": { "text": "AMH is a group within the mother Sama Al Sham Group, that runs and operates the UAE branch.", "cite": "samaalsham.com/amh.html — Internet Archive, 2 September 2015" }, "detail": [ "Ebla Trade is described on the same site as \"the first expansion of Sama Al Sham group outside Syria\".", "Reporting has separately placed both of Mohammed Hamcho's sons in the records of the Lebanese offshore company." ], "entities": [ "sama-alsham-group", "amh-group", "ebla-trade-offshore", "egc" ], "sources": [ "sama-amh-2015", "sama-eblatrade-2015", "newarab-dictators-men" ] }, { "id": "expert-blue-dubai", "order": 4, "title": "Expert Blue, Emirates Towers", "confidence": "confirmed", "summary": "Expert Blue L.L.C. — 23rd floor, Jumeirah Emirates Towers, Dubai — trades general goods and livestock, exporting sheep to Qatar and the UAE and cattle to Kuwait. Its own footer reads \"A member of AMH Investment Group\". Independently confirmed active in the Dubai company registry under CBLS 273399.", "detail": [ "Independently of the website: expertbluefzc.com and amhgroupjobs.com were registered one second apart on 6 November 2013 — one checkout, one registrar account — matching AMH Group's stated founding year exactly.", "Note the FZC suffix on the second domain: the UAE free-zone company form.", "This is the UAE lead worth taking to a registry — and it has now been taken there. The Dubai company registry lists an active entity under the fuller legal name Expert Blue General Trading L.L.C., CBLS 273399, registry number 677135, incorporated 2012-10-04 as a mainland L.L.C. with paid and authorized capital of 600,000 AED, registered for exactly the two activities its own site describes: livestock trading (code 512107) and general trading (code 521904).", "The registry lists it as a mainland L.L.C., not a free-zone entity, which sits oddly against the FZC suffix on its own domain — worth checking whether that names a distinct free-zone sister entity or is just a brand choice.", "The registry's incorporation date, 2012-10-04, is a year earlier than the 2013 founding date AMH Group's own site gives — a discrepancy worth noting, not yet resolved." ], "entities": [ "expert-blue", "amh-group" ], "sources": [ "expertblue-2014", "sama-expertblue-2015", "obs-dns-20260812", "b2bhint-expertblue" ] }, { "id": "designated-entities-one-server", "order": 5, "title": "Designated entities on one mail server", "confidence": "strong", "summary": "Three entities named directly in Mohammed Hamcho's EU/UK designation — Hamsho Communication, Syria Metal Industries and Jupiter — run their corporate mail on the same server as the rest of the estate.", "detail": [ "Alongside them sit domains matching OFAC's listed business lines for Hamsho International Group: carpet distribution, printing services, hotels and resorts, and car rental.", "The Reuters description of the family's enterprises — cable production, metalworks, electronics and film studios — is matched four for four on this one machine: Union, Syria Metal Industries and Hadeed, SamaTel and MEMO, and Sama Al-Fan with SAMA Al-Arab TV." ], "entities": [ "hamsho-communication", "syria-metal-industries", "jupiter-investment-tourism", "hamsho-carpet" ], "sources": [ "uk-eu-annex", "os-hig", "reuters-economy", "obs-dns-20260812" ] }, { "id": "hamsho-group-vhost", "order": 6, "title": "Hamsho Group still sits on the live server", "confidence": "strong", "summary": "hamsho-group.com and gaia-printing.com remain configured as virtual hosts on the same physical machine that serves the entire live Union estate, though neither resolves in public DNS any more.", "detail": [ "The old gaia-printing.com/hamsho/ install was therefore never a naming coincidence: Gaia's own web server is, and has been for years, the host of the Hamsho Group site itself.", "This is a harder link than the footer-credit evidence it replaces, because it does not depend on anyone choosing to publish a credit." ], "entities": [ "gaia", "hamsho-international-group", "middle-east-contracting" ], "sources": [ "obs-dns-20260812", "horizon-cont" ] }, { "id": "gaia-captive-operator", "order": 7, "title": "Gaia is a captive operator, not a website contractor", "confidence": "strong", "summary": "Gaia runs corporate mail for the whole estate on a dedicated second server, holds the DNS, and holds the single registrar account every domain sits in. That is an in-house IT function wearing a vendor's name.", "detail": [ "The earlier reading — that shared nameservers were evidence of a shared web vendor and nothing more — is directionally right but too weak. It is true that Gaia has genuine unrelated clients, and co-hosting alone proves nothing about beneficial ownership.", "But whoever controls gaia.group.sy@gmail.com and the Dynadot account has administrative control over the digital estate of multiple sanctioned entities. That is worth stating plainly." ], "entities": [ "gaia" ], "sources": [ "obs-dns-20260812", "gaia-sy" ] }, { "id": "union-hamsho-estate", "order": 8, "title": "Union Electrical Group is part of the Hamsho estate", "confidence": "strong", "summary": "Union's ten domains run on the same Gaia-operated infrastructure as the rest of the estate — hosting, nameservers, and the single Dynadot registrar account — and its cable and metals product line matches the family's documented business lines exactly.", "detail": [ "Reuters and OFAC both place cable and metal manufacturing among Hamsho's documented business lines, and Union's product line — copper and aluminium cable, PVC, transformers — matches precisely.", "Union's domains share Gaia's hosting, nameservers and registrar account with the rest of the estate, the same infrastructure fingerprint documented throughout this register.", "The Syria Report directory entry for UEG is paywalled and would be worth the subscription for a named director on record." ], "entities": [ "union-electrical-group", "gaia" ], "sources": [ "syria-report-ueg", "ueg-certificates", "obs-dns-20260812" ] }, { "id": "tahweel-thread", "order": 10, "title": "A remittance brand, blocked in four spellings", "confidence": "suggestive", "summary": "Tahweel is Arabic for money transfer. Four transliterations were registered within one second of each other in September 2015 and all four are now suspended.", "detail": [ "Alongside smartmoney.sy this is the only financial-services thread in the estate, and nothing has been recovered about what the business was or whether it ever operated.", "Given the sanctions context, informal value transfer is the sector where it would matter most. This is the highest-value unexplored lead in the file." ], "entities": [ "tahweel" ], "sources": [ "obs-dns-20260812" ] }, { "id": "itsalplus-samatel", "order": 12, "title": "Itsal Plus was mis-filed as a third party — it's SamaTel's OPPO line", "confidence": "strong", "summary": "itsalplus.com had been carried as a generic mail-only client on Gaia's Server B, no different from the ~90 unrelated businesses it shares hosting with. Two independent sources say otherwise: an investigative piece names it directly as a Hamsho holding, and a Damascus mobile-retail professional's own employment history treats it and SamaTel as one operation, not two.", "detail": [ "Syria in Transition's \"Follow the Money\" piece (issue 37) names Itsal Plus among the Hamsho family's commercial holdings.", "A LinkedIn employment history lists a single combined role — \"Samatel - Itsal plus - OPPO Syria\", Damascus — rather than three separate employer entries. That is someone who worked there describing it as one job, one operation, under three names. SamaTel is already a confirmed Sama Alsham electronics line.", "Itsal Plus's own Facebook page self-describes as OPPO's exclusive agent in Syria — establishing what the business is, independent of who owns it.", "This is a correction, not new infrastructure: the domain's hosting on Server B never changed, only the reading of it. It is the same pattern the register already warns about — shared infrastructure alone proves an operator, not an owner — except here the ownership evidence arrived separately, from reporting and from an independent employment record, not from the hosting." ], "entities": [ "itsal-plus", "samatel" ], "sources": [ "sit-follow-the-money-37", "itsalplus-samatel-linkedin", "itsalplus-fb" ] }, { "id": "ghabra-horse-stable", "order": 13, "title": "Hamcho's own horse registry names him owner", "confidence": "confirmed", "summary": "ghabra.com had been carried as a generic third-party mail client on Server B. Its own archived pages are a horse-pedigree database, and one entry lists Mohammed Hamcho by name as both owner and breeder — matching animal farming and horse trading, a business line named directly in his OFAC designation.", "quote": { "text": "المالك: محمد حمشو — المربي: محمد حمشو — الإسطبل: الغبراء", "cite": "ghabra.com/hors.php?id=5, registry no. A01750, \"حسناء الشام\" — Internet Archive, 25 November 2007" }, "detail": [ "The record: registry no. A01750, name Hasnaa Al-Sham (حسناء الشام), a mare foaled 1997, strain شويمة سباح, at the Al-Ghabra stable — with Mohammed Hamcho listed as both owner (المالك) and breeder (المربي).", "This is the domain's own primary content, not shared-infrastructure inference — the same category of evidence as the hadeed-mmc.com letterhead and the horizon-cont.com contact page, both already rated confirmed on that basis.", "OFAC's designation narrative for Hamsho International Group explicitly lists animal farming and horse trading among its business lines. A private Arabian-horse stable is exactly that line, not an adjacent guess.", "Reclassified from third_party to hamsho; the mail-only hosting on Server B is unchanged, only the ownership read.", "A second archived page corroborates it independently: the site's prose welcome message, captured eleven days earlier on 14 November 2007, ends with his name as the page's only signature — \"أهلاً بكم في مربطنا محمد حمشو\" (\"Welcome to our stud — Mohammed Hamsho\")." ], "images": [ "/assets/documents/ghabra-stud-2007.jpg" ], "entities": [ "ghabra", "mohammed-hamcho", "hamsho-international-group" ], "sources": [ "ghabra-archive-2007", "ghabra-wayback-2007", "os-hig" ] }, { "id": "palmyra-sama-hamsho-bridge", "order": 14, "title": "Palmyra Village's own contact details match Hamsho International Group's", "confidence": "strong", "summary": "Palmyra Village & Resort's own \"site under construction\" holding page lists a Damascus P.O. Box and fax number — the exact P.O. Box and fax OpenSanctions lists for Hamsho International Group itself.", "images": [ "/assets/documents/palmyravillage-holding-page.jpg" ], "detail": [ "palmyravillage.com is the domain Sama Alsham's own CEO page declares under its Hospitality activities (\"Tamary Palmyra Village\") — already in this register as part of the Sama Alsham cluster.", "Its own holding page gives Damascus P.O. Box 8254 and fax +963 11 2318875 — identical, digit for digit, to the P.O. Box and fax OpenSanctions lists for Hamsho International Group's Baghdad Street office.", "This is the same category of evidence as the Gaia↔Union DMARC bridge and the horizon-cont.com phone-number match already in this register: a shared administrative contact detail, not shared branding — except here it connects the Sama Alsham naming cluster directly to Hamsho International Group's own sanctions-listed contact details, independent of any DNS or hosting evidence." ], "entities": [ "palmyra-village-resort", "hamsho-international-group", "sama-alsham-group" ], "sources": [ "palmyravillage-holding-page", "sama-ceo-2015", "os-hig" ] }, { "id": "hadeed-emad-competition-memo", "order": 15, "title": "An internal Hadeed memo names a commission recipient and a rival Hmeisho company", "confidence": "strong", "summary": "A 2014 internal Hadeed Metal Manufacturing memo records a large commission paid to Samir Hmeisho's company for scrap-iron purchases, and separately describes market competition from a company it calls \"Emad Hmeisho's\" over preferential electricity tariffs.", "quote": { "text": "استخراج و نقل السكراب الخاص بشركة حديد", "cite": "Subject line, Hadeed Metal Manufacturing internal memo, dated 2014-05-04" }, "images": [ "/assets/documents/hadeed-scrap-memo-2014-p1.jpg", "/assets/documents/hadeed-scrap-memo-2014-p2.jpg", "/assets/documents/hadeed-scrap-memo-2014-p3.jpg" ], "detail": [ "Records three payments toward a scrap-iron extraction project referred to as \"Dara\": $1,000,000 paid 20 August 2013, $600,000 paid 9 March 2014, and SYP 117,210,000 paid as a sales commission to Samir Hmeisho's company for purchases from suppliers and for scrap delivered by the Dara project's own vehicles.", "Separately describes a competitor, referred to as \"Emad Hmeisho's company\" (شركة عماد حميشو), entering the scrap-melting market with older furnaces and — on the memo's account — using a 66 KV power tariff not imposed on it, against the 230 KV tariff Hadeed pays, undercutting Hadeed's price by roughly half.", "Emad Hamsho is already in this register as a separately sanctioned relative of Mohammed Hamcho and owner of Syria Metal Industries. This memo is the first indication in this dataset of commercial friction, not coordination, between two branches of the family's metals interests." ], "entities": [ "hadeed-mmc", "emad-hamsho", "syria-metal-industries" ], "sources": [ "hadeed-scrap-memo-2014" ] }, { "id": "jupiter-four-owners-resolved", "order": 16, "title": "Jupiter's four sanctioned owners are now all named", "confidence": "confirmed", "summary": "OCCRP reported that Jupiter for Investments is owned by relatives of Mohammed Hamcho, \"including four who are under sanctions.\" This register had documented only three and flagged a fourth as unidentified. The fourth is Ali Mohamad Hamcho — a third Hamcho son, on the OFAC SDN list since April 2023 — and Ahmad Saber Hamcho's own directory profile independently names him a founding 11% (1,100-share) partner of the Jupiter vehicle.", "detail": [ "The four sanctioned relative-owners are now all in this register: Ahmad Saber Hamcho, Amr Mohamed Hamsho, Ali Mohamad Hamcho and Emad Hamsho — the first three brothers, the fourth the family's independently-sanctioned metals cousin.", "Ali's passport, N005361042, is consecutive with Amr's (N005361043), corroborating the sibling link from the passport register itself.", "Ahmad's 11% founding stake in شركة جوبيتر للاستثمارات is the first shareholder-level confirmation — not just a family-name inference — that the Hamsho sons own Jupiter, matching OCCRP's ownership claim.", "Whether OCCRP's \"Jupiter for Investments SA\" is legally identical to this register's Syrian \"Jupiter for Investment and Tourism\" is still not proven; the ownership finding stands regardless of that unresolved corporate-form question." ], "entities": [ "jupiter-investment-tourism", "ali-hamsho", "ahmad-saber-hamcho", "amr-hamsho", "emad-hamsho" ], "sources": [ "occrp-un-funding-2022", "os-ali-hamsho", "manhom-ahmad-hamsho" ] }, { "id": "hamsho-dabbas-marriage", "order": 17, "title": "The Al-Dabbas name reaches Hamsho by marriage, not just affiliation", "confidence": "strong", "summary": "Mohammed Hamcho's wife is Rania al-Dabbas — designated with the four children under the Caesar Act in June 2020. The Al-Dabbas surname is the same one carried by DAK's owners (Fadi, Ghiyath and Abeer Al-Dabbas) and by Fadi al-Dabbas, reported co-founder of the Hamsho-protection security firm Hisn al-Sham. The marriage is the first documented family bridge between the Hamsho line and the Al-Dabbas names threaded through the Sama Alsham food and security clusters.", "detail": [ "The marriage itself is confirmed by multiple reports, including Al Jazeera's encyclopedia profile and Syria Direct.", "What is not established here is whether Rania al-Dabbas is a direct relative of DAK's Al-Dabbas owners — the surname match is a lead worth taking to the Syrian commercial register, not a proven shareholding link.", "Reporting separately names a brother-in-law, Ruslan al-Khayyat, as an alleged sanctions-evasion accomplice; the different surname means the exact family geometry is still open." ], "entities": [ "rania-al-dabbas", "mohammed-hamcho", "dak", "fadi-al-dabbas" ], "sources": [ "aljazeera-hamsho-2026", "syriadirect-settlement", "sinalco-hamsho-dabbas-report" ] }, { "id": "seif-alsham-equestrian", "order": 18, "title": "\"Seif Alsham\" ties the family's horse interests to a live domain", "confidence": "strong", "summary": "Ahmad Saber Hamcho's directory profile names Mohammed Hamsho as General Manager and founding partner of شركة سيف الشام (Seif Alsham), with Ahmad himself holding a founding 9% (27 shares). The register's previously-unlinked seifalsham.com — the Seif Alsham Equestrian Club, نادي سيف الشام للفروسية — sits on the estate's corporate mail server, connecting a Hamsho company to a live piece of the digital estate.", "detail": [ "This is a second equestrian thread alongside the Al-Ghabra Stable, whose own archived registry names Mohammed Hamcho as owner and breeder — and it fits Ahmad's documented career as Syria's first Olympic show-jumper.", "A related name, شركة سيف الشام للآليات (Seif Alsham for Machinery), appears in the family's company list — the same brand extended into a second sector.", "The shareholding figures come from a directory profile, not a corporate-registry extract, which is why this is rated strong rather than confirmed." ], "entities": [ "seif-alsham", "mohammed-hamcho", "ahmad-saber-hamcho", "ghabra" ], "sources": [ "manhom-ahmad-hamsho", "obs-dns-20260812" ] }, { "id": "gaia-owner-hamsho-marriage", "order": 19, "title": "Gaia's own owner is married into a Hamsho-surnamed household", "confidence": "strong", "summary": "Gaia's owner and CEO, Anas Othman, is identified by his own Facebook profile. The same profile shows him married since 27 February 2016 to Shefaa Hamsho Othman, whose own profile confirms the marriage, carries the Hamsho surname, and lists her work as design at Sama TV — a Sama Alsham Group subsidiary already in this register. It is the first personal, rather than purely technical, link found between the operator of the estate's infrastructure and the estate itself.", "detail": [ "Both individual facts — the marriage, and Shefaa's work at Sama TV — are stated on each spouse's own primary-source profile, and the two profiles corroborate each other on the marriage date.", "What is not established here is whether Shefaa Hamsho Othman is a direct relative of Mohammed Hamcho's own line — the surname match is a lead, not a proven family tree, the same caution already applied in this register to Rania al-Dabbas's Al-Dabbas surname.", "This does not change the confidence already assigned to Gaia's captive-operator role, which rests on independent technical evidence (see gaia-captive-operator). It adds a named individual and a family thread to that already-established operator relationship." ], "entities": [ "gaia", "anas-othman", "sama-al-arab-tv" ], "sources": [ "anas-othman-fb", "shefaa-hamsho-othman-fb" ] } ], "domains": [ { "id": "union-cable.com", "purpose": "Union Cables Company", "category": "union", "server": "a", "status": "live", "entity": "union-cables", "created": "2017-01-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all — two Hetzner IPs beyond Server A itself, shared across most of the union-*.com cluster", "DMARC: p=none" ], "whois": "Matches the existing record: created 2017-01-12, Dynadot Inc.", "wayback": "A real 2013 snapshot; later crawl noise (.well-known probes) is not meaningful content.", "assessment": "Consistent with the existing union-cables entity — no new findings, DNS/WHOIS confirm what's already on record." } }, { "id": "union-cables.com", "purpose": "Union Cables Company", "category": "union", "server": "a", "status": "live", "entity": "union-cables", "created": "2018-01-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Registered 2018-01-23, one year after union-cable.com. Registrar: Dynadot Inc.", "wayback": "301-redirect snapshot from 2018, consistent with being the secondary/alternate spelling.", "assessment": "Consistent with the existing union-cables entity." } }, { "id": "union-copper.com", "purpose": "Union Copper Company", "category": "union", "server": "a", "status": "live", "entity": "union-copper", "created": "2017-01-13", "registrar": "Dynadot Inc", "note": "DMARC rua points to the Gaia operator's Gmail address", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → Cloudflare (adam/brenna.ns.cloudflare.com) — unlike most of the union cluster, this one doesn't use Gaia's vanity NS", "SPF: v=spf1 +a +mx +ip4:65.21.200.112~all", "DMARC: p=none, rua=mailto:gaia.group.sy@gmail.com — the operator fingerprint already on record" ], "whois": "Matches the existing record: created 2017-01-13, Dynadot Inc.", "assessment": "Consistent with the existing union-copper entity and its DMARC-to-Gaia finding." } }, { "id": "union-pvc.com", "purpose": "Union Plastic Company", "category": "union", "server": "a", "status": "live", "entity": "union-plastic", "created": "2017-01-13", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Created 2017-01-13, the same day as union-copper.com. Registrar: Dynadot Inc.", "wayback": "Real site content from 2018 (18KB page); later entries are crawler probe noise.", "assessment": "Consistent with the existing union-plastic entity." } }, { "id": "union-transformer.com", "purpose": "Union Transformers Company", "category": "union", "server": "a", "status": "live", "entity": "union-transformers", "created": "2017-01-13", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Created 2017-01-13. Registrar: Dynadot Inc.", "wayback": "Real site content from 2018 (18KB page).", "assessment": "Consistent with the existing union-transformers entity." } }, { "id": "union-transformers.com", "purpose": "Union Transformers Company", "category": "union", "server": "a", "status": "live", "entity": "union-transformers", "created": "2018-01-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Registered 2018-01-23, same day as union-cables.com — the two alternate-spelling registrations were evidently a matched pair.", "assessment": "Consistent with the existing union-transformers entity." } }, { "id": "union-electricalgroup.com", "purpose": "Union Electrical Group — main site", "category": "union", "server": "a", "status": "live", "entity": "union-electrical-group", "created": "2017-01-14", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 ip4:65.21.200.112 ip4:148.251.75.47 ip4:176.9.55.34 +a +mx ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2017-01-14, Dynadot Inc.", "wayback": "Real site content since 2018.", "assessment": "Consistent with the existing union-electrical-group entity." } }, { "id": "union-electricgroup.com", "purpose": "Union Electrical Group — alternate spelling", "category": "union", "server": "a", "status": "live", "entity": "union-electrical-group", "created": "2017-02-01", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +ip4:65.21.200.112 +ip4:193.43.149.11 +include:_spf.google.com ~all — a distinct IP (193.43.149.11) and a Google Workspace include not seen on its siblings", "DMARC: p=none" ], "whois": "Registered 2017-02-01, about two weeks after the main site. Registrar: Dynadot Inc.", "assessment": "Consistent with the existing union-electrical-group entity; the extra SPF include suggests this alternate-spelling domain has (or had) its own separately configured mailbox." } }, { "id": "union-electricaltrade.com", "purpose": "Union Electrical Trade", "category": "union", "server": "a", "status": "live", "entity": "union-electrical-group", "created": "2017-01-14", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Created 2017-01-14, the same day as union-electricalgroup.com. Registrar: Dynadot Inc.", "wayback": "Real 2018 content including an Etihad.jpg image (338KB) — shared with union-electrictrade.com below (identical digest).", "assessment": "Consistent with the existing union-electrical-group entity." } }, { "id": "union-electrictrade.com", "purpose": "Union Electrical Trade — alternate spelling", "category": "union", "server": "a", "status": "live", "entity": "union-electrical-group", "created": "2017-03-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Registered 2017-03-12. Registrar: Dynadot Inc.", "wayback": "Real 2018 content, byte-identical to union-electricaltrade.com's Etihad.jpg — the two are mirrors.", "assessment": "Consistent with the existing union-electrical-group entity." } }, { "id": "hamsho-group.com", "purpose": "Hamsho Group", "category": "hamsho", "server": "a", "status": "unresolved", "entity": "hamsho-international-group", "created": "2018-06-28", "registrar": "Dynadot Inc", "note": "Still a configured vhost with a mail. entry, but no public DNS. Registered two days after sama-holding.com.", "research": { "retrieved": "2026-08-13", "dns": [ "A → none; NS → none; MX → none; TXT → none — no public DNS at all, on 1.1.1.1/8.8.8.8 alike" ], "whois": "Matches the existing record: created 2018-06-28, Dynadot Inc.", "site": "Does not resolve — connection fails outright, consistent with status: unresolved.", "assessment": "Confirms the existing record. The vhost/mail. entry referenced in the note is server-side configuration invisible from outside; nothing new to add from public DNS or WHOIS." } }, { "id": "hamshocom.com", "purpose": "Hamsho Communication — GSM and satellite handsets", "category": "hamsho", "server": "b", "status": "mail_only", "entity": "hamsho-communication", "created": "2013-07-11", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.196.10, 104.21.90.55); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2013-07-11, Dynadot Inc.", "wayback": "Extensive real content from 2003–2004 (about_a.html, aboutus.html, accessories.html, activities.html) — a genuine, built GSM-handset retail site from that era.", "assessment": "Consistent with the existing hamsho-communication entity." } }, { "id": "hamshocarpet.com", "purpose": "Hamsho Carpet — carpet distribution", "category": "hamsho", "server": "b", "status": "suspended", "entity": "hamsho-carpet", "created": "2006-11-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.47.235, 172.67.174.123); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2006-11-12, Dynadot Inc.", "wayback": "Real content from 2007 (Flash-era .swf assets, since 404).", "assessment": "Consistent with the existing hamsho-carpet entity." } }, { "id": "smi-sy.com", "purpose": "Syria Metal Industries", "category": "hamsho", "server": "b", "status": "mail_only", "entity": "syria-metal-industries", "created": "2008-03-20", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.163.75, 104.21.34.169); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Matches the existing record: created 2008-03-20, Dynadot Inc.", "wayback": "Real content from 2010; later entries are a mix of a suspicious injected script (bUzZckQJT.js, 2025) and routine Cloudflare assets — the injected-looking filename is worth a second look if this domain is revisited.", "assessment": "Consistent with the existing syria-metal-industries entity." } }, { "id": "horizon-cont.com", "purpose": "Middle East Contracting / Horizon — ready-mix concrete", "category": "hamsho", "server": "a", "status": "live", "entity": "middle-east-contracting", "created": "2025-09-07", "registrar": "Dynadot Inc", "note": "Footer credits Gaia Company 2025", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A); NS → ns1/ns2.sama-athletic.com", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none" ], "whois": "Matches the existing record: created 2025-09-07, Dynadot Inc.", "wayback": "No snapshots — too recent.", "assessment": "Consistent with the existing middle-east-contracting entity." } }, { "id": "ghabra.com", "purpose": "Al-Ghabra — Arabian horse stable; the site's own registry pages name Mohammed Hamcho as owner", "category": "hamsho", "server": "b", "status": "mail_only", "entity": "ghabra", "created": "2004-12-05", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.5.217, 172.67.133.224); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2004-12-05, Dynadot Inc.", "wayback": "Real content from 2006; later entries include a suspended-account page (2025), consistent with mail_only status.", "assessment": "Consistent with the existing ghabra entity." } }, { "id": "amhgroup.com", "purpose": "AMH Group — Dubai holding", "category": "offshore", "server": "b", "status": "suspended", "entity": "amh-group", "created": "2006-05-17", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.31.218, 172.67.180.2); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2006-05-17, Dynadot Inc.", "wayback": "The oldest snapshot in this register — 1998 — genuine historical continuity for the AMH name.", "assessment": "Consistent with the existing amh-group entity." } }, { "id": "amhgroupjobs.com", "purpose": "AMH Group — recruitment", "category": "offshore", "server": "b", "status": "mail_only", "entity": "amh-group", "created": "2013-11-06", "registrar": "Dynadot Inc", "note": "Registered one second after expertbluefzc.com", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.188.34, 104.21.89.53); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record and the one-second-apart registration pattern already on file.", "assessment": "Consistent with the existing amh-group entity." } }, { "id": "expert-blue.com", "purpose": "Expert Blue L.L.C. — general trading and livestock", "category": "offshore", "server": "b", "status": "suspended", "entity": "expert-blue", "created": "2013-10-28", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.61.125, 172.67.210.131); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:78.47.210.137 +ip4:94.130.30.51 ~all — two additional Hetzner IPs not seen elsewhere in this batch", "DMARC record present but truncated in this lookup; TXT set also carries the SPF above" ], "whois": "Matches the existing record: created 2013-10-28, Dynadot Inc.", "wayback": "Real content from 2014, including product-archive images.", "assessment": "Consistent with the existing expert-blue entity." } }, { "id": "expertbluefzc.com", "purpose": "Expert Blue FZC — UAE free-zone form", "category": "offshore", "server": "b", "status": "mail_only", "entity": "expert-blue", "created": "2013-11-06", "registrar": "Dynadot Inc", "note": "Registered one second before amhgroupjobs.com", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.167.65, 104.21.16.107); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record and the one-second registration pairing already on file.", "assessment": "Consistent with the existing expert-blue entity." } }, { "id": "equistar-uae.com", "purpose": "Equistar — UAE, equestrian", "category": "offshore", "server": "b", "status": "mail_only", "created": "2014-06-01", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.16.189, 172.67.215.141); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2014-06-01, Dynadot Inc.", "wayback": "Real content from 2018.", "assessment": "No entity currently attached. The equestrian theme echoes Al-Ghabra and Seif Alsham elsewhere in this register, but nothing recovered here ties it to a specific person or company beyond the domain name — a lead, not a finding." } }, { "id": "eblatrade-lb.com", "purpose": "Ebla Trade Off-shore — Beirut", "category": "offshore", "server": "b", "status": "mail_only", "entity": "ebla-trade-offshore", "created": "2013-01-29", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.223.245, 104.21.25.74); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "DMARC: p=none, rua=mailto:gaia.group.sy@gmail.com — the operator fingerprint already documented elsewhere in this register" ], "whois": "Matches the existing record: created 2013-01-29, Dynadot Inc.", "wayback": "Real content from 2018.", "assessment": "Consistent with the existing ebla-trade-offshore entity; the DMARC-to-Gaia pattern adds another operator-level data point alongside Union Copper and Union Electrical Group." } }, { "id": "eblaair.com", "purpose": "Ebla Airlines", "category": "offshore", "server": "b", "status": "mail_only", "entity": "ebla-airlines", "created": "2015-08-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.46.80, 172.67.136.108); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2015-08-23, Dynadot Inc.", "wayback": "Real content from 2018.", "assessment": "Consistent with the existing ebla-airlines entity." } }, { "id": "eblaairlines.com", "purpose": "Ebla Airlines", "category": "offshore", "server": "b", "status": "mail_only", "entity": "ebla-airlines", "created": "2015-08-10", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.54.117, 172.67.138.121); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2015-08-10, Dynadot Inc — 13 days before eblaair.com.", "wayback": "Real content from 2016.", "assessment": "Consistent with the existing ebla-airlines entity." } }, { "id": "eblaair.net", "purpose": "Ebla Airlines", "category": "offshore", "server": "b", "status": "mail_only", "entity": "ebla-airlines", "created": "2015-08-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.63.99, 172.67.145.34); NS → distinct Cloudflare pair (walk/wilson.ns.cloudflare.com) — the only domain in this batch not on adam/brenna or edna/glen", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Created 2015-08-23, the same day as eblaair.com. Registrar: Dynadot Inc.", "wayback": "Real content from 2023 (861 bytes — likely a stub/redirect page).", "assessment": "Consistent with the existing ebla-airlines entity." } }, { "id": "eblaairlines.net", "purpose": "Ebla Airlines", "category": "offshore", "server": "b", "status": "mail_only", "entity": "ebla-airlines", "created": "2015-08-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.67.154, 172.67.177.239); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Created 2015-08-23, same day as its .com and .net siblings. Registrar: Dynadot Inc.", "wayback": "Real content from 2023.", "assessment": "Consistent with the existing ebla-airlines entity." } }, { "id": "samaalsham.com", "purpose": "Sama Alsham Group — parent holding", "category": "sama", "server": "b", "status": "dormant", "entity": "sama-alsham-group", "created": "2015-05-12", "registrar": "Dynadot Inc", "note": "Serves only an empty directory index; the 2015 site survives in the Internet Archive", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.193.113, 104.21.82.22); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2015-05-12, Dynadot Inc.", "wayback": "Real content from 2010 onward, including a directory-listing snapshot as recently as May 2026 — matches the current \"empty directory index\" note.", "assessment": "Consistent with the existing sama-alsham-group entity." } }, { "id": "samaalsham-sy.org", "purpose": "Sama Alsham — site in preparation", "category": "sama", "server": "a", "status": "unresolved", "entity": "sama-alsham-group", "research": { "retrieved": "2026-08-13", "dns": "Could not be determined from this environment — same network-filter block as hamsho-group.com (see that entry's research for the full explanation). Not evidence of anything about the domain itself.", "whois": "Registered 2025-01-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "wayback": "Real content as recently as January 2025 (homepage plus a cpanel subdomain snapshot) — confirms this was a live, built site well after the \"site in preparation\" purpose text was written, and well before today's unreachability.", "assessment": "The domain was genuinely live within the last two years per Wayback; its current unreachability from this environment specifically cannot be attributed to the domain being down, abandoned, or compromised — that would need checking from an unfiltered network." } }, { "id": "samaalsham.net", "purpose": "Sama Alsham Group — placeholder / under construction", "category": "sama", "server": "b", "status": "live", "entity": "sama-alsham-group", "created": "2011-08-18", "registrar": "Dynadot Inc", "note": "Static \"Under Construction\" page since 2018. A record 188.40.140.248 shares Server B's server3.gaia-group.co reverse-DNS; SPF directly authorises 188.40.140.252 and 176.9.55.34. Registered 2011, predating samaalsham.com by ~4 years.", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.248 (adjacent to but distinct from Server B's 188.40.140.252 — same /24, consistent with the existing note)", "NS → ns5/ns6.gaia-group.co — Gaia's own branded nameservers, a more direct operator signal than the sama-athletic.com vanity NS used elsewhere", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 ~all; also carries a Google Search Console verification TXT record", "DMARC: p=none" ], "whois": "Matches the existing record: created 2011-08-18, Dynadot Inc.", "wayback": "Real content from 2011 onward (arabisque.html, a CMS reference to \"SyrianMonster\" — the same .sy registrar seen elsewhere in this register).", "assessment": "Consistent with the existing sama-alsham-group entity and its already-documented notes." } }, { "id": "sama-holding.com", "purpose": "Sama Holding", "category": "sama", "server": "b", "status": "suspended", "entity": "sama-holding", "created": "2018-06-26", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.45.206, 172.67.218.220); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2018-06-26, Dynadot Inc — two days before hamsho-group.com.", "wayback": "Real content from 2013, predating the current registration — likely a prior owner/use, not investigated further.", "assessment": "Consistent with the existing sama-holding entity." } }, { "id": "samapower.com", "purpose": "Sama Power", "category": "sama", "server": "b", "status": "mail_only", "created": "2021-03-16", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.131.160, 104.21.10.160); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2021-03-16, Dynadot Inc.", "site": "Redirects to a hosting-provider \"account suspended\" page — no content.", "wayback": "Real content from 2013, predating the current registration.", "assessment": "No entity currently attached. See samapower.sy below for a much stronger lead on the same brand." } }, { "id": "samapower.sy", "purpose": "Sama Power", "category": "sama", "server": "b", "status": "mail_only", "created": "2021-12-28", "registrar": "Syrian Monster", "note": "Registrant Organization on the .sy registry record reads \"Hamsho Group\" — not privacy-redacted, a direct primary-source link between this domain and the Hamsho name that this register did not previously have.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.183.84, 104.21.18.202); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": ".sy registry record: registered 2021-12-28. Sponsoring Registrar: Syrian Monster. Registrant Organization: \"Hamsho Group\" — stated directly, not privacy-redacted (the .sy registry doesn't offer the same redaction .com registrations get through Dynadot).", "site": "Account-suspended page — no content beyond a webmaster contact address.", "assessment": "This is a primary-source registry record naming \"Hamsho Group\" as registrant for a domain not previously linked to any entity in this register. Worth promoting to a proper finding: it is a cleaner, more direct ownership signal than most of the DNS/hosting evidence this register otherwise relies on." } }, { "id": "seifalsham.com", "purpose": "Seif Alsham · نادي سيف الشام للفروسية — a Hamsho family company (Mohammed Hamsho GM; Ahmad Saber Hamcho 9% partner)", "category": "sama", "server": "b", "status": "mail_only", "entity": "seif-alsham", "created": "2005-09-07", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.144.191, 104.21.95.119); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Matches the existing record: created 2005-09-07, Dynadot Inc.", "wayback": "Extensive real content from 2006–2008 — an active equestrian-club product gallery, Arabic-language.", "assessment": "Consistent with the existing seif-alsham entity." } }, { "id": "sama-athletic.com", "purpose": "Filler sports site — hosts ns1/ns2 for the whole cluster", "category": "sama", "server": "a", "status": "live", "created": "2021-09-28", "registrar": "Dynadot Inc", "note": "Recycled Arabic football articles dated April 2018. Do not read as an ownership signal.", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A, its own home server); NS → ns1/ns2.sama-athletic.com (itself)", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all", "DMARC: p=none" ], "whois": "Matches the existing record: created 2021-09-28, Dynadot Inc.", "assessment": "Confirms the existing note: this domain is the vanity-NS host for elmas-invest.com, trixaglobal.com, awtad-albarakeh.com and maak-sy.com in the third_party list, among others." } }, { "id": "hadeed-mmc.com", "purpose": "Hadeed MMC — steel", "category": "industry", "server": "b", "status": "live", "entity": "hadeed-mmc", "created": "2011-12-08", "registrar": "Dynadot Inc", "note": "info@hadeed-mmc.com is the official contact address on a 2016 letter signed by Mohammed Hamsho as Chairman of the Syrian Council for Metals and Steel", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.252 (Server B directly, not Cloudflare-proxied); NS → ns5/ns6.gaia-group.co — Gaia's own branded nameservers", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2011-12-08, Dynadot Inc.", "wayback": "No snapshots retrieved in this pass.", "assessment": "Consistent with the existing hadeed-mmc entity — the direct (non-proxied) Server B IP and Gaia's own nameservers are a slightly tighter operator signal than the Cloudflare-fronted domains elsewhere in this cluster." } }, { "id": "sah-metaltrading.com", "purpose": "SAH Metal Trading", "category": "industry", "server": "b", "status": "mail_only", "created": "2022-02-08", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.147.53, 104.21.47.110); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2022-02-08, Dynadot Inc.", "site": "HTTP 526 (Cloudflare SSL handshake failure to the origin) — unreachable.", "wayback": "Real content from 2023, plus a cpanel subdomain snapshot.", "assessment": "No entity currently attached. \"SAH\" reads plausibly as an initialism, but nothing recovered here identifies the underlying company beyond the domain name." } }, { "id": "chamcontracting.com", "purpose": "Cham Engineering and Contracting", "category": "industry", "server": "b", "status": "dormant", "entity": "cham-contracting", "created": "2015-07-25", "registrar": "Dynadot Inc", "note": "Now serves only an \"Under Construction\" placeholder; the 2016 site survives in the Internet Archive. SPF authorises ip4:188.40.140.252 (Server B) directly.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.94.126, 172.67.135.251); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2015-07-25, Dynadot Inc.", "wayback": "Real content from 2016, including an admin control panel path.", "assessment": "Consistent with the existing cham-contracting entity." } }, { "id": "tatweer-sy.com", "purpose": "Tatweer — engineering and contracting", "category": "industry", "server": "b", "status": "mail_only", "entity": "tatweer", "created": "2008-06-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.74.230, 172.67.164.79); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Registered 2008-06-12, the same minute as tatweersyria.com — a matched pair. Registrar: Dynadot Inc.", "wayback": "Real content from 2013.", "assessment": "Consistent with the existing tatweer entity." } }, { "id": "tatweersyria.com", "purpose": "Tatweer Syria", "category": "industry", "server": "b", "status": "mail_only", "entity": "tatweer", "created": "2008-06-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.162.89, 104.21.15.111); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Registered 2008-06-12, one second after tatweer-sy.com. Registrar: Dynadot Inc.", "wayback": "Real content from 2011.", "assessment": "Consistent with the existing tatweer entity." } }, { "id": "alsy-gaz.com", "purpose": "Al-Sy Gaz — industrial gases · شركة تسييل الهواء السورية", "category": "industry", "server": "b", "status": "mail_only", "created": "2022-02-28", "registrar": "Dynadot Inc", "note": "SPF authorises Server A (65.21.200.112) — a direct cross-link between the two machines", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.3.164, 172.67.130.241); NS → Cloudflare", "SPF: v=spf1 ip4:65.21.200.112 ~all — the existing note's cross-server link, confirmed", "No DMARC record" ], "whois": "Matches the existing record: created 2022-02-28, Dynadot Inc — the same second as alsygaz.net.", "site": "Account-suspended page.", "wayback": "Real content from 2023, plus a \"soon11.png\" coming-soon image from February 2025.", "assessment": "No entity currently attached, but the Server-A SPF cross-link is worth keeping in view alongside this register's other cross-server threads." } }, { "id": "alsygaz.net", "purpose": "Al-Sy Gaz — industrial gases · شركة تسييل الهواء السورية", "category": "industry", "server": "b", "status": "mail_only", "created": "2022-02-28", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.72.244, 172.67.136.175); NS → Cloudflare", "SPF: v=spf1 ip4:65.21.200.112 ~all — same Server-A cross-link as alsy-gaz.com", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Registered the same second as alsy-gaz.com. Registrar: Dynadot Inc.", "wayback": "Real content from 2023.", "assessment": "No entity currently attached; see alsy-gaz.com." } }, { "id": "adaa-motors.com", "purpose": "Adaa Motors — automotive", "category": "industry", "server": "b", "status": "mail_only", "created": "2017-08-02", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.207.225, 104.21.22.246); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 ip4:159.69.139.89 +a +mx ~all; carries a Google Search Console verification TXT", "No DMARC record" ], "whois": "Matches the existing record: created 2017-08-02, Dynadot Inc.", "site": "A \"SOON\" coming-soon landing page with placeholder images.", "wayback": "A 403 from 2018, then routine crawler noise.", "assessment": "No entity currently attached. Notable as the registrant organization behind siamco.sy below — the one link discovered between two otherwise-separate bare domains in this list." } }, { "id": "alshurouqmotors.com", "purpose": "Al-Shurouq Motors — automotive", "category": "industry", "server": "b", "status": "mail_only", "created": "2017-06-14", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.167.113, 104.21.50.210); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2017-06-14, Dynadot Inc.", "site": "HTTP 526 — unreachable.", "wayback": "A 403 from 2018, then a directory-listing snapshot from 2021.", "assessment": "No entity currently attached; nothing recovered beyond the domain name and its shared automotive theme with Adaa Motors." } }, { "id": "unipac-sy.com", "purpose": "Unipac — PET packaging", "category": "industry", "server": "b", "entity": "unipac", "status": "dormant", "created": "2018-04-19", "registrar": "Dynadot Inc", "note": "SPF authorises ip4:188.40.140.252 (Server B) directly. Serves only an empty directory index; no archived content found.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.158.233, 104.21.90.176); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2018-04-19, Dynadot Inc.", "wayback": "A directory-listing snapshot from 2021 — consistent with the existing note that no real archived content was found.", "assessment": "Consistent with the existing unipac entity." } }, { "id": "siamco.sy", "purpose": "Siamco", "category": "industry", "server": "b", "status": "mail_only", "created": "2018-05-28", "registrar": "Syrian Monster", "note": "Registrant Organization on the .sy registry record reads \"adaa motors\" — links this otherwise-bare domain directly to adaa-motors.com elsewhere in this register.", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.252 (Server B directly); NS → ns5/ns6.gaia-group.co", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": ".sy registry record: registered 2018-05-28. Sponsoring Registrar: Syrian Monster. Registrant Organization: \"adaa motors\" — not privacy-redacted.", "site": "Not reachable as a distinct page — only Wayback-crawled well-known probe paths, all 404.", "wayback": "Real content from 2008.", "assessment": "The registrant-name link to Adaa Motors is a genuine, if small, primary-source connection between two previously unrelated bare domains — worth carrying forward if either is investigated further." } }, { "id": "arimtrading.com", "purpose": "Arim Trading", "category": "industry", "server": "b", "status": "mail_only", "created": "2023-10-16", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.134.86, 104.21.25.152); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2023-10-16, Dynadot Inc.", "site": "HTTP 526 — unreachable.", "wayback": "Real content from 2023, plus a cpanel subdomain snapshot from 2024.", "assessment": "No entity currently attached; nothing recovered beyond the domain name." } }, { "id": "cec-hi.com", "purpose": "CEC", "category": "industry", "server": "b", "status": "mail_only", "created": "2002-08-01", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.12.167, 172.67.152.208); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2002-08-01, Dynadot Inc — the oldest creation date among the bare industry domains.", "site": "Account-suspended page, referencing webmaster@cec-hi.com.", "wayback": "Extensive real content from 2003 (about.html, activities-a.html) — a genuine, built early-2000s corporate site.", "assessment": "\"CEC\" already exists elsewhere in this register as Cham Engineering and Contracting's abbreviation in a different context (see the sama-al-arab-tv/CEC Wayback-quirk note) — worth checking whether this domain is the same CEC or a coincidental initialism before drawing any connection; not established here." } }, { "id": "sigma-tic.com", "purpose": "Sigma TIC", "category": "industry", "server": "b", "status": "mail_only", "created": "2025-06-04", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.128.116, 104.21.2.5); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Matches the existing record: created 2025-06-04, Dynadot Inc.", "site": "A bare cPanel directory listing (cgi-bin/ only) — unbuilt, matching its recent registration.", "wayback": "Real content from 2013, predating the current registration by over a decade — a prior, unrelated use of the name.", "assessment": "No entity currently attached; too new to have built content yet." } }, { "id": "isnad-sy.com", "purpose": "Isnad Steel Company · اسناد للهياكل المعدنية", "category": "industry", "server": "b", "status": "live", "entity": "isnad-steel", "created": "2018-02-13", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.252 (Server B directly); NS → ns5/ns6.gaia-group.co", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 ~all", "No DMARC record" ], "whois": "Registered 2018-02-13. Registrar: Dynadot Inc.", "wayback": "No snapshots retrieved in this pass.", "assessment": "Consistent with the existing isnad-steel entity." } }, { "id": "jupiter-hi.com", "purpose": "Jupiter for Investment and Tourism", "category": "consumer", "server": "b", "status": "suspended", "entity": "jupiter-investment-tourism", "created": "2002-07-17", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.168.41, 104.21.38.158); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2002-07-17, Dynadot Inc.", "site": "A hosting-provider \"This Account has been suspended\" page, with webmaster@jupiter-hi.com as the only contact — matches status: suspended.", "assessment": "Consistent with the existing jupiter-investment-tourism entity; no new findings." } }, { "id": "jupiterrentacar.com", "purpose": "Jupiter Rent-a-Car", "category": "consumer", "server": "b", "status": "mail_only", "entity": "jupiter-investment-tourism", "created": "2006-09-19", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.217.169, 104.21.62.10); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2006-09-19, Dynadot Inc.", "site": "HTTP 200 with a zero-byte body on both http:// and https:// — a genuinely empty vhost, not an error page. Consistent with status: mail_only.", "assessment": "Consistent with the existing jupiter-investment-tourism entity; no new findings." } }, { "id": "palmyravillage.com", "purpose": "Tamary Palmyra Village — resort", "category": "consumer", "server": "b", "status": "mail_only", "entity": "palmyra-village-resort", "created": "2007-11-05", "registrar": "Dynadot Inc", "note": "Holding page's P.O. Box and fax match Hamsho International Group's own contact details", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.133.187, 104.21.14.11); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2007-11-05, Dynadot Inc.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, a generic hosting-suspended notice — no longer the custom holding page with the Hamsho P.O. Box/fax described in the existing note.", "assessment": "Consistent with the existing palmyra-village-resort entity. The holding page the note describes appears to predate the account suspension — worth a Wayback check to confirm it still exists in history." } }, { "id": "yafouresort.com", "purpose": "Yafour Hotel and Resort · فندق ومنتجع يعفور", "category": "hamsho", "server": "b", "status": "dormant", "entity": "yafour-resort", "created": "2006-10-10", "registrar": "Dynadot Inc", "note": "Currently serves a generic \"Coming Soon\" template; a real WordPress-based hotel site survives in the Internet Archive from 2012–2021.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.183.78, 104.21.18.197); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "DMARC: p=none" ], "whois": "Matches the existing record: created 2006-10-10, Dynadot Inc.", "site": "A generic \"Coming Soon\" countdown-timer template with no business name or contact details — matches the existing note.", "assessment": "Consistent with the existing yafour-resort entity; no new findings from DNS/WHOIS/live site. Archive.org rate-limited every CDX query attempted during this pass, so the 2012–2021 WordPress history the note describes was not re-verified here." } }, { "id": "sham-aquapark.com", "purpose": "Sham Aqua Park", "category": "consumer", "server": "b", "status": "mail_only", "entity": "sham-aqua-park", "created": "2008-06-26", "registrar": "Dynadot Inc", "note": "Registered one second after shamaquapark.com", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.135.69, 104.21.6.208); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all", "No DMARC record" ], "whois": "Created 2008-06-26T08:27:24Z, Dynadot Inc — one second after shamaquapark.com's 08:27:23Z, exactly as the note says.", "site": "A hosting-provider \"This Account has been suspended\" page, contact webmaster@sham-aquapark.com.", "assessment": "Consistent with the existing sham-aqua-park entity; confirms the one-second registration gap." } }, { "id": "shamaquapark.com", "purpose": "Sham Aqua Park", "category": "consumer", "server": "b", "status": "mail_only", "entity": "sham-aqua-park", "created": "2008-06-26", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all", "No DMARC record" ], "whois": "Created 2008-06-26T08:27:23Z, Dynadot Inc — one second before sham-aquapark.com.", "site": "A hosting-provider \"This Account has been suspended\" page, contact webmaster@shamaquapark.com.", "assessment": "Consistent with the existing sham-aqua-park entity; no new findings." } }, { "id": "shamaquapark.net", "purpose": "Sham Aqua Park", "category": "consumer", "server": "b", "status": "mail_only", "entity": "sham-aqua-park", "created": "2008-06-26", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.181.110, 104.21.56.81); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all", "No DMARC record" ], "whois": "Created 2008-06-26T08:27:24Z, Dynadot Inc — same batch as the .com pair. Not previously on record; adding created/registrar here.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice as its .com siblings.", "assessment": "Consistent with the existing sham-aqua-park entity — the third domain in the same registration batch." } }, { "id": "eatandmore.com", "purpose": "Eat and More — FMCG", "category": "consumer", "server": "b", "status": "mail_only", "created": "2011-10-24", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.12.90, 172.67.194.3); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Created 2011-10-24, Dynadot Inc — not previously on record; adding created/registrar here.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate) — consistent with an unmaintained mail-only vhost.", "assessment": "No entity currently attached. The SPF/MX pattern is identical to the rest of the consumer cluster on Server B; consistent with the cluster but no standalone confirmation of who runs it specifically." } }, { "id": "dakfood.net", "purpose": "DAK / Dar Al-Khair — FMCG · داك فوود للغذائيات", "category": "consumer", "server": "b", "status": "live", "entity": "dak", "created": "2013-10-12", "registrar": "Dynadot Inc", "note": "Sama Alsham Group's own subsidiary page gives this as DAK's own domain and fax number — the same fax number Unipac lists as one of its own landlines.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Created 2013-10-12, Dynadot Inc — not previously on record; adding created/registrar here.", "site": "A real, built FMCG site — nav for About/Products/Gallery/Quality/Services/Contact, an image slideshow, and a PHP contact form. The footer carries a web-vendor credit: \"Design by Afkar\" (www.afkar.sy) — a name not seen elsewhere in this register.", "assessment": "The site is clearly live and built, not just a mail vhost — worth revisiting the mail_only status. \"Afkar\" (afkar.sy) is a new, previously-unrecorded web vendor credit; worth checking whether it built any other domains in the estate." } }, { "id": "memoict.com", "purpose": "MEMO — electronics", "category": "consumer", "server": "b", "status": "dormant", "entity": "memo", "created": "2008-01-13", "registrar": "Dynadot Inc", "note": "Redirects to en/index.php, which currently returns a server error.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:188.40.140.247 ~all — an extra IP (.247) beyond the usual Server B address", "DMARC: p=quarantine, pct=1, rua=mailto:gaia.group.sy@gmail.com — the same reporting address the register already tracks as a Server B/Gaia fingerprint" ], "whois": "Matches the existing record: created 2008-01-13, Dynadot Inc.", "site": "The root 302-redirects to /en/index.php, which returns HTTP 500 — matches the existing note exactly.", "assessment": "Consistent with the existing memo entity. The DMARC rua address is the same gaia.group.sy@gmail.com fingerprint already documented in data/servers.json, reaffirming this domain's place in the shared Server B/Gaia operator infrastructure." } }, { "id": "baladei.com", "purpose": "Baladi — food", "category": "consumer", "server": "b", "status": "mail_only", "created": "2018-08-29", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.24.64, 172.67.217.81); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Created 2018-08-29T18:55:43Z, Dynadot Inc — not previously on record; adding created/registrar here. Identical timestamp, to the second, to baladi-m.com's creation date.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, a generic hosting-suspended notice.", "assessment": "No entity attached. The identical registration timestamp with baladi-m.com indicates both were registered in the same batch/session — likely the same operator registering both spellings at once, same pattern as the Sham Aqua Park and Tahweel clusters." } }, { "id": "baladi-m.com", "purpose": "Baladi — food", "category": "consumer", "server": "b", "status": "mail_only", "created": "2018-08-29", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "Created 2018-08-29T18:55:43Z, Dynadot Inc — same second as baladei.com.", "site": "A hosting-provider \"This Account has been suspended\" page, contact webmaster@baladi-m.com.", "assessment": "No entity attached. Same registration batch as baladei.com — the two are almost certainly the same operator registering both spellings together." } }, { "id": "sinalco.sy", "purpose": "Sinalco Syria — soft drinks · سينالكو للمشروبات الغازية", "category": "consumer", "server": "b", "status": "live", "entity": "ucii", "note": "Own /about page names الشركة المتحدة للإستثمارات الصناعية (UCII) as the operating company. SPF directly authorises ip4:188.40.140.252, Server B.", "research": { "retrieved": "2026-08-13", "dns": [ "A → 78.46.0.188 (reverse DNS: dedi2288.your-server.de — a Hetzner dedicated-server hostname, not Server A or B); NS → Cloudflare (not proxied)", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all — authorises Server B for mail, as the existing note says", "No DMARC record" ], "whois": "No public WHOIS — .sy domains generally have none.", "site": "A live, built WordPress site (with TranslatePress for translation) for Sinalco Syria, branded \"consumer trust since 1905\" with Facebook/Instagram links. No web-vendor credit visible on the homepage.", "assessment": "Confirms the existing ucii entity and live status. New technical detail: the site itself is hosted on a separate Hetzner box (78.46.0.188) distinct from Server A and Server B, while mail routes through Server B via SPF — a third Hetzner address worth keeping in mind if it recurs elsewhere." } }, { "id": "ayawater.com", "purpose": "Aya Water", "category": "consumer", "server": "b", "status": "mail_only", "created": "2006-11-12", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all — notably does not include 188.40.140.252", "No DMARC record" ], "whois": "Created 2006-11-12, Dynadot Inc — not previously on record; adding created/registrar here.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice seen across this cluster.", "assessment": "No entity attached. SPF omits the usual Server B address (188.40.140.252) that most of this cluster carries — a minor divergence, not itself evidence of a different operator." } }, { "id": "royaltobacco.co", "purpose": "Royal Tobacco", "category": "consumer", "server": "b", "status": "mail_only", "created": "2025-09-01", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua=dmarc-reports.cloudflare.net (Cloudflare's own default reporting address, not a custom one)" ], "whois": "Created 2025-09-01, Dynadot Inc — not previously on record; adding created/registrar here. Much more recent than the rest of the consumer cluster, which mostly dates to 2006–2019.", "site": "A plain Arabic \"Under Construction\" (الموقع قيد الإنشاء) page with no other content.", "assessment": "No entity attached. A recent (September 2025) addition to the Server B consumer cluster, still in the setup stage — worth revisiting once it's built out further." } }, { "id": "dawacopharma.com", "purpose": "Dawaco — pharmaceuticals, Damascus Free Zone", "category": "consumer", "server": "b", "status": "mail_only", "entity": "dawaco", "created": "2014-01-05", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "DMARC: p=none, rua=dmarc-reports.cloudflare.net" ], "whois": "Created 2014-01-05T05:38:04Z, Dynadot Inc — not previously on record; adding created/registrar here. One second before dawacopharma.net.", "site": "HTTP 200 with a zero-byte body — a genuinely empty vhost.", "assessment": "Consistent with the existing dawaco entity; no new findings beyond the registration-timestamp link to dawacopharma.net." } }, { "id": "dawacopharma.net", "purpose": "Dawaco — pharmaceuticals", "category": "consumer", "server": "b", "status": "mail_only", "entity": "dawaco", "created": "2014-01-05", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.70.199, 172.67.138.239); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Created 2014-01-05T05:38:05Z, Dynadot Inc — one second after dawacopharma.com, same registration batch.", "site": "HTTP 200 with a zero-byte body — a genuinely empty vhost.", "assessment": "Consistent with the existing dawaco entity; confirms the same-batch registration with dawacopharma.com." } }, { "id": "shamprint.com", "purpose": "Sham Print — printing services · شام للتصميم الطباعة", "category": "consumer", "server": "b", "status": "live", "created": "2019-02-16", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.252 (Server B, direct — not Cloudflare-proxied); NS → ns5.gaia-group.co / ns6.gaia-group.co, Gaia's own nameservers on Server B", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:176.9.55.34 ~all — the second IP matches ns3/ns4.gaia-group.co per data/servers.json", "No DMARC record" ], "whois": "Matches the existing record: created 2019-02-16, Dynadot Inc.", "site": "A bare \"Under construction\" notice, no other content.", "assessment": "Notably different from the rest of the consumer cluster: this domain is hosted directly on Server B under Gaia's own nameservers, rather than fronted by Cloudflare — a closer technical tie to Gaia's own infrastructure than most of its consumer-cluster neighbours." } }, { "id": "marcom.sy", "purpose": "Marcom Company — media and marketing", "category": "consumer", "server": "b", "status": "live", "entity": "marcom", "note": "Previously observed at sinkhole.paloaltonetworks.com (Palo Alto DNS Security); as of 2026-08-13 resolves normally on three resolvers — the block was network-specific, not a property of the domain.", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.50.245, 172.67.215.5) — confirmed on the default resolver, @1.1.1.1, and @8.8.8.8 alike, no sinkhole address on any of them", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "No public WHOIS — .sy domains generally have none.", "site": "A live, bare Apache \"Index of /\" directory listing with no files — real content, not an error.", "assessment": "This domain resolves normally on three independent public resolvers today — the Palo Alto sinkhole the existing note describes is not reproducing now, which is exactly the network-specific artifact DOMAIN-RESEARCH.md warns about. Either the vendor block has lifted, or it was specific to the network the original observation was made from. Worth updating status away from unresolved if this holds up." } }, { "id": "tahweil.com", "purpose": "\"Tahweel\" money-transfer brand", "category": "finance", "server": "b", "status": "suspended", "entity": "tahweel", "created": "2015-09-08", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Created 2015-09-08T12:48:41Z, Dynadot Inc.", "site": "A hosting-provider \"This Account has been suspended\" page, contact webmaster@tahweil.com.", "assessment": "Consistent with the existing tahweel entity." } }, { "id": "ta7weil.com", "purpose": "\"Tahweel\" money-transfer brand", "category": "finance", "server": "b", "status": "suspended", "entity": "tahweel", "created": "2015-09-08", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.197.106, 104.21.90.81); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Created 2015-09-08T12:48:40Z, Dynadot Inc — same minute as the other three spellings.", "site": "https:// fails with Cloudflare 526 (invalid origin certificate); http:// redirects to /cgi-sys/suspendedpage.cgi, the same hosting-suspended notice as its siblings.", "assessment": "Consistent with the existing tahweel entity." } }, { "id": "tahwiel.com", "purpose": "\"Tahweel\" money-transfer brand", "category": "finance", "server": "b", "status": "suspended", "entity": "tahweel", "created": "2015-09-08", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.96.0, 188.114.97.0); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "No DMARC record" ], "whois": "Created 2015-09-08T12:48:40Z, Dynadot Inc.", "site": "A hosting-provider \"This Account has been suspended\" page (Cloudflare email-protected contact link).", "assessment": "Consistent with the existing tahweel entity." } }, { "id": "ta7wiel.com", "purpose": "\"Tahweel\" money-transfer brand", "category": "finance", "server": "b", "status": "suspended", "entity": "tahweel", "created": "2015-09-08", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Created 2015-09-08T12:48:41Z, Dynadot Inc.", "site": "A hosting-provider \"This Account has been suspended\" page (Cloudflare email-protected contact link).", "assessment": "Consistent with the existing tahweel entity. All four spelling variants (tahweil/ta7weil/tahwiel/ta7wiel) were registered within the same minute, confirming a single coordinated registration of the brand-variant cluster." } }, { "id": "smartmoney.sy", "purpose": "Smart Money", "category": "finance", "server": "b", "status": "mail_only", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.210.21, 104.21.34.231); NS → Cloudflare", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all", "No DMARC record" ], "whois": "No public WHOIS — .sy domains generally have none.", "site": "A hosting-provider \"This Account has been suspended\" page, contact webmaster@smartmoney.sy — the same cPanel-suspension pattern used across the Server B consumer/finance domains, on a .sy TLD.", "assessment": "No entity attached. Same shared hosting fingerprint (SPF, suspension-page template) as the rest of the Server B cluster; nothing beyond that to name an operator." } }, { "id": "scbc.sy", "purpose": "SCBC", "category": "finance", "server": "b", "status": "mail_only", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → Cloudflare", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua=dmarc-reports.cloudflare.net" ], "whois": "No public WHOIS — .sy domains generally have none.", "site": "A live, bare Apache \"Index of /\" directory listing with no files.", "assessment": "No entity attached. Same SPF fingerprint as the rest of the Server B cluster; no content to identify who runs it." } }, { "id": "uiic-group.com", "purpose": "UIIC Group — under construction", "category": "finance", "server": "b", "status": "dormant", "created": "2017-01-05", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.1.198, 172.67.129.225); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:52.72.12.188 ~all", "No DMARC record" ], "whois": "Matches the existing record: created 2017-01-05, Dynadot Inc.", "site": "A bare \"Under Construction\" notice, no other content — matches the existing purpose text.", "assessment": "Consistent with the existing record; no new findings." } }, { "id": "gaia.sy", "purpose": "Gaia — web studio", "category": "gaia", "server": "a", "status": "live", "entity": "gaia", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A, direct); NS → ns1.sama-athletic.com / ns2.sama-athletic.com — Gaia's own nameservers", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 +ip4:148.251.75.47 +ip4:176.9.55.34 ~all — the standard Server A pattern", "DMARC: p=none" ], "whois": "No public WHOIS — .sy domains generally have none.", "site": "Gaia Group's own live site: a creative-tech studio offering web development, mobile apps, branding, cybersecurity, IT solutions and marketing. Copyright line reads \"© 2026 Gaia Group. All rights reserved.\" No external vendor credit, as expected for the studio's own site.", "assessment": "Confirms the existing gaia entity — this is the studio's own homepage." } }, { "id": "gaia-services.net", "purpose": "Gaia — services", "category": "gaia", "server": "a", "status": "live", "entity": "gaia", "created": "2021-02-19", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A, direct — not Cloudflare-proxied despite Cloudflare NS); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none, rua=mailto:gaia.group.sy@gmail.com — the same fingerprint documented in data/servers.json" ], "whois": "Matches the existing record: created 2021-02-19, Dynadot Inc.", "site": "HTTP 200 with a zero-byte body on both http:// and https:// — resolves straight to Server A but serves nothing.", "assessment": "Confirms the existing gaia entity via the DMARC fingerprint; the vhost itself is currently empty despite status: live." } }, { "id": "gaia-printing.com", "purpose": "Gaia — dormant vhost; formerly hosted /hamsho/", "category": "gaia", "server": "a", "status": "unresolved", "entity": "gaia", "created": "2021-06-22", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → none; NS → none; MX → none — no public DNS at all" ], "whois": "Matches the existing record: created 2021-06-22, Dynadot Inc.", "site": "Does not resolve — connection fails outright, consistent with status: unresolved.", "assessment": "Confirms the existing gaia entity and unresolved status; nothing new from public DNS or WHOIS." } }, { "id": "gaia-group.co", "purpose": "Gaia — server3, the corporate mail host", "category": "gaia", "server": "b", "status": "live", "entity": "gaia", "created": "2020-12-01", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 188.40.140.252 (Server B, direct); NS → Cloudflare", "TXT: google-site-verification=Z-c1BG7QWeYUxwLCCn6R6OsnkHntTRodqoVv9LPnMK4", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 ~all", "DMARC: p=quarantine, pct=1, rua=mailto:gaia.group.sy@gmail.com — the exact fingerprint already listed for this domain in data/servers.json" ], "whois": "Created 2020-12-01, Dynadot Inc — not previously on record; adding created/registrar here.", "site": "A bare Apache \"Index of /\" directory listing with no files — consistent with its role as the corporate mail host (server3.gaia-group.co) rather than a public website.", "assessment": "Confirms the existing gaia entity; matches data/servers.json's own fingerprint table exactly." } }, { "id": "atlasoflaw.com", "purpose": "Law firm — third-party client", "category": "third_party", "server": "a", "status": "live", "created": "2019-04-03", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "note": "The only domain in the dataset not registered at Dynadot", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "MX → mail.atlasoflaw.com → 65.21.200.112", "SPF: v=spf1 ip4:65.21.200.112 +a +mx ~all", "No DMARC record" ], "whois": "Registered 2019-04-03. Registrar: Hosting Concepts B.V. d/b/a Registrar.eu — not the estate's Dynadot account. Registrant Organization: \"UCG L.L.C.\" (United Arab Emirates), not privacy-redacted.", "site": "Unreachable during this pass — both direct fetch and plain curl timed out with no response.", "wayback": "Multiple snapshots 2021–2023, all HTTP 200. Title \"أطلس القانون\" (Atlas of Law) — a real Arabic-language law-firm site.", "assessment": "\"UCG L.L.C.\" is United Communication Group, an Abu Dhabi/Damascus web-hosting and development vendor — the developer/registrar-of-record for this client, not a Hamsho or Gaia signal. Same vendor also registered elegantautomotive.sy below." } }, { "id": "elmas-invest.com", "purpose": "Elmas Invest — Damascus real estate development, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2025-06-16", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)", "MX → apex → 65.21.200.112", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none" ], "whois": "Registered 2025-06-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "الماس للتطوير العقاري والهندسي (Elmas for Real Estate Development and Engineering) — residential/commercial sales, rentals and property management in Damascus (Kafarsouseh, Shams Market). Footer: \"من تطوير Gaia group\" (Developed by Gaia group).", "wayback": "Snapshots from July 2025 (homepage, blog, contact, FAQs, listings) — an actively built multi-page site.", "assessment": "Genuine operating real-estate business with an explicit \"Developed by Gaia group\" credit — the profile of an ordinary paying client, not an estate member." } }, { "id": "trixaglobal.com", "purpose": "Trixa Global", "category": "third_party", "server": "a", "status": "live", "created": "2025-07-09", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)", "MX → apex → 65.21.200.112", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none" ], "whois": "Registered 2025-07-09. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Unreachable — both direct fetch and curl return HTTP 403 Forbidden from the server itself (a real server-side block, not a fetch-tool artifact).", "wayback": "No snapshots found.", "assessment": "No content recoverable by any method tried. Purpose recorded from the domain name only — unverified beyond DNS/WHOIS. Worth a recheck later." } }, { "id": "awtad-albarakeh.com", "purpose": "Awtad Al Barakeh — stone cladding, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2025-02-24", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)", "MX → apex → 65.21.200.112", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none" ], "whois": "Registered 2025-02-24. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Awtad Al-Barakah — sources and exports Syrian limestone, basalt and marble, plus fabrication and stone restoration; UAE contact number. Footer: \"Design by Gaya Group\" (site's own spelling) and \"© 2025 – AwtadAlbarakah\".", "wayback": "Snapshots from Feb and Jul 2025, plus an api. subdomain.", "assessment": "Genuine Syrian stone-export business with a Gaia design credit (the site's own footer spells it \"Gaya\", a stylistic variant, not a different vendor) — ordinary client profile." } }, { "id": "awtad-alkheir.vip", "purpose": "Awtad Al Kheir — interior design and contracting, Cairo", "category": "third_party", "server": "a", "status": "live", "created": "2025-03-26", "registrar": "Dynadot Inc", "note": "DMARC rua points to the Gaia operator's Gmail address", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "No MX or SPF record", "DMARC: p=quarantine, pct=1, rua=mailto:gaia.group.sy@gmail.com — the operator's own Gmail address, the same fingerprint used elsewhere in this register" ], "whois": "Registered 2025-03-26. Registrar: Dynadot Inc. Registrant redacted under standard privacy.", "site": "AwtadAlKheer — interior design, architectural design, construction and contracting, based at Degla Landmark, Nasr City, Cairo. Cites 36 completed codes, 75 clients, 68 projects. Footer: \"Gaya Group\" web-development credit, \"© 2025 AwtadAlKheer\".", "wayback": "Snapshots from July 2025 — contact-us, get-in-touch, investors and a portfolio page (Madinaty apartment finishing).", "assessment": "The DMARC-to-Gmail pattern is the same technical fingerprint this register elsewhere treats as strong operator evidence (e.g. Union Electrical Group) — but per the register's own rule that is an operator signal (Gaia administers this client's mail), not an ownership signal. Combined with a real, unrelated Cairo interior-design business and no textual link to Hamsho or Sama Alsham, this reads as Gaia providing full mail administration for an ordinary client, not a hidden estate holding." } }, { "id": "maak-sy.com", "purpose": "Maak — fuel distribution app, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2025-09-06", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → ns1/ns2.sama-athletic.com — Gaia's own vanity nameservers (see sama-athletic.com; not an ownership signal)", "MX → apex → 65.21.200.112", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 ~all", "DMARC: p=none" ], "whois": "Registered 2025-09-06. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Maak (معَك) — a Syrian fuel-delivery app (gas, diesel, fuel tanks) with home delivery, Damascus. Reports 2,067 downloads, 982 customers. Footer: \"Powered by Gaia Group\" (gaia.sy).", "wayback": "Not checked separately — footer credit and live content already confirm the Gaia relationship directly.", "assessment": "Genuine consumer delivery app with an explicit Gaia credit — ordinary client." } }, { "id": "salamatak-hse.com", "purpose": "Salamatak — HSE equipment, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2024-10-23", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "MX → mail.salamatak-hse.com → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all", "DMARC: p=quarantine, rua → Cloudflare's own aggregator — not the Gaia Gmail pattern" ], "whois": "Registered 2024-10-23. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "SALAMATAK (سلامتك) — Damascus (Bramakeh) occupational health-and-safety equipment supplier, claiming forty years in the field. Names client testimonials (Nadeem Mazloom, Rama Al-Salahi, Bashar Al-Tunesi). No web-vendor credit visible on this page.", "wayback": "Snapshots since December 2024.", "assessment": "Genuine, long-established safety-equipment business — ordinary client, no textual link to Hamsho or Sama Alsham." } }, { "id": "taajir.co", "purpose": "Tajjir — rental platform, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2025-11-06", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)", "MX → mail.taajir.co → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Registered 2025-11-06. Registrar: Dynadot Inc. Registrant redacted under standard privacy.", "site": "تأجير (Taajir) — a Syrian multi-category rental app (real estate, vehicles, equipment, clothing). No contact details or vendor credit on the homepage.", "wayback": "One snapshot, 2024-09-07 — predates the current 2025-11-06 registration date, meaning the domain likely had a different prior registration; earlier content not investigated further.", "assessment": "Ordinary consumer-app client. The pre-registration Wayback snapshot is a minor loose end, not pursued here." } }, { "id": "cordobapharma.com", "purpose": "Cordoba Pharma", "category": "third_party", "server": "a", "status": "live", "created": "2026-03-23", "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com) — its own DNS, not Gaia's", "MX → mail.cordobapharma.com → 65.21.200.112 — mail rides the same Gaia-hosted box", "www / cpanel / webmail → Cloudflare proxy IPs (104.21.70.26, 172.67.218.173)", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator — not the gaia.group.sy@gmail.com pattern seen elsewhere in the estate" ], "whois": "Registered 2026-03-23 — a brand-new registration, not a legacy domain. Registrar: Hosting Concepts B.V. d/b/a Registrar.eu (IANA #1647) — not the Dynadot account the rest of the estate sits in. Registrant redacted under standard privacy.", "site": "A bare Apache/cPanel directory listing (cgi-bin/ only) — effectively unbuilt, last touched 2026-03-24.", "wayback": "2021 snapshot: a placeholder page, \"Website under construction — Powered By Network EGYPT\" (networkegypt.com), an unrelated Egyptian web-hosting shop. No Hamsho or Gaia trace at any point in its history.", "assessment": "Consistent with third_party: independent DNS and a different registrar, no textual or ownership tie to Hamsho or Sama Alsham beyond sharing Gaia's hosting box." } }, { "id": "realitybalance.com", "purpose": "Reality Balance — personal-development coaching, a named Gaia client", "category": "third_party", "server": "a", "status": "live", "created": "2025-01-07", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (brenna.ns.cloudflare.com, adam.ns.cloudflare.com)", "MX → mail.realitybalance.com → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 -all (hard fail)", "DMARC: p=quarantine, pct=100, rua=mailto:postmaster@realitybalance.com — self-managed, not Gaia or Cloudflare" ], "whois": "Registered 2025-01-07. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Reality Balance — a personal-development/\"Transurfing\" coaching business run by Reem Saad Eldeen. Footer: \"Copyright © Reality Balance Powered by Gaia Group\".", "wayback": "Snapshots from Jan–Mar 2025, mostly redirects.", "assessment": "Genuine individual coaching business with an explicit Gaia credit — ordinary client." } }, { "id": "alardia.net", "purpose": "Al Ardia News Agency · وكالة الأرضية الأخبارية — Arabic-language news portal", "category": "third_party", "server": "a", "status": "live", "created": "2025-10-26", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A, direct); NS → edna.ns.cloudflare.com / glen.ns.cloudflare.com", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all", "DMARC: p=none, rua=dmarc-reports.cloudflare.net" ], "whois": "Matches the existing record: created 2025-10-26, Dynadot Inc.", "site": "The domain is NOT sinkholed right now — it resolves normally to Server A and serves a live, fully built Arabic-language news portal, وكالة الأرضية الأخبارية (\"Al-Ardia News Agency\"): sections for Politics/Business/Science/World news, social video, podcasts, user registration/login, and articles dated as recently as January 2026.", "assessment": "This directly contradicts the existing purpose text (\"currently sinkholed by a security vendor; no recoverable content\"). Whatever sinkhole was observed previously either lifted or was specific to that network/point in time — the domain is now a real, active, content-heavy site hosted directly on Server A. Given it's on Server A itself (not just Cloudflare-fronted), this is worth flagging for a purpose-text update and a closer look at who operates it — a functioning news agency is a much more significant tenant on this infrastructure than a dead sinkholed domain." } }, { "id": "meo-eng.net", "purpose": "MEO Engineering — site erroring/unreachable since at least 2023", "category": "third_party", "server": "a", "status": "live", "created": "2021-11-17", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → 65.21.200.112 (Server A, direct); NS → Cloudflare", "SPF: v=spf1 +a +mx +ip4:65.21.200.112 -all (hard fail, stricter than the ~all used elsewhere)", "DMARC: p=quarantine, rua=mailto:postmaster@meo-eng.net, pct=100 — a self-hosted reporting address, not the shared gaia.group.sy@gmail.com one" ], "whois": "Matches the existing record: created 2021-11-17, Dynadot Inc.", "site": "No longer erroring — it now serves a proper \"scheduled maintenance\" holding page (\"We'll be back with something amazing shortly\"), with an email-signup prompt and Facebook/Twitter/Instagram links.", "assessment": "Consistent with the existing third_party/live record, though the site's presentation has moved on from a bare error to an intentional maintenance page since the purpose text was last written — a soft update, not a contradiction." } }, { "id": "elegantautomotive.sy", "purpose": "Elegant Automotive", "category": "third_party", "server": "a", "status": "live", "created": "2026-03-10", "registrar": "United Communication Group (UCG)", "research": { "retrieved": "2026-08-13", "dns": [ "A (apex) → 65.21.200.112 — Server A itself", "NS → Cloudflare (edna.ns.cloudflare.com, glen.ns.cloudflare.com)", "MX → mail.elegantautomotive.sy → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:65.21.200.112 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": ".sy registry record: registered 2026-03-10 — brand new. Sponsoring Registrar: \"UCG\" (United Communication Group), Registrant United Communication Group (UCG), contact ola@ucg.ae — UCG is the accredited .sy registrar of record here, not merely a footer credit.", "site": "Elegant Automotive Group — an automotive business with Damascus-area phone numbers; no address or vendor credit visible.", "wayback": "Not checked — the domain was only registered 2026-03-10, too recent for archived history.", "assessment": "Same UCG vendor pattern as atlasoflaw.com: a real Damascus/Abu Dhabi web-hosting and registrar vendor handling this client's domain directly (as the .sy sponsoring registrar itself, not just a footer credit), unconnected to the Hamsho/Gaia cluster." } }, { "id": "retjenu.com", "purpose": "Retjenu", "category": "third_party", "server": "b", "status": "mail_only", "created": "2022-06-16", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.43.127, 172.67.179.135)", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "MX → mail.retjenu.com → 65.21.200.112", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 ~all — includes Server B's own IP directly", "No DMARC record" ], "whois": "Registered 2022-06-16. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Not tested live, consistent with mail_only status.", "wayback": "Old snapshots 2011–2016 (redirects, ending in a 403) — a long-dead prior web presence, consistent with the domain now being mail-only.", "assessment": "Mail-only client on Server B; historical web content long gone." } }, { "id": "eso-solution.com", "purpose": "ESO Solutions", "category": "third_party", "server": "b", "status": "mail_only", "created": "2014-09-06", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.45.254, 172.67.221.177)", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "MX → mail.eso-solution.com → 65.21.200.112", "SPF: v=spf1 ip4:188.40.140.252 +a +mx +ip4:159.69.139.89 +ip4:52.72.12.188 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Registered 2014-09-06 — the oldest creation date among the mail-only batch. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Not tested live, consistent with mail_only status.", "wayback": "Snapshots 2018–2024, most recent real content 2023-10-30/2024-04-17 (HTTP 200) — a real, longstanding historical web presence.", "assessment": "Mail-only client on Server B with genuine web history; nothing tying it to Hamsho or Sama Alsham." } }, { "id": "itsalplus.com", "purpose": "Itsal Plus · اتصال موزع موبايلات — OPPO Syria distributor, run as the same operation as SamaTel", "category": "sama", "server": "b", "status": "mail_only", "entity": "itsal-plus", "created": "2025-10-05", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (188.114.97.0, 188.114.96.0); NS → edna.ns.cloudflare.com / glen.ns.cloudflare.com", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua=dmarc-reports.cloudflare.net" ], "whois": "Matches the existing record: created 2025-10-05, Dynadot Inc.", "site": "A bare Apache \"Index of /\" directory listing with a single cgi-bin/ folder dated 2025-10-20 — a freshly-provisioned vhost with no site content yet.", "assessment": "Consistent with the existing itsal-plus entity and mail_only status — a recent registration still in setup, matching its October 2025 creation date." } }, { "id": "plainxfashion.com", "purpose": "PlainX Fashion", "category": "third_party", "server": "b", "status": "mail_only", "created": "2025-08-02", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.59.18, 172.67.167.150)", "NS → Cloudflare (glen.ns.cloudflare.com, edna.ns.cloudflare.com)", "MX → mail.plainxfashion.com → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Registered 2025-08-02 — the newest in this sub-batch. Registrar: Dynadot LLC. Registrant redacted under standard privacy.", "site": "Not tested live, consistent with mail_only status.", "wayback": "No snapshots found — too new/unindexed.", "assessment": "Mail-only client on Server B; too new to have web history to check." } }, { "id": "team-spirit.co", "purpose": "Team Spirit", "category": "third_party", "server": "b", "status": "mail_only", "created": "2016-01-10", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (172.67.203.89, 104.21.14.123)", "NS → Cloudflare (brenna.ns.cloudflare.com, adam.ns.cloudflare.com)", "MX → mail.team-spirit.co → 65.21.200.112", "SPF: v=spf1 +a +mx +ip4:188.40.140.252 +ip4:159.69.139.89 +ip4:52.72.12.188 +ip4:37.58.80.226 ~all — the widest relay list of this batch", "No DMARC record" ], "whois": "Registered 2016-01-10. Registrar: Dynadot Inc. Registrant redacted under standard privacy.", "site": "Not tested live, consistent with mail_only status.", "wayback": "2016–2019 snapshots, alternating 200/403 — an old, largely dormant site.", "assessment": "Longstanding mail-only client on Server B." } }, { "id": "asas.sy", "purpose": "Asas · اساس للتطوير والعمران", "category": "third_party", "server": "b", "status": "mail_only", "created": "2018-07-03", "registrar": "Syrian Monster", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.72.66, 172.67.176.15)", "NS → Cloudflare (adam.ns.cloudflare.com, brenna.ns.cloudflare.com)", "MX → mail.asas.sy → 65.21.200.112", "No SPF or DMARC record at all" ], "whois": ".sy registry record: registered 2018-07-03. Sponsoring Registrar: \"Syrian Monster\" — a domestic Syrian registrar, not Dynadot. Registrant Organization: \"ASAS\" (its own real name, not privacy-redacted) — matches its purpose, اساس للتطوير والعمران (Asas for Development and Urbanism).", "wayback": "Snapshots 2023–2024, HTTP 200.", "assessment": "One of the cleanest \"unrelated\" signals in this batch: independently registered through a different, domestic registrar (not the estate's Dynadot account), with its own real registrant name on file." } }, { "id": "emberly.vip", "purpose": "Emberly", "category": "third_party", "server": "b", "status": "mail_only", "created": "2025-07-31", "registrar": "Dynadot Inc", "research": { "retrieved": "2026-08-13", "dns": [ "A → Cloudflare-proxied (104.21.12.83, 172.67.151.237)", "NS → Cloudflare (brenna.ns.cloudflare.com, adam.ns.cloudflare.com)", "MX → mail.emberly.vip → 65.21.200.112", "SPF: v=spf1 +mx +a +ip4:188.40.140.252 ~all", "DMARC: p=none, rua → Cloudflare's own aggregator" ], "whois": "Registered 2025-07-31. Registrar: Dynadot Inc. Registrant redacted under standard privacy.", "site": "Not tested live, consistent with mail_only status.", "wayback": "No snapshots found — too new/unindexed.", "assessment": "Mail-only client on Server B; too new to have web history to check." } } ], "servers": [ { "id": "a", "ip": "65.21.200.112", "label": "Server A", "provider": "Hetzner, Finland", "role": "Websites", "nameservers": [ "ns1.sama-athletic.com", "ns2.sama-athletic.com" ], "notes": [ "Serves the websites for all ten union-*.com domains, horizon-cont.com, Gaia's own domains, and Gaia's genuine third-party clients.", "The cluster's authoritative nameservers are hosted on this same machine, under sama-athletic.com.", "hamsho-group.com and gaia-printing.com are still configured as virtual hosts here, each with a mail. entry, although neither resolves in public DNS any more.", "Also carries samaalsham-sy.org, which is DNS-configured but serving nothing — apparently a site in preparation." ] }, { "id": "b", "ip": "188.40.140.252", "label": "Server B", "provider": "Hetzner, Germany", "role": "Corporate mail — server3.gaia-group.co", "nameservers": [ "ns5.gaia-group.co", "ns6.gaia-group.co" ], "notes": [ "A second Gaia machine, discovered only after reverse-IP on the first. It is the mail host for roughly ninety domains covering the Hamsho-named entities, Sama Alsham's operating companies, and the Dubai and Beirut vehicles.", "ns3.gaia-group.co and ns4.gaia-group.co sit separately on 176.9.55.34.", "Cross-link between the two servers: alsy-gaz.com, whose mail is here, authorises ip4:65.21.200.112 — Server A — to send on its behalf.", "samaalsham.net resolves to 188.40.140.248, a neighbouring address that shares this box's server3.gaia-group.co reverse-DNS entry — the same machine under a second IP, not a separate host." ] } ], "events": [ { "id": "sham-aquapark-pair", "sort": "2008-06-26", "date": "26 Jun 2008", "title": "Sham Aqua Park, both spellings", "flag": "1 second apart", "domains": [ "shamaquapark.com", "sham-aquapark.com" ], "sources": [ "obs-dns-20260812" ] }, { "id": "dubai-layer", "sort": "2013-11-06", "date": "6 Nov 2013", "title": "The Dubai layer goes up", "flag": "1 second apart", "body": "A hard technical link between the AMH and Expert Blue brands that does not depend on any website — and the year matches AMH Group's stated founding date exactly. Note the FZC suffix: the UAE free-zone company form.", "domains": [ "expertbluefzc.com", "amhgroupjobs.com" ], "entities": [ "amh-group", "expert-blue" ], "sources": [ "obs-dns-20260812", "sama-amh-2015" ] }, { "id": "tahweel-block", "sort": "2015-09-08", "date": "8 Sep 2015", "title": "A remittance brand, blocked in four spellings", "flag": "All within 1 second", "body": "Tahweel is Arabic for money transfer. Four transliterations were bought at once and all four are now suspended. Alongside smartmoney.sy this is the only financial-services thread in the estate — and the least explored.", "domains": [ "ta7weil.com", "tahwiel.com", "tahweil.com", "ta7wiel.com" ], "entities": [ "tahweel" ], "sources": [ "obs-dns-20260812" ] }, { "id": "union-stood-up", "sort": "2017-01-12", "date": "12–14 Jan 2017", "title": "The Union estate is stood up over three days", "body": "Matching Union Cables' documented establishment in late 2016.", "domains": [ "union-cable.com", "union-copper.com", "union-electricalgroup.com" ], "entities": [ "union-electrical-group" ], "sources": [ "obs-dns-20260812", "syria-report-ueg" ] }, { "id": "sama-hamsho-pair", "sort": "2018-06-26", "date": "26–28 Jun 2018", "title": "Sama Holding and Hamsho Group, two days apart", "flag": "Same account", "body": "Consistent with a single 2018 restructuring or rebranding exercise carried out across both brands at once.", "domains": [ "sama-holding.com", "hamsho-group.com" ], "entities": [ "sama-holding", "hamsho-international-group" ], "sources": [ "obs-dns-20260812" ] }, { "id": "caesar-family-2020", "sort": "2020-06-17", "date": "17 Jun 2020", "title": "The whole household is designated under the Caesar Act", "flag": "Family bloc", "body": "On one day, US sanctions hit not just Mohammed Hamcho but his wife Rania al-Dabbas and all four children — Ahmad, Amr, Ali and Sumaya. It is the anchor for treating the family as a single designated bloc, and the point from which Jupiter's \"four sanctioned relative-owners\" can be named in full.", "entities": [ "mohammed-hamcho", "rania-al-dabbas", "ahmad-saber-hamcho", "amr-hamsho", "ali-hamsho" ], "sources": [ "os-ali-hamsho", "aljazeera-hamsho-2026" ] }, { "id": "assad-falls-2024", "sort": "2024-12-08", "date": "8 Dec 2024", "title": "The regime falls; Hamsho flees to Beirut", "body": "With the collapse of the Assad government, Mohammed Hamcho leaves for Beirut and relinquishes his steel plant to the incoming authorities — the start of the eighteen-month arc that ends in the January 2026 settlement.", "entities": [ "mohammed-hamcho" ], "sources": [ "aljazeera-hamsho-2026", "syriadirect-settlement" ] }, { "id": "eo-13894", "sort": "2025-07-01", "date": "1 Jul 2025", "title": "Re-designation under E.O. 13894", "body": "Mohammed Hamcho and Hamsho International Group are re-designated specifically so the listings survive the broader termination of the Syria sanctions programme.", "entities": [ "mohammed-hamcho", "hamsho-international-group" ], "sources": [ "ofac-20250630" ] }, { "id": "horizon-returns", "sort": "2025-09-07", "date": "7 Sep 2025", "title": "Horizon returns", "body": "horizon-cont.com is registered — the current site for Middle East Contracting, carrying the same Arabic corporate names, address and phone number recovered from the old gaia-printing.com/hamsho/ install, with a \"© Gaia Company 2025\" footer.", "domains": [ "horizon-cont.com" ], "entities": [ "middle-east-contracting", "gaia" ], "sources": [ "horizon-cont", "obs-dns-20260812" ] }, { "id": "settlement", "sort": "2026-01-06", "date": "6–8 Jan 2026", "title": "Hamsho returns to Damascus and settles", "body": "Mohammed Hamcho signs a comprehensive settlement with the interim government (announced 6–7 January), under which the state's illicit-gain commission recovered roughly $800 million in funds and assets; reporting frames the settlement at around one billion US dollars. The National Commission for Transitional Justice issued a statement on the deal on 8 January, amid public criticism — sharpened by his sons Ahmad and Amr having pledged $1 million to the state-backed Syrian Development Fund.", "entities": [ "mohammed-hamcho", "ahmad-saber-hamcho", "amr-hamsho" ], "sources": [ "syriadirect-settlement", "enabbaladi-hamsho-return-2026" ] }, { "id": "estate-mapped", "sort": "2026-08-12", "date": "12 Aug 2026", "title": "The two-server estate is mapped", "body": "Reverse-IP on the Union web host surfaces a second Gaia machine carrying corporate mail for roughly ninety domains, including three entities named in Mohammed Hamcho's own designation. Sama Alsham's archived CEO page names Ahmad Saber Hamcho.", "entities": [ "gaia", "sama-alsham-group", "ahmad-saber-hamcho" ], "sources": [ "obs-dns-20260812", "sama-ceo-2015" ] } ], "sources": [ { "id": "ghabra-wayback-2007", "title": "Al-Ghabra Stud — \"Word of the Stud's Owner\"", "url": "https://web.archive.org/web/20071114120507/http://www.ghabra.com/word.htm", "kind": "primary", "publisher": "ghabra.com via Internet Archive", "retrieved": "2026-08-12", "note": "A purebred Arabian horse-breeding site, WAHO-referenced. The welcome message is signed, as the page's only identifying name, \"محمد حمشو\" (Mohammed Hamsho)." }, { "id": "hadeed-scrap-memo-2014", "title": "Hadeed Metal Manufacturing — internal memo on scrap-iron extraction and transport", "url": "https://elmsadi.syriacommons.com/assets/documents/hadeed-scrap-memo-2014-p1.jpg", "kind": "primary", "publisher": "Hadeed Metal Manufacturing (self-hosted copy, 3 pages)", "retrieved": "2026-08-12", "note": "Dated 2014-05-04. Records payments toward a scrap-iron project (\"Dara\"): $1,000,000 (20 Aug 2013), $600,000 (9 Mar 2014), and SYP 117,210,000 as a sales commission to Samir Hmeisho's company. Separately describes market competition from \"Emad Hmeisho's company\" over electricity tariffs for metal-melting furnaces." }, { "id": "palmyravillage-holding-page", "title": "Palmyra Village & Resort — holding page", "url": "https://elmsadi.syriacommons.com/assets/documents/palmyravillage-holding-page.jpg", "kind": "primary", "publisher": "palmyravillage.com (self-hosted copy)", "retrieved": "2026-08-12", "note": "\"We are currently upgrading our website.\" Lists P.O. Box 8254, Damascus, tel +963 11 2312857, fax +963 11 2318875, info@palmyravillage.com — the P.O. Box and fax match Hamsho International Group's own OpenSanctions-listed contact details exactly." }, { "id": "boycott-graphic-2026", "title": "\"Boycott Mohammed Hamsho's products\" — social media graphic", "url": "https://elmsadi.syriacommons.com/assets/documents/boycott-graphic.png", "kind": "press", "publisher": "Hassan Akkad", "retrieved": "2026-08-12", "note": "A consumer-boycott graphic grouping roughly 25 company names and logos by sector under Mohammed Hamsho's name." }, { "id": "os-mohammed-hamcho-q137381681", "title": "Mohammed Hamcho — OpenSanctions (Wikidata-linked record)", "url": "https://www.opensanctions.org/entities/Q137381681/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-12", "note": "A separate, richer OpenSanctions record for the same person (their NK- and Q- prefixed records appear un-merged). Gives dated positions — General Secretary, Damascus Chamber of Commerce, from Dec 2014; Chairman, China–Syria Bilateral Business Council, from March 2014; Chairman, Syrian Metal and Steel Council, from Dec 2015; People's Council member 2012–2016 — passport 002954347, and sanctions dates across 13 jurisdictions. Designation rationale describes \"close business relationships with key figures of the Syrian regime, including Maher Al-Assad.\"" }, { "id": "gem-hamsho-trading-ownership", "title": "Hamsho Trading — Global Energy Monitor ownership tracker", "url": "https://www.opensanctions.org/entities/gem-own-e100002003617/", "kind": "directory", "publisher": "OpenSanctions / Global Energy Monitor Ownership Tracker", "retrieved": "2026-08-12", "note": "Documents a quantified ownership chain: Hamsho International Group owns 100% of Hamsho Trading (aka Hmisho Economic Group, Hmisho Trading Group), which owns 100% of Hmisho Steel." }, { "id": "hadeed-linkedin", "title": "Hadeed-MMC — LinkedIn company page (About)", "url": "https://www.linkedin.com/company/hadeed-mmc/about/", "kind": "primary", "publisher": "LinkedIn", "retrieved": "2026-08-12", "note": "Company's own description: melts scrap metal into steel billets to international standards, feeding rebar production, plus its stated priorities on product quality, stakeholder relations and staff development." }, { "id": "isnad-linkedin", "title": "Isnad Steel — LinkedIn company page (About)", "url": "https://www.linkedin.com/company/isnad-steel/about/", "kind": "primary", "publisher": "LinkedIn", "retrieved": "2026-08-12", "note": "Company's own description: established 2008 to produce structural steel (residential, commercial, industrial, telecom and power towers) to international standards; new management from 2018 expanded into architectural/decorative structural steel. Lists website www.isnadsteel-sy.com and phone +963 11 4016." }, { "id": "hadeed-letter-2016", "title": "Syrian Council for Metals and Steel — letter to the Director General of Customs, signed by Mohammed Hamsho", "url": "https://elmsadi.syriacommons.com/assets/documents/hadeed-mmc-com-letter.jpg", "kind": "primary", "publisher": "Syrian Council for Metals and Steel (self-hosted copy)", "retrieved": "2026-08-12", "note": "Dated 2016-03-02, ref. ص ع 16/28 · ص و 16/20, addressed to Fawaz Al-Asaad, Director General of Customs. Signed by Mohammed Hamsho as رئيس مجلس الإدارة (Chairman of the Board). Footer lists info@hadeed-mmc.com as the Council's contact address." }, { "id": "b2bhint-expertblue", "title": "Expert Blue General Trading L.L.C. — company registry record", "url": "https://b2bhint.com/en/company/ae-du/expert-blue-general-trading-llc--273399", "kind": "directory", "publisher": "b2bhint.com", "retrieved": "2026-08-12", "note": "CBLS 273399, Dubai registry number 677135, incorporated 2012-10-04 as a Dubai mainland L.L.C. Gives the full legal name, Arabic name, capital figures and registered activity codes (512107 Livestock Trading, 521904 General Trading)." }, { "id": "sama-ceo-2015", "title": "Sama Alsham Group — Message from the CEO", "url": "https://web.archive.org/web/20150904014510/http://www.samaalsham.com/ceo.html", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Signed \"Ahmad Saber Hamcho, Chief Executive Officer\". Also carries the group's full activity list and its three foreign subsidiaries." }, { "id": "sama-amh-2015", "title": "Sama Alsham Group — AMH Group", "url": "https://web.archive.org/web/20150902215340/http://www.samaalsham.com/amh.html", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "\"AMH is a group within the mother Sama Al Sham Group, that runs and operates the UAE branch.\"" }, { "id": "sama-expertblue-2015", "title": "Sama Alsham Group — Expert Blue", "url": "https://web.archive.org/web/20150902230315/http://www.samaalsham.com/expertblue.html", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Gives the Emirates Towers address, phone and fax." }, { "id": "sama-eblatrade-2015", "title": "Sama Alsham Group — Ebla Trade Off-shore", "url": "https://web.archive.org/web/20150904014532/http://www.samaalsham.com/eblatrade.html", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "\"Ebla Trade Lebanon was the first expansion of Sama Al Sham group outside Syria.\"" }, { "id": "expertblue-2014", "title": "Expert Blue L.L.C. — homepage", "url": "https://web.archive.org/web/20140827043434/http://www.expert-blue.com/", "kind": "primary", "publisher": "expert-blue.com via Internet Archive", "retrieved": "2026-08-12", "note": "Footer reads \"A member of AMH Investment Group\". Livestock export headlines for Qatar, Kuwait and the UAE." }, { "id": "hamshocom-2004", "title": "Hamshocom — About Us", "url": "https://web.archive.org/web/20040208044909/http://www.hamshocom.com/aboutus.html", "kind": "primary", "publisher": "hamshocom.com via Internet Archive", "retrieved": "2026-08-12", "note": "Confirms the domain as Hamsho Com — GSM and satellite handset distribution (Thuraya, Sony Ericsson)." }, { "id": "ueg-certificates", "title": "Union Electrical Group — Certificates page", "url": "http://union-electricalgroup.com/certificates", "kind": "primary", "publisher": "union-electricalgroup.com", "retrieved": "2026-08-12", "note": "Footer: \"All Rights Reserved, © Copyright 2026 Union Electric Group.\"" }, { "id": "union-cable-contact", "title": "Union Cables — Contact us", "url": "https://union-cable.com/contact-us/", "kind": "primary", "publisher": "union-cable.com", "retrieved": "2026-08-12", "note": "Adra Industrial City, P.O. Box 2494, +963 11 9259." }, { "id": "horizon-cont", "title": "horizon-cont.com", "url": "http://horizon-cont.com/", "kind": "primary", "publisher": "horizon-cont.com", "retrieved": "2026-08-11", "note": "Arabic corporate names, Northern Ring Road address, footer \"© Gaia Company 2025\". Its /contact/ page lists two phone numbers: 00963113227530 and 00963991023737 — see khan-alhandasah-hamsho." }, { "id": "horizon-cont-sample-page", "title": "horizon-cont.com — company history", "url": "https://horizon-cont.com/sample-page/", "kind": "primary", "publisher": "horizon-cont.com", "retrieved": "2026-08-13", "note": "The site's own company-history text names the company, in Arabic, \"مجموعة حمشو للتجارة والعمران\" (Hamsho Group for Trade and Construction) — twice, describing its 2004 adoption of German MEVA concrete formwork technology. That Arabic name is the original of \"Hamsho Trade And Construction\", the UK Sanctions List alias (ref SYR0305) for Hamsho Trading — see uk-eu-annex." }, { "id": "khan-alhandasah-hamsho", "title": "Khan Al-Handasah — Hamsho Group company profile", "url": "https://khan-alhandasah.com/en/companies/77", "kind": "directory", "publisher": "khan-alhandasah.com", "retrieved": "2026-08-13", "note": "Business-directory profile for \"Hamsho Group\" (مجموعة حمشو الدولية) listing office +963 (11) 322 7530 and mobile 00963991023737 — the same mobile number horizon-cont.com's own contact page lists for Middle East Contracting. States directly that the group operates through two subsidiaries: Middle East Contracting Company and Hamsho Reconstruction Foundation." }, { "id": "gaia-sy", "title": "Gaia — portfolio", "url": "https://gaia.sy/", "kind": "primary", "publisher": "gaia.sy", "retrieved": "2026-08-11" }, { "id": "os-mohammed-hamcho", "title": "Mohammed Hamcho — OpenSanctions", "url": "https://www.opensanctions.org/entities/NK-ZEnGEgdgjEBS9tRSokuoLH/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-11" }, { "id": "os-hig", "title": "Hamsho International Group — OpenSanctions", "url": "https://www.opensanctions.org/entities/NK-gbbKofvPLBW6szUysavyQb/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-11" }, { "id": "os-ahmad-hamsho", "title": "Ahmad Sabir Mohammed Hamsho — OpenSanctions", "url": "https://www.opensanctions.org/entities/Q18342456/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-12" }, { "id": "os-amr-hamsho", "title": "Amr Mohamed Hamsho — OpenSanctions", "url": "https://www.opensanctions.org/entities/Q126094659/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-12" }, { "id": "ngo-emad-hamsho", "title": "Emad Hamsho — sanctions database", "url": "https://ngoreport.org/sanctions-database/hamsho-emad/", "kind": "sanctions", "publisher": "ngoreport.org", "retrieved": "2026-08-11" }, { "id": "ofac-20250630", "title": "OFAC Recent Actions — Syria sanctions termination and E.O. 13894 re-designations", "url": "https://ofac.treasury.gov/recent-actions/20250630", "kind": "sanctions", "publisher": "US Treasury OFAC", "retrieved": "2026-08-11" }, { "id": "uk-eu-annex", "title": "Annex to Financial Sanctions Notice: Syria amendments", "url": "https://www.gov.je/SiteCollectionDocuments/Industry%20and%20finance/ID%20Annex%20Syria%2020210326%20SK.pdf", "kind": "sanctions", "publisher": "gov.je (UK/EU-derived annex)", "retrieved": "2026-08-11", "note": "Names Hamsho International, Hamsho Communication, MHG International, Jupiter for Investment and Tourism, and Syria Metal Industries." }, { "id": "newarab-dictators-men", "title": "All the dictator's men: who runs Assad's sanctions-busting network?", "url": "https://english.alaraby.co.uk/english/indepth/2016/4/5/all-the-dictators-men-who-runs-assads-sanctions-busting-network", "kind": "press", "publisher": "The New Arab", "retrieved": "2026-08-12" }, { "id": "reuters-economy", "title": "Syria is secretly reshaping its economy", "url": "https://www.reuters.com/investigations/syria-is-secretly-reshaping-its-economy-presidents-brother-is-charge-2025-07-24/", "kind": "press", "publisher": "Reuters", "retrieved": "2026-08-11", "note": "Describes Hamsho family enterprises as spanning cable production, metalworks, electronics and film studios. Important reference." }, { "id": "syriadirect-settlement", "title": "Sanctioned Syrian tycoon Hamsho eyes a 'new chapter' after financial settlement", "url": "https://syriadirect.org/sanctioned-syrian-tycoon-hamsho-eyes-a-new-chapter-after-financial-settlement/", "kind": "press", "publisher": "Syria Direct", "retrieved": "2026-08-12" }, { "id": "syria-report-ueg", "title": "Union Electric Group (UEG) — company directory entry", "url": "https://syria-report.com/directory/union-electric-group-ueg/", "kind": "directory", "publisher": "Syria Report", "retrieved": "2026-08-12", "note": "Paywalled beyond the first line." }, { "id": "fei-ahmad-hamcho", "title": "Ahmad Saber Hamcho — FEI athlete profile 10028625", "url": "https://www.fei.org/athlete/10028625/HAMCHO-Ahmad-Saber", "kind": "directory", "publisher": "Fédération Équestre Internationale", "retrieved": "2026-08-12" }, { "id": "alamy-ueg-2018", "title": "Union Electrical Group factory expansion, Adra, August 2018", "url": "https://www.alamy.com/adra-syria-15th-aug-2018-15082018-syria-adra-the-union-electrical-group-is-working-on-an-expansion-of-its-factories-to-dpa-story-syria-destroyed-country-from-05092018-credit-friedemann-kohlerdpaalamy-live-news-image217729459.html", "kind": "press", "publisher": "dpa / Alamy", "retrieved": "2026-08-11" }, { "id": "obs-dns-20260812", "title": "DNS, RDAP and reverse-IP observations", "url": "https://crt.sh/", "kind": "technical", "publisher": "Own collection", "retrieved": "2026-08-12", "note": "A/NS/MX/TXT and _dmarc records resolved over HTTPS DNS proxies; registration dates and registrars from Verisign RDAP; co-hosted domains from reverse-IP passive DNS. Recorded 12 August 2026." }, { "id": "sit-follow-the-money-37", "title": "\"Follow the Money\", Syria in Transition, issue 37", "url": "https://www.syriaintransition.com/en/home/archive/issue-37/follow-the-money", "kind": "press", "publisher": "Syria in Transition", "retrieved": "2026-08-12", "note": "Names Itsal Plus as part of the Hamsho family's commercial holdings." }, { "id": "itsalplus-samatel-linkedin", "title": "Damascus mobile-retail professional — LinkedIn profile, employment history", "url": "https://www.linkedin.com/in/firasghanem/", "kind": "directory", "publisher": "LinkedIn", "retrieved": "2026-08-12", "note": "Lists a single combined role — \"Samatel - Itsal plus - OPPO Syria\", Damascus — rather than separate entries for each name, treating SamaTel and Itsal Plus as one employer/operation rather than distinct companies." }, { "id": "itsalplus-fb", "title": "ITSAL Plus SY — Facebook page", "url": "https://www.facebook.com/itsalplus.syr/", "kind": "primary", "publisher": "Facebook", "retrieved": "2026-08-12", "note": "Self-describes in Arabic as the exclusive agent of OPPO in Syria." }, { "id": "manhom-unipac", "title": "شركة الاتحاد للعبوات والتغليف (Unipac) — company profile", "url": "https://manhom.com/%D8%B4%D8%B1%D9%83%D8%A7%D8%AA/%D8%B4%D8%B1%D9%83%D8%A9-%D8%A7%D9%84%D8%A7%D8%AA%D8%AD%D8%A7%D8%AF-%D9%84%D9%84%D8%B9%D8%A8%D9%88%D8%A7%D8%AA-%D9%88%D8%A7%D9%84%D8%AA%D8%BA%D9%84%D9%8A%D9%81/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Legal form محدودة المسؤولية (L.L.C.), Adra Industrial City, capital 5,000,000 SYP, established 2018 under Ministry of Internal Trade and Consumer Protection Decision No. 407, licensed for PET blow-molded plastic fillings and plastic/aluminium bottle caps. Lists four founding partners: Nazek Khalil Jawad, Karim Wael Al-Ghabra, Reda Khalil Jawad, Nahed Khalil Jawad." }, { "id": "eqtsad-jawad-unipac-2018", "title": "خليل جواد، زوج بثينة شعبان.. العراقي الذي أصبح مسؤولاً سورياً كبيراً", "url": "https://www.eqtsad.net/news/article/22904/", "kind": "press", "publisher": "Eqtsad.net (a Zaman al-Wasl project)", "retrieved": "2026-08-12", "note": "Byline Fouad Abdulaziz, dated 2018-12-02. Profiles Khalil Jawad, Iraqi-born (Karbala) husband of Bouthaina Shaaban — Bashar al-Assad's political and media advisor — who gained Syrian citizenship in 2006 and was Director General of the state General Organization for Food Industries until losing the post after 2013. States he now runs Union Packaging and Wrapping Company with his son Reda Khalil Jawad and daughter Nazek Khalil Jawad (married to American businessman Muthanna Saleh) — containers for carbonated-water bottling, Adra Industrial City, established 2018." }, { "id": "industrysy-unipac", "title": "شركة الاتحاد للعبوات والتغليف — Syrian Chemical Industries Directory listing", "url": "https://industrysy.com/chemical/ar/company/%D8%B4%D8%B1%D9%83%D8%A9-%D8%A7%D9%84%D8%A7%D8%AA%D8%AD%D8%A7%D8%AF-%D9%84%D9%84%D8%B9%D8%A8%D9%88%D8%A7%D8%AA-%D9%88%D8%A7%D9%84%D8%AA%D8%BA%D9%84%D9%8A%D9%81-%D8%A7%D9%84%D9%85%D8%AD%D8%AF%D9%88%D8%AF%D8%A9-%D8%A7%D9%84%D9%85%D8%B3%D8%A4%D9%88%D9%84%D9%8A%D8%A9", "kind": "directory", "publisher": "industrysy.com (Syrian Industrial Directory, chemical industries section)", "retrieved": "2026-08-12", "note": "Lists landlines 4434981 / 5855052, mobiles 0932532232 / 0930333733, city Rural Damascus, address 'Daraa International Highway', and contact email info@dakfood.net (rendered as a Cloudflare-obfuscated mailto; decoded from data-cfemail). dakfood.net is already in this register's domain list, mail-hosted on Server B alongside the rest of the Hamsho/Sama Alsham/Union estate — not previously linked to an entity." }, { "id": "linkedin-nour-kalho-unipac", "title": "LinkedIn post on Unipac", "url": "https://www.linkedin.com/posts/nour-kalho-819142344_%D8%B4%D8%B1%D9%83%D8%A9-%D8%A7%D9%84%D8%A7%D8%AA%D8%AD%D8%A7%D8%AF-%D9%84%D9%84%D8%B9%D8%A8%D9%88%D8%A7%D8%AA-%D9%88%D8%A7%D9%84%D8%AA%D8%BA%D9%84%D9%8A%D9%81-%D8%B4%D8%B1%D9%83%D8%A9-%D8%B1%D8%A7%D8%A6%D8%AF%D8%A9-activity-7380886179816247297-wJWC/", "kind": "directory", "publisher": "LinkedIn", "retrieved": "2026-08-12", "note": "Posted ~10 months before retrieval by an individual reported to have worked at Sama Alsham Group at the time. Promotional text: Unipac describes itself as a leading PET blow-molded packaging maker offering preforms for mineral water and soft-drink bottling and caps, to ISO9001:2015/ISO22000:2018." }, { "id": "manhom-union-plastic", "title": "شركة الاتحاد للبلاستيك (Union Plastic Company) — company profile", "url": "https://manhom.com/%D8%B4%D8%B1%D9%83%D8%A7%D8%AA/%D8%B4%D8%B1%D9%83%D8%A9-%D8%A7%D9%84%D8%A7%D8%AA%D8%AD%D8%A7%D8%AF-%D9%84%D9%84%D8%A8%D9%84%D8%A7%D8%B3%D8%AA%D9%8A%D9%83/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "English name 'UNION Plastic Company', Rural Damascus, phone +963-11-9259, fax +963-11-585-4447, P.O. Box 2494, website union-pvc.com, email info@union-pvc.com (decoded from Cloudflare-obfuscated mailto). Names it a subsidiary of مجموعة الاتحاد للكهرباء (Union Electrical Group); describes plasticized and non-plasticized PVC compounds in granule/powder form, custom-specified, plus PVC compounds and colour masterbatch concentrates." }, { "id": "manhom-union-electrical-group", "title": "مجموعة الاتحاد للكهرباء (Union Electrical Group) — company profile", "url": "https://manhom.com/%D8%B4%D8%B1%D9%83%D8%A7%D8%AA/%d9%85%d8%ac%d9%85%d9%88%d8%b9%d8%a9-%d8%a7%d9%84%d8%a7%d8%aa%d8%ad%d8%a7%d8%af-%d9%84%d9%84%d9%83%d9%87%d8%b1%d8%a8%d8%a7%d8%a1/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "English name 'Union Electrical Group', address مدينة عدرا العمالية (Adra industrial city), Rural Damascus, phone +963 11 9259, fax +963 11 5854447, website union-electricalgroup.com, email info@union-electricalgroup.com (decoded from Cloudflare-obfuscated mailto). Lists Rashad Basatna (رشاد بساتنة) as Marketing Director. Names only three subsidiaries — Union Cables, Union Transformers, Union Plastic — omitting Union Copper and Union Winding, which are separately documented here." }, { "id": "sinalco-about", "title": "Sinalco Syria — About (الشركة المتحدة للإستثمارات الصناعية)", "url": "https://sinalco.sy/about/", "kind": "primary", "publisher": "sinalco.sy", "retrieved": "2026-08-12", "note": "States sinalco.sy is operated by الشركة المتحدة للإستثمارات الصناعية (United Company for Industrial Investments), a food company founded 2015 with ~150 staff, initially producing canned goods, tomato paste and jams through its Dar Al-Khair (دار الخير) branch. Signed a partnership contract with Sinalco International in 2016; began producing and launching Sinalco products locally in 2018, growing to ~250 staff." }, { "id": "manhom-ucii", "title": "شركة المتحدة للاستثمارات الصناعية (UCII) — company profile", "url": "https://manhom.com/%D8%B4%D8%B1%D9%83%D8%A7%D8%AA/%D8%B4%D8%B1%D9%83%D8%A9-%D8%A7%D9%84%D9%85%D8%AA%D8%AD%D8%AF%D8%A9-%D9%84%D9%84%D8%A7%D8%B3%D8%AA%D8%AB%D9%85%D8%A7%D8%B1%D8%A7%D8%AA-%D8%A7%D9%84%D8%B5%D9%86%D8%A7%D8%B9%D9%8A%D8%A9/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Legal form محدودة المسؤولية (L.L.C.), Damascus, capital 1,000,000 SYP, registered 2016-02-17 under Ministry of Internal Trade and Consumer Protection Decision No. 371; amended 2021-03-14 (Decision No. 820) to add olive-oil filtering/packaging. Charter also permits car assembly and tire manufacturing, import/export. Founding partners Ibrahim bin Majed Mashael and Mohammed Samer Qasim Al-Mulhem; company manager Ammar Younes Younes (عمار يونس يونس)." }, { "id": "manhom-ammar-younes", "title": "عمار يونس يونس (Ammar Younes Younes) — profile", "url": "https://manhom.com/%D8%B4%D8%AE%D8%B5%D9%8A%D8%A7%D8%AA/%D8%B9%D9%85%D8%A7%D8%B1-%D9%8A%D9%88%D9%86%D8%B3-%D9%8A%D9%88%D9%86%D8%B3/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Syrian national, resident in Syria. Founding partner and Company Manager (مدير الشركة) of شركة المتحدة للاستثمارات الصناعية, holding 334 shares (33.4%, 334,000 SYP). Separately a founding partner holding 50% (25,000 shares, 2,500,000 SYP) of شركة ماركوم (Marcom Company)." }, { "id": "cham-about-2016", "title": "Cham Engineering and Contracting Company — About Us (من نحن)", "url": "https://web.archive.org/web/20160612204445/http://chamcontracting.com:80/index.php?type=page&pid=1", "kind": "primary", "publisher": "chamcontracting.com via Internet Archive", "retrieved": "2026-08-12", "note": "Self-description: specialises in engineering studies, interior/exterior design, maintenance and rehabilitation, plus building-automation and IT infrastructure (servers, networks, cameras). States it designs and executes factories/plants to international standards, villas and residential buildings, and companies' premises." }, { "id": "cham-contact-2016", "title": "Cham Engineering and Contracting Company — Contact Us (اتصل بنا)", "url": "https://web.archive.org/web/20160613021837/http://chamcontracting.com:80/index.php?type=page&pid=2", "kind": "primary", "publisher": "chamcontracting.com via Internet Archive", "retrieved": "2026-08-12", "note": "Damascus, Syria, P.O. Box 8222. Tel +963 11 2290237, fax +963 11 2313061, info@chamcontracting.com." }, { "id": "cham-project-hadeed-2019", "title": "Cham Contracting — project: معمل حديد لإنتاج الصلب (steel-production iron factory)", "url": "https://web.archive.org/web/20190601205744/http://www.chamcontracting.com/index.php?type=project&pid=59", "kind": "primary", "publisher": "chamcontracting.com via Internet Archive", "retrieved": "2026-08-12", "note": "Study, design and execution of the administrative building and \"businessmen's\" building, plus periodic factory maintenance, for a 28,000 m² steel-production plant in Adra Industrial City (عدرا الصناعية) — the same industrial city hosting Union Electrical Group and other estate entities. \"حديد\" (Hadeed) may be the plant's proper name, matching this register's Hadeed MMC entity, or simply the generic Arabic word for iron; not confirmed either way." }, { "id": "cham-project-hq-2019", "title": "Cham Contracting — project: مبنى شركة شام للهندسة والمقاولات (own HQ building)", "url": "https://web.archive.org/web/20190601205729/http://www.chamcontracting.com/index.php?type=project&pid=296", "kind": "primary", "publisher": "chamcontracting.com via Internet Archive", "retrieved": "2026-08-12", "note": "Design and execution of its own new headquarters, 650 m², at Qura al-Assad, Rural Damascus (ريف دمشق - قرى الاسد). Project manager: Eng. Manhal Fadloun (م. منهل فضلون)." }, { "id": "cham-project-undof-2017", "title": "Cham Contracting — project: أنظمة حماية وأمان (security systems at UNDOF headquarters)", "url": "https://web.archive.org/web/20170729152624/http://www.chamcontracting.com/index.php?type=project&pid=68", "kind": "primary", "publisher": "chamcontracting.com via Internet Archive", "retrieved": "2026-08-12", "note": "Integrated security system for UNDOF headquarters at Al-Saboura — Yaafour Resort (الصبورة - منتجع يعفور): vehicle barriers, fire alarm/security system, anti-shatter window film, perimeter metal fencing. Estimated value $60,000; 1–21 Jan 2015. A distinct, notable client (a UN peacekeeping body) with no apparent link to the rest of this estate." }, { "id": "sama-ceo-2017-anonymized", "title": "Sama Alsham Group — Message from the CEO (2017, unsigned)", "url": "https://web.archive.org/web/20171029173424/http://www.samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=1&cat=340&act=340&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "The same CEO-message text as the 2015 capture (sama-ceo-2015), but the closing signature naming Ahmad Saber Hamcho as Chief Executive Officer has been removed — the page now ends unsigned. A deliberate de-identification of the group's own site between 2015 and 2017." }, { "id": "sama-home-2017", "title": "Sama Alsham Group — homepage (2017)", "url": "https://web.archive.org/web/20171028013927/http://www.samaalsham.com:80/index.php", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Displays a logo carousel/grid of group member companies, each linking to its own subsidiary detail page. Source of the logo files matched to entities in this register." }, { "id": "sama-uieg-2017", "title": "Sama Alsham Group — subsidiary page: Union Electric", "url": "https://web.archive.org/web/20171029173434/http://www.samaalsham.com:80/index.php?page=show&ex=2&dir=docs&lang=2&ser=2&cat=382&act=382&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "\"Union Electric Group is a group comprising four facilities including cables, electric meters, PVC and transformers.\" Names Union Electrical Group directly as a Sama Alsham Group subsidiary — the clearest primary-source bridge in this register between the Sama Alsham naming cluster and the Union naming cluster. \"Electric meters\" is not one of the five Union subsidiaries otherwise documented here — an open lead." }, { "id": "sama-uiic-2017", "title": "Sama Alsham Group — subsidiary page: uiic", "url": "https://web.archive.org/web/20171029173220/http://www.samaalsham.com:80/index.php?page=show&ex=2&dir=docs&lang=2&ser=2&cat=379&act=379&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "A bare subsidiary stub titled \"uiic\" — no body text, but its existence under Sama Alsham Group's own subsidiary index directly names UCII/UIIC (United Company for Industrial Investments) as a group member." }, { "id": "sama-sinalco-2016", "title": "Sama Alsham Group — subsidiary page: Sinalco Syria", "url": "https://web.archive.org/web/20160318012427/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=360&act=366", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "\"While one of our sister companies imports certain types of Sinalco finished products for distribution, the group also is the exclusive licensee to manufacture Sinalco in Syria.\" Tel +963 (11) 212 99 60, www.sinalco.sy — Sama Alsham Group's own site claiming the Sinalco license directly." }, { "id": "sama-cec-2017-en", "title": "Sama Alsham Group — subsidiary page: CEC (English)", "url": "https://web.archive.org/web/20171029173005/http://www.samaalsham.com:80/index.php?page=show&ex=2&dir=docs&+lang=2&ser=2&cat=380&act=388", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Full English description of \"Cham Company for Engineering and Contracting\", word-for-word matching chamcontracting.com's own About Us text (cham-about-2016). Adds two new projects — sewage treatment plants in Homs and Hama, and an organic fertilizer factory in Damascus — and states CEC \"is a member of the United Nations Organization for International Marketing (UNMG)\". Retrieved via the homepage's samatv_trans logo link, which resolves to this page rather than distinct SAMA TV content — flagged as a Wayback playback quirk, not a claim that SAMA TV and CEC are the same thing." }, { "id": "sama-dak-2016", "title": "Sama Alsham Group — subsidiary page: DAK", "url": "https://web.archive.org/web/20160317201319/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=343&act=369", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "\"Dar Alkhair\" — FMCG: cooking oil, canned tuna, rice, ghee. Syria - Damascus - Baghdad str. Tel +963 (11) 4434980, fax +963 (11) 4434981, info@dakfood.net, www.dakfood.net. The fax number, 4434981, is the same number industrysy.com lists as one of Unipac's own landlines, and Baghdad Street is the same street Hamsho International Group's own OFAC-listed address sits on." }, { "id": "sama-memo-2016", "title": "Sama Alsham Group — subsidiary page: MEMO", "url": "https://web.archive.org/web/20160317190859/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=317&act=378", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Electronics: \"providing technical software and hardware and after sales services solutions.\" Tel +963 (11) 2110786, fax +963 (11) 2110498, info@memoict.com, www.memoict.com." }, { "id": "sama-abouwaheed-2016", "title": "Sama Alsham Group — subsidiary page: Abou Waheed", "url": "https://web.archive.org/web/20160317191839/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=349&act=374", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Hospitality — Syrian restaurant. Tel +963 (11) 37 35 187, Facebook facebook.com/abouwahed." }, { "id": "sama-arabesque-2016", "title": "Sama Alsham Group — subsidiary page: Arabesque Radio", "url": "https://web.archive.org/web/20160317204827/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=365&act=326", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Media — \"100% Syrian Broadcasting radio... a youth variety of social and purposeful radio, 102.3, broadcasts from Damascus to every single meter in Syria.\" Tel +963 (11) 3045, fax +963 (11) 4474065." }, { "id": "sama-zamanalkhair-2016", "title": "Sama Alsham Group — subsidiary page: zamanalkhair", "url": "https://web.archive.org/web/20160317152731/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=2&cat=335&act=335&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "A bare subsidiary stub titled \"zamanalkhair\" — logo and page exist under Sama Alsham Group's own subsidiary index, but no body text or contact details were ever filled in." }, { "id": "sama-palmyra-2016", "title": "Sama Alsham Group — subsidiary page: Palmyra Village (2016)", "url": "https://web.archive.org/web/20160317201739/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&%20lang=2&ser=1&cat=347&act=372", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Tel +963 (11) 2129960, fax +963 (11) 2131025, email/site given as www.palmyravillge.com (sic, missing an 'a') — a different phone/fax pair than palmyravillage-holding-page's, and the same pair listed on Sama Alsham's own Sham Aqua Park page." }, { "id": "sama-activities-nav-2016", "title": "Sama Alsham Group — full \"Our Activities\" subsidiary index (2016)", "url": "https://web.archive.org/web/20160317204854/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=2&cat=329&act=329&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "A complete subsidiary navigation menu grouped by sector: Engineering & Contracting (Tatweer), Electronics (SamaTel, MEMO), Automotive (Haima Plant), Aviation (Ebla Airlines), Hospitality (Abou Waheed, Tamary, Palmyra Village, Sham Aqua Park), Pharmaceuticals (Dawaco), FMCG (DAK), Media (Sama Al-Fan Production, Sama Al-Arab TV, Arabesque Radio), General Trading (Expert Blue), Food Manufacturing (EGC, Sinalco Syria). Retrieved via the \"littlenursery2\" logo's link, itself a bare stub with no body text." }, { "id": "sama-haima-2016", "title": "Sama Alsham Group — subsidiary page: Haima Plant", "url": "https://web.archive.org/web/20160318012432/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=1&cat=353&act=353&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Automotive — describes Haima (Hainan Mazda), a Chinese passenger-vehicle and minivan manufacturer headquartered in Haikou with a Zhengzhou factory and Shanghai R&D site, running SKD/CKD assembly in three countries. www.en.haima.com. Matches \"Car Assembly\" among the current-projects items on Sama Alsham's own 2017 homepage." }, { "id": "sama-tamary-2016", "title": "Sama Alsham Group — subsidiary page: Tamary", "url": "https://web.archive.org/web/20160317145139/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=1&cat=348&act=348&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Hospitality — \"Launched in Dubai in early 2015, Tamary brings the authentic old Syrian street food in a modern way to the market of the UAE.\" Tel +971 (4) 34 44 770, www.tamary.com. tamary.com itself resolves outside the Gaia-operated estate (AWS/GoDaddy SPF, Microsoft 365 mail) — a genuinely separate UAE retail operation, not tracked in the domain register." }, { "id": "sama-shamaquapark-2016", "title": "Sama Alsham Group — subsidiary page: Sham Aqua Park", "url": "https://web.archive.org/web/20160317144659/http://samaalsham.com/index.php?page=show&ex=2&dir=docs&lang=2&ser=1&cat=364&act=364&", "kind": "primary", "publisher": "samaalsham.com via Internet Archive", "retrieved": "2026-08-12", "note": "Hospitality — a water park \"minutes away from Damascus.\" Tel +963 (11) 2129960, fax +963 (11) 2131025 — the same phone/fax pair given on Sama Alsham's own 2016 Palmyra Village page." }, { "id": "yafour-lightsoundjournal-2011", "title": "New Four-Star Yafour Hotel Comes Alive with SGM", "url": "https://www.lightsoundjournal.com/2011/03/02/new-four-star-yafour-hotel-comes-alive-with-sgm/", "kind": "press", "publisher": "LightSoundJournal.com", "retrieved": "2026-08-12", "note": "A lighting-industry trade press piece, dated 2 March 2011, opens: \"Owned by Hamsho Group International, the four star hotel, located in the nature reserve region of Yafour, outside Damascus, has been built to a high standard.\" Six-storey building, white marble façade, a 500-person banquet/conference hall, visible from the Damascus–Beirut highway. The lighting contractor's own owner, Ammar Jano of Jano For Lighting, is a separate person from the hotel's ownership." }, { "id": "yafour-sana-2022", "title": "Farewell ceremony for the Chinese Ambassador in Damascus upon completing his mandate", "url": "https://sana-syria.org/en/?p=278743", "kind": "press", "publisher": "Syrian Arab News Agency (SANA)", "retrieved": "2026-08-12", "note": "Dated 2022-07-25. Reports a farewell ceremony for outgoing Chinese Ambassador Feng Biao \"at Yafour tourist resort\", attended by government ministers and \"Chairman of Syrian-Chinese Business Council, Muhammad Hamsho\" — Mohammed Hamcho's own documented position in this register. Places him personally at the venue in an official capacity, though the article does not itself state ownership." }, { "id": "yafour-fb", "title": "Yafour Hotel — Facebook page", "url": "https://www.facebook.com/YafourHotel", "kind": "primary", "publisher": "Facebook", "retrieved": "2026-08-12" }, { "id": "yafour-resort-about-2012", "title": "Yafour Hotel & Resort — About Us (2012)", "url": "https://web.archive.org/web/20120801214901/http://www.yafouresort.com:80/en/aboutUs.php", "kind": "primary", "publisher": "yafouresort.com via Internet Archive", "retrieved": "2026-08-12", "note": "The hotel's own self-description: \"YAFOUR Hotel & Resort is renowned throughout the area for the sheer opulence of its rooms and suites; for the innovation of its restaurants; and the grandeur of its facilities.\"" }, { "id": "yafour-resort-contact-2017", "title": "Yafour Hotel & Resort — Contact (2017)", "url": "https://web.archive.org/web/20170823052002/http://www.yafouresort.com:80/contact/", "kind": "primary", "publisher": "yafouresort.com via Internet Archive", "retrieved": "2026-08-12", "note": "Damascus, Yafour — \"near the new eight gate of Damascus.\" Tel +963-11-3921555 / +963-11-5099, fax +963-11-3921574, info@yafouresort.com, resa@yafouresort.com (reservations), sales@yafouresort.com, www.yafouresort.com. States: \"Our corporate office serves as base operations for all hotels\" — implying more than one property under this operation, not otherwise identified." }, { "id": "occrp-un-funding-2022", "title": "Millions in UN Funding Flow to War Profiteers and Human Rights Abusers in Syria, Study Shows", "url": "https://www.occrp.org/en/feature/millions-in-un-funding-flow-to-war-profiteers-and-human-rights-abusers-in-syria-study-shows", "kind": "press", "publisher": "OCCRP, with SIRAJ", "retrieved": "2026-08-12", "note": "By Rana Sabbagh (OCCRP) and Ali Al Ibrahim (SIRAJ), 25 October 2022, drawing on a study by the Syrian Legal Development Program (SLDP) and the Observatory of Political and Economic Networks (OPEN). States: \"Jupiter for Investments SA, which received over half a million dollars from UNICEF for 'management and admin services,' is owned by relatives of regime ally Mohammad Hamsho, including four who are under sanctions.\" Also accuses Hamsho of trading in rubble from destroyed homes and acting as a front for Maher al-Assad." }, { "id": "sinalco-hamsho-dabbas-report", "title": "What Is the Connection Between German Sinalco, Mohammad Hamsho, Ammar Younes, and Fadi Al-Dabbas?", "url": "https://drive.google.com/file/d/1V19-U3annf44DukD1e_7mVJnz3JVhbqI/view", "kind": "press", "publisher": "Unbranded investigative report (shared via Google Drive)", "retrieved": "2026-08-12", "note": "Bilingual, no visible byline. Names DAK's four owners (Naeem Al-Khair 25%, Fadi/Ghiyath/Abeer Al-Dabbas 25% each) and UCII's officers (GM Haidara Makhlouf, admin director Wassim Moussali, lab manager Hala Ghossn). Reports Ammar Younes co-founded security firm Hisn Al-Sham with Fadi Al-Dabbas, which \"protected Mohammad Hamsho and carried out suspicious military operations,\" and a June 2026 police complaint by Younes against Hassan Akkad over defamation videos. Embeds a UCII registry certificate (No. 17834), a Hisn Al-Sham statute, an armed-vehicle photo, and a police report." }, { "id": "ghabra-archive-2007", "title": "Ghabra — horse registry entry A01750, \"Hasnaa Al-Sham\"", "url": "https://web.archive.org/web/20071125081552/http://www.ghabra.com:80/hors.php?mode=%27%27&id=5", "kind": "primary", "publisher": "ghabra.com via Internet Archive", "retrieved": "2026-08-12", "note": "The domain's own horse-pedigree record: registry no. A01750, name \"حسناء الشام\" (Hasnaa Al-Sham), owner (المالك) and breeder (المربي) both given as محمد حمشو (Mohammed Hamsho), stable (الإسطبل) الغبراء (Al-Ghabra), foaled 1997, mare (فرس), strain شويمة سباح." }, { "id": "os-ali-hamsho", "title": "Ali Mohamad Hamcho — OpenSanctions", "url": "https://www.opensanctions.org/entities/NK-MWsRGw5Z9JK6SSPNoxvwVs/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-12", "note": "Born 3 November 1998, Damascus; passport N005361042 — consecutive with the passport OpenSanctions lists for his brother Amr (N005361043). On the US OFAC SDN list since 20 April 2023 under the PAARSS/Caesar reciprocal programme first initiated 17 June 2020; addresses in Damascus and Paris. A son of Mohammed Hamcho." }, { "id": "aljazeera-hamsho-2026", "title": "محمد حمشو.. رجل الأعمال السوري تاجر الخردة الذي طالته العقوبات", "url": "https://www.aljazeera.net/encyclopedia/2026/1/9/%D9%85%D8%AD%D9%85%D8%AF-%D8%AD%D9%85%D8%B4%D9%88-%D8%B1%D8%AC%D9%84-%D8%A7%D9%84%D8%A3%D8%B9%D9%85%D8%A7%D9%84-%D8%A7%D9%84%D8%B3%D9%88%D8%B1%D9%8A-%D8%AA%D8%A7%D8%AC%D8%B1-%D8%AE%D8%B1%D8%AF%D8%A9", "kind": "press", "publisher": "Al Jazeera", "retrieved": "2026-08-12", "note": "Dated 2026-01-09. Names his wife Rania al-Dabbas (رانيا الدباس) and four children Ahmad, Omar/Amr, Ali and Samiya/Sumaya. Describes him as an economic front for Maher al-Assad. Lists further companies beyond Hamsho International Group (Syria International for Artistic Production, the Al-Thuraya agency, Sham Press, Al-Shahba Investment and Tourism, a stake in Al-Dunya TV). Chronology: fled to Beirut on the regime's fall (8 Dec 2024); settlement announced 7 Jan 2026." }, { "id": "manhom-ahmad-hamsho", "title": "من هو أحمد صابر محمد حمشو؟ — profile", "url": "https://manhom.com/%D8%B4%D8%AE%D8%B5%D9%8A%D8%A7%D8%AA/%D8%A3%D8%AD%D9%85%D8%AF-%D8%B5%D8%A7%D8%A8%D8%B1-%D9%85%D8%AD%D9%85%D8%AF-%D8%AD%D9%85%D8%B4%D9%88/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Names Ahmad Saber Hamcho as a founding partner of شركة سيف الشام (Seif Alsham Company) holding 27 shares (9%), and of شركة جوبيتر للاستثمارات (Jupiter for Investments) holding 1,100 shares (11%). Records his father Mohammed Hamsho as General Manager and founding partner of Al-Shahba Communications (الشهباء للاتصالات), Dawa (دوا), Hamsho for Investments (حمشو للاستثمارات), Tatweer (تطوير) and Seif Alsham (سيف الشام). Also covers Ahmad's equestrian career: first Syrian in Olympic equestrian competition (2012, 2020)." }, { "id": "enabbaladi-hamsho-return-2026", "title": "حمشو يسجل عودته رسميًا إلى سوريا \"ما بعد الأسد\"", "url": "https://www.enabbaladi.net/772680/", "kind": "press", "publisher": "Enab Baladi", "retrieved": "2026-08-12", "note": "On Hamsho's January 2026 return and settlement. Reports the National Committee for Combating Illicit Gain recovered roughly $800 million in funds and assets from him, and that his sons Ahmad and Amr had earlier pledged $1 million to the state-backed Syrian Development Fund, drawing public criticism. The National Commission for Transitional Justice issued a statement on the settlement on 8 January 2026." }, { "id": "akkad-ig-hadeed-letter", "title": "Hassan Akkad (@hassanakkad) — Instagram", "url": "https://www.instagram.com/hassanakkad/", "kind": "press", "publisher": "Hassan Akkad", "retrieved": "2026-08-12", "note": "Credited for surfacing the 2016 Syrian Council for Metals and Steel letter signed by Mohammed Hamsho." }, { "id": "manhom-fadi-aldabbas", "title": "من هو محمد فادي الدباس؟ — profile", "url": "https://manhom.com/%D8%B4%D8%AE%D8%B5%D9%8A%D8%A7%D8%AA/%D9%81%D8%A7%D8%AF%D9%8A-%D8%AF%D8%A8%D8%A7%D8%B3/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Profile of Mohammed Fadi Al-Dabbas (b. 1972, Syrian). Names him a founding partner (شريك مؤسس) in \"شركة دار الخير للاستيراد والتصدير\" (Dar Al-Khair Import and Export Company) — corroborating DAK's own ownership record. Also covers his football administration career: president of the Syrian Arab Football Federation (May 2018–August 2019), director of the Syrian national team (2014–2018), and roles at Al-Jaish and Al-Wehda clubs — unrelated to the Hamsho estate." }, { "id": "ahmad-hamcho-fb", "title": "Ahmad Saber Hamcho — Facebook photo, Syrian Equestrian Federation show-jumping award", "url": "https://elmsadi.syriacommons.com/assets/documents/ahmad-saber-hamcho-fb-2026.jpg", "kind": "primary", "publisher": "Facebook (self-hosted copy)", "retrieved": "2026-08-13", "note": "Originally retrieved from Facebook's CDN at https://scontent-ham3-1.xx.fbcdn.net/v/t39.30808-6/502585017_4082579192028118_8121019537061400887_n.jpg — a signed, expiring link, which is why a copy is self-hosted here rather than linked live. Shows Ahmad Saber Hamcho mounted, holding a trophy, at a Syrian Equestrian Federation event — consistent with his documented career as Syria's first Olympic show-jumper. Used here for identification purposes only." }, { "id": "amr-hamsho-fb", "title": "Amr Hamsho — Facebook photo, Syrian Equestrian Federation show-jumping award", "url": "https://elmsadi.syriacommons.com/assets/documents/amr-hamsho-fb-2026.jpg", "kind": "primary", "publisher": "Facebook (self-hosted copy)", "retrieved": "2026-08-13", "note": "Originally retrieved from Facebook's CDN at https://scontent-ham3-1.xx.fbcdn.net/v/t39.30808-6/502474494_4082579205361450_2378550731274401263_n.jpg — a signed, expiring link, which is why a copy is self-hosted here rather than linked live. Shows Amr Hamsho mounted, holding a trophy, at a Syrian Equestrian Federation event, echoing his brother Ahmad's equestrian career. Used here for identification purposes only." }, { "id": "rania-al-dabbas-fb", "title": "Rania al-Dabbas — Facebook photo, with Mohammed Hamcho", "url": "https://elmsadi.syriacommons.com/assets/documents/rania-al-dabbas-fb-2026.jpg", "kind": "primary", "publisher": "Facebook (self-hosted copy)", "retrieved": "2026-08-12", "note": "Originally retrieved from Facebook's CDN at https://scontent-ham3-1.xx.fbcdn.net/v/t1.6435-9/78406137_801472293646030_2857037534066638848_n.jpg — a signed, expiring link, which is why a copy is self-hosted here rather than linked live. Shows Rania al-Dabbas alongside a man matching Mohammed Hamcho's appearance; used here for identification purposes only." }, { "id": "anas-othman-fb", "title": "Anas Othman — Facebook profile (self-hosted screenshot)", "url": "https://elmsadi.syriacommons.com/assets/documents/anas-othman-fb-2026.png", "kind": "primary", "publisher": "Facebook (self-hosted copy)", "retrieved": "2026-08-12", "note": "His own profile lists him as \"Owner and CEO\" of \"مجموعة غايا - Gaia Group\" since August 2019, and \"Married to Shefaa Hamsho Othman\" since 27 February 2016. Also lists a family connection to one Mohamed Adib Osman, education at Al-Thakafi and Tishreen University, and a pinned Gaia Group cover-photo post giving contact details info@gaia.com, gaia.sy and phone 0966622777 — matching the gaia.sy domain and gaia.group.sy@gmail.com DMARC contact already in this register." }, { "id": "shefaa-hamsho-othman-fb", "title": "Shefaa Hamsho Othman — Facebook profile", "url": "https://www.facebook.com/shefaa.hamsho.othman", "kind": "primary", "publisher": "Facebook", "retrieved": "2026-08-12", "note": "Manually reviewed, not self-hosted here. Lists work \"Designing at Sama TV — قناة سما الفضائية الصفحة الرسمية\", location Damascus, and \"Married to Anas Othman\" since 27 February 2016 — consistent with Anas Othman's own profile." }, { "id": "manhom-naeem-alkhair", "title": "من هو نعيم أحمد الخير؟ — profile", "url": "https://manhom.com/%D8%B4%D8%AE%D8%B5%D9%8A%D8%A7%D8%AA/%D9%86%D8%B9%D9%8A%D9%85-%D8%A3%D8%AD%D9%85%D8%AF-%D8%A7%D9%84%D8%AE%D9%8A%D8%B1/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-12", "note": "Registry-style profile of Naeem Ahmad Al-Khair (Syrian). Records him as a founding partner (شريك مؤسس) in \"شركة دار الخير للاستيراد والتصدير\" (Dar Al-Khair Import and Export Company) holding 25 shares (25%) worth 1,000,000 SYP — corroborating DAK's own ownership record and the sinalco-hamsho-dabbas-report. Separately names him a founding partner in \"شركة سما القابضة\" (Sama Holding Company) holding 3,330,000 shares (33.3%) worth 333,000,000 SYP, alongside a second named founding partner, Mohammed Maher Mohammed Ghanmeh (also 33.3%) — not yet an entity in this register." }, { "id": "seco-syria-20250307", "title": "Syria sanctions — consolidated list of designated persons and entities (SECO), 7 March 2025 edition", "url": "https://www.seco.admin.ch/dam/it/sd-web/DpGb-6-fcAEw/Syrien_2025-03-07.pdf", "kind": "sanctions", "publisher": "State Secretariat for Economic Affairs (SECO), Switzerland", "retrieved": "2026-08-13", "note": "SECO (Swiss) Syria sanctions list, SSID 200-11836: Ayman Jabir, DOB 17 Jan 1967, POB Latakia; a.k.a. Aiman, Jaber. Covers steel/media/oil-trading interests (Al Jazira, Dunia TV, Sama Satellite Channel), oil imports via Al Jazira from Overseas Petroleum Trading, militia leadership, and ties to Rami Makhlouf and Maher al-Assad. Separately, the Emad Hamsho entry (SSID 200-30662) names Jabir as a fellow \"designated regime businessman\" alongside Emad on the Syrian Council of Iron and Steel -- the basis for the Hamsho-network link recorded here." }, { "id": "os-ayman-jabir", "title": "Ayman Jaber — OpenSanctions", "url": "https://www.opensanctions.org/entities/NK-UxAAsq3DmTAmeaMADK8suf/", "kind": "sanctions", "publisher": "OpenSanctions", "retrieved": "2026-08-13", "note": "Aggregate profile: passport 003308607, DOB 17 Jan 1967, POB Latakia, aliases including Ayman Mehriz/Mohriz/Muhriz Jaber. Lists designations across 14+ sanctions authorities (US OFAC, EU, UK, Switzerland, Canada, Australia and others). No mention of Hamsho, Hamcho or the Syrian Council for Metals/Iron and Steel anywhere in the record." }, { "id": "syrianmemory-ayman-jabir", "title": "أيمن جابر — الذاكرة السورية (Syrian Memory archive)", "url": "https://syrianmemory.org/archive/figures/5d7ea07abcb49c0001326540", "kind": "press", "publisher": "Syrian Memory (الذاكرة السورية)", "retrieved": "2026-08-13", "note": "Syrian Memory archive figure profile: businessman, leader/founder of the Suqur al-Sahraa and Maghawir al-Bahr militias. States Jabir began in smuggling at Latakia port, built influence via closeness to the Assad family, founded the Arab Company for Iron Rolling (ESCO), and partnered in Rami Makhlouf's Cham Holding. Militias operated in Latakia, Deir ez-Zor and Homs. Sanctioned by the US (2012) and EU (2015). In 2017 the army raided him, confiscated equipment, and folded the militias into the Russian-backed 5th Corps. Assets seized 27 April 2021. No mention of Hamsho." }, { "id": "manhom-ayman-jabir", "title": "من هو أيمن جابر؟ — profile", "url": "https://manhom.com/%D8%B4%D8%AE%D8%B5%D9%8A%D8%A7%D8%AA/%D8%A3%D9%8A%D9%85%D9%86-%D8%AC%D8%A7%D8%A8%D8%B1/", "kind": "directory", "publisher": "manhom.com", "retrieved": "2026-08-13", "note": "manhom.com directory profile: describes Jabir as heading (\"يرأس\") \"the Iron and Steel Council in Syria,\" with contracting investments, a Cham Holding stake, and co-founding Al-Dunya TV; also a member of the Arab Union for Iron and Steel and chairman of ESCO in Jableh. Its related-persons module lists \"Khaled Al-Majthoub\" as the Council's Treasurer and \"Muhammad Hamash\" (محمد حمش, missing the final و) as a member -- unconfirmed, not a match to Hamcho/Hamsho. Conflicts with the Chairman attribution to Mohammed Hamcho on syrian-council-metals-steel." }, { "id": "ayman-jabir-syrianmemory-photo", "title": "Ayman Jabir — photograph (Syrian Memory archive)", "url": "https://elmsadi.syriacommons.com/assets/documents/ayman-jabir-syrianmemory.webp", "kind": "primary", "publisher": "Syrian Memory (self-hosted copy)", "retrieved": "2026-08-13", "note": "Originally retrieved from the Syrian Memory figure record's own attached avatar file, \"Capturejabbber.JPG\" (474x501), hosted on a signed, expiring S3 link, which is why a copy is self-hosted here rather than linked live. Used for identification purposes only." }, { "id": "baath-b2bsy-council-decree-2015", "title": "قرار إحداث \"المجلس السوري للمعادن والصلب\" — Council founding decree, reprinted from Al-Baath", "url": "https://b2b-sy.com/syria/cat-10/33221/", "kind": "press", "publisher": "b2b-sy.com, reprinting Al-Baath newspaper (صحيفة البعث)", "retrieved": "2026-08-13", "note": "Reports PM Wael al-Halqi's Decision 3592 establishing the Syrian Council for Metals and Steel, Damascus-seated, as a legal-personality public-benefit body. Its 17-member board, chaired by \"الصناعي محمد حمشو\" (industrialist Mohammed Hamsho), includes the Ministries of Economy and Industry and the Omran establishment, for a renewable four-year term. Corroborates the December 2015 chairmanship date otherwise sourced only to OpenSanctions (os-mohammed-hamcho-q137381681) — a contemporaneous report of the founding decree, not a later aggregator restating it." } ] }