#235 CHARMER // Vessel Intelligence System

Intelligence Overview

CHARMER · MMSI 338226781 · 🇺🇸 US · Primary Port: Norfolk

PERIOD: JAN–DEC 2024

⚠ INTELLIGENCE ASSESSMENT: CHARMER ranks #235 of 69,461 monitored vessels with 92 anomalous detections across 9 months. Composite risk score: 0.9500 (CRITICAL). Active alert types: SPEED_ANOMALY, ZIGZAG, POSITION_JUMP.

Global Rank

#235

of 69,461 vessels

Composite Score

0.9500

CRITICAL

Total Detections

92

Months Active

9/12

Unique Ports

4

Position Jumps

10

GPS spoofing

Speed Anomalies

15

Max Speed

102.2 kn

Max Jump

1,328km

Monthly Detection Volume

1
1

10
11

3
8

4
11

2024 MONTHLY DETECTIONS

Alert Type Distribution

SPEED_ANOMALY

15

POSITION_JUMP

10

ZIGZAG

6

Key Intelligence Findings

GPS Spoofing — 10 Position Jumps

AIS coordinates fabricated at impossible locations. Maximum jump of 1,328 km confirms the AIS transmitter is broadcasting false positions. Systematic identity concealment is in progress.

Velocity Fraud — 15 Speed Anomaly Events

AIS SOG field manipulated to broadcast physically impossible speeds up to 102.2 knots. Systematic falsification of movement data to corrupt automated tracking algorithms.

Evasion Navigation — 6 Zigzag Events

Erratic course-over-ground patterns up to 153.2° std deviation, far exceeding the 50° anomaly threshold. Pattern consistent with surveillance evasion maneuvers.

Port Detection Summary

🇺🇸

Norfolk

27

avg 0.764

🇺🇸

Philadelphia

2

avg 0.682

🇺🇸

Baltimore

1

avg 0.666

🇧🇸

Freeport

1

avg 0.950

Monthly Alert Log — All Months

Month	Detections	Severity	Score	Nearest Port	Alert Types
January 2024	1	MEDIUM	0.7218	Norfolk	POSITION_JUMP
March 2024	8	HIGH	0.8585	Norfolk	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
April 2024	11	CRITICAL	0.9500	Norfolk	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
May 2024	4	HIGH	0.7788	Norfolk	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
June 2024	20	HIGH	0.8744	Norfolk	ZIGZAG; POSITION_JUMP; SPEED_ANOMALY
July 2024	12	CRITICAL	0.9074	Wilmington NC	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
August 2024	15	HIGH	0.8782	Norfolk	SPEED_ANOMALY; POSITION_JUMP; ZIGZAG
September 2024	10	CRITICAL	0.9500	Norfolk	POSITION_JUMP; SPEED_ANOMALY; ZIGZAG
October 2024	11	HIGH	0.8795	Norfolk	SPEED_ANOMALY; POSITION_JUMP; ZIGZAG

Activity Map

Detection events plotted · Color-coded by alert type · Drag to pan · Scroll to zoom

● Speed Anomaly ● Position Jump ● Zigzag ● Dark Vessel ● Rendezvous

Threat Intelligence

Analytical confidence: HIGH · Multi-indicator assessment

Threat Indicators Matrix

Indicator	Status	Evidence	Confidence
AIS Blackout / Dark Vessel	NOT DETECTED	—	LOW
GPS Spoofing / Position Jump	CONFIRMED	10 jumps · max 1328.5km	CRITICAL
Velocity Fraud / Speed Anomaly	CONFIRMED	15 events · max 102.2 kn	CRITICAL
Evasion Navigation / Zigzag	CONFIRMED	6 events · max COG std 153.2°	HIGH
Ship-to-Ship Rendezvous	NOT DETECTED	—	LOW
Multi-Port Operations	CONFIRMED	4 unique ports	HIGH

Operational Profile

Primary AO

Norfolk and surrounding maritime zone

Active Period

9 months of continuous alert activity in 2024

Alert Density

92 detections across 31 individual events (avg 10.2/month)

Active Techniques

⚡ SPEED ⟳ ZIGZAG ⊕ POS JUMP

Threat Category

High-Confidence AIS Manipulation — Multiple confirmed evasion techniques

TTP Analysis

Tactics, Techniques & Procedures — Maritime ATT&CK Framework

MAR-T001

RTE-ANO-001

Velocity Fraud

AIS SOG field manipulation to broadcast impossible speeds up to 102.2 kn. Corrupts automated tracking algorithms and creates false movement vectors. Count: 15 events.

HIGH CONFIDENCE
15 events

MAR-T002

AIS-MAN-003

GPS Spoofing

GPS coordinate spoofing — AIS positions fabricated at impossible locations. Max jump: 1328.5km. Implies deliberate identity concealment. Count: 10 events.

HIGH CONFIDENCE
10 events

MAR-T003

RTE-ANO-005

Evasion Navigation

Erratic COG changes exceeding 50° threshold (max 153.2°). Consistent with surveillance evasion or at-anchor AIS manipulation. Count: 6 events.

HIGH CONFIDENCE
6 events

Risk Analysis

Composite risk scoring · Weighted indicator model · Quantus v2.4

Composite Score

0.9500

CRITICAL

Avg Detection Score

0.8665

Global Rank

#235

of 69,461 vessels

Weighted Indicator Scoring

Formula: (Dark×3) + (Rendezvous×4) + (PosJump×2) + (Speed×1) + (Zigzag×0.5) + (MaxScore×50)

Indicator	Count	Weight	Contribution
DARK_VESSEL	0	×3	0.0
RENDEZVOUS	0	×4	0.0
POSITION_JUMP	10	×2	20.0
SPEED_ANOMALY	15	×1	15.0
ZIGZAG	6	×0.5	3.0
MaxSingleScore	0.9500	×50	47.5
COMPOSITE TOTAL	Normalized [0,1]		0.9500 CRITICAL

⚡ Speed Anomaly Detections

Indicator: RTE-ANO-001 · 15 events · Max: 102.2 kn

AIS SOG FRAUD

Speed anomaly events are triggered when AIS Speed Over Ground (SOG) exceeds the 30-knot detection threshold. CHARMER reports speeds up to 102.2 kn — consistent with deliberate AIS SOG field manipulation to corrupt tracking algorithms.

Total Events

15

Max Reported SOG

102.2 kn

Indicator ID

RTE-ANO-001

Speed Anomaly Events (Top 50 by score)

Date	Max SOG (kn)	Score	Severity	Port	Coordinates

⊕ Position Jump Detections

Indicator: AIS-MAN-003 · 10 events · Max jump: 1,328 km

GPS SPOOFING

Position jumps confirm GPS coordinate spoofing — AIS positions fabricated at impossible locations. CHARMER has 10 confirmed position jumps with maximum displacement of 1,328 km.

Total Events

10

Max Jump Distance

1,328 km

Indicator ID

AIS-MAN-003

Position Jump Events (Top 50 by distance)

Date	Jump (km)	Implied Speed (kn)	Score	Severity	Spoofed-To Port	Coordinates

⟳ Zigzag / Erratic Navigation

Indicator: RTE-ANO-005 · 6 events · Max COG std: 153.2°

EVASION PATTERN

Zigzag events are triggered when course-over-ground (COG) standard deviation exceeds 50°. CHARMER records COG deviations up to 153.2° — consistent with surveillance evasion maneuvers or at-anchor AIS noise manipulation.

Total Events

6

Max COG Std Dev

153.2°

Threshold

50°

Zigzag Events (Top 50 by COG deviation)

Date	COG Std Dev (°)	Score	Severity	Port	Coordinates

Port History

4 distinct port areas · US primary flag state

Complete Port Detection Summary

Port	Country	Detections	Avg Score	Avg Dist NM	Risk
Norfolk	🇺🇸	27	0.7645	39.1	STANDARD
Philadelphia	🇺🇸	2	0.6824	119.6	STANDARD
Baltimore	🇺🇸	1	0.6656	103.7	STANDARD
Freeport	🇧🇸	1	0.9500	502.7	STANDARD

🇺🇸 Norfolk — Port Profile

27 detections · Avg score 0.7645 · Avg distance 39.1 NM

LOW RISK

Total Detections

27

Primary port of operation

Avg Alert Score

0.7645

Avg Distance NM

39.1

Port proximity zone

Detection Types at Norfolk

SPEED_ANOMALY

12

POSITION_JUMP

9

ZIGZAG

6

Coordinates: 36.847°N, 76.293°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

27 of 31 total detections (87.1%)

Avg Distance from Port

39.1 NM — consistent with port proximity operations

🇺🇸 Philadelphia — Port Profile

2 detections · Avg score 0.6824 · Avg distance 119.6 NM

LOW RISK

Total Detections

2

Secondary port

Avg Alert Score

0.6824

Avg Distance NM

119.6

Port proximity zone

Detection Types at Philadelphia

POSITION_JUMP

1

SPEED_ANOMALY

1

Coordinates: 39.952°N, 75.144°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

2 of 31 total detections (6.5%)

Avg Distance from Port

119.6 NM — consistent with port proximity operations

🇺🇸 Baltimore — Port Profile

1 detections · Avg score 0.6656 · Avg distance 103.7 NM

LOW RISK

Total Detections

1

Secondary port

Avg Alert Score

0.6656

Avg Distance NM

103.7

Port proximity zone

Detection Types at Baltimore

SPEED_ANOMALY

1

Coordinates: 39.290°N, 76.615°W

Port Intelligence Notes

Port Country

🇺🇸 US

Risk Classification

LOW — Standard port monitoring applies

Detection Share

1 of 31 total detections (3.2%)

Avg Distance from Port

103.7 NM — consistent with port proximity operations

🇧🇸 Freeport — Port Profile

1 detections · Avg score 0.9500 · Avg distance 502.7 NM

LOW RISK

Total Detections

1

Secondary port

Avg Alert Score

0.9500

Avg Distance NM

502.7

Possible spoofed coords

Detection Types at Freeport

SPEED_ANOMALY

1

Coordinates: 26.526°N, 78.700°W

Port Intelligence Notes

Port Country

🇧🇸 BS

Risk Classification

LOW — Standard port monitoring applies

Detection Share

1 of 31 total detections (3.2%)

Avg Distance from Port

502.7 NM — anomalously high, suggests spoofed coordinates

Ownership Intelligence

MMSI registry · Flag state analysis · Beneficial ownership investigation

Vessel Name

CHARMER

MMSI

338226781

Flag State (MMSI-derived)

🇺🇸 US

MID Code

338 → 🇺🇸 US

Primary Port

Norfolk

Detection Period

9 months (2024)

Registered Owner

Pending registry lookup

Beneficial Owner

Requires FinCEN CDD query

OFAC SDN Status

Pending cross-reference

Recommended Action

Physical inspection + full registry query

Vessel Type Analysis

AIS declared type · Physical capability vs. observed behavior

Type Mismatch Assessment

AIS Declared Type

vessel_type=37 (Pleasure Craft)

Behavior Consistency

Requires investigation

Speed Capability

Reported 102.2 kn — physically impossible for Type 37 (max ~45 kn high-performance)

Inspection Priority

HIGH — Recommend USCG/CBSA physical boarding and documentation review

Applicable Statutes

47 C.F.R. § 80.953 (AIS falsification) · 33 C.F.R. § 164.46 (AIS carriage) · 21 U.S.C. § 955 (maritime drug law)