Issue: April 2026
On 14 Nov 2024, Theia detected two crude oil tankers conducting a ship-to-ship transfer in the waters west of Malaysia.
Both vessels were operating as part of Iran's "shadow fleet", transferring crude oil, behavior consistent with sanctions-evasion risk. VERONICA III was publicly linked to the National Iranian Oil Company, while TASCA was later observed continuing the voyage following the transfer.
Satellite imagery captured both vessels side by side during the transfer operation. The Office of Foreign Assets Control (OFAC) subsequently sanctioned both vessels.
TASCA had been designated by OFAC on 02 May 2024 for its role in Iranian petroleum smuggling. VERONICA III was subsequently designated on 03 Dec 2024.
Following the transfer, TASCA transited through the Singapore Strait on 24 Dec 2024 before going dark. No AIS data was received from the vessel as it headed toward known transfer zones in the Eastern Outer Port Limits (EOPL).
Despite AIS blackout, Theia continued tracking TASCA through satellite imagery as the vessel continued operating without AIS transmissions being received in the South China Sea.
No AIS data was received from TASCA during this period, while satellite imagery documented progressive changes to the vessel's appearance. Tracking a vessel mid repaint is challenging, but Theia's recurrent satellite coverage enabled continued monitoring as the vessel's deck color changed over time.
Between Jan and Feb 2025, TASCA progressively repainted its deck from red to green while operating in the Eastern Offshore Port Limits.
Daily satellite passes (except during cloud cover) documented the progressive transformation, supporting continued identification of TASCA despite the visual alterations.
On 25 Feb 2025, three Chinese-built Shuiqiao Class barges, commonly known as "jack-up" barges, departed Guangzhou Shipyard at Longxue Island, China. They were not observed broadcasting AIS during the transit.
"Jack-up" barges are self-elevating platforms typically used for offshore construction, dredging, or military engineering operations. No AIS data was received from these vessels following their departure from a major Chinese shipyard, indicating unattributed vessel movement not visible through AIS-based tracking systems.
Theia detected these unattributed vessels at the shipyard through persistent satellite monitoring.
On 27 Feb 2025, Theia detected the barges approximately 35 km southeast of Zhanjiang, China. By 28 Feb 2025, all three were observed lining up near a beach on Nansan Island, China.
The barges used Bailey bridges to link with one another and connect onto the beach. This modular military bridging system enabled rapid creation of a temporary dock structure. The maneuver was repeated on at least two separate occasions.
SAR imagery obtained on 13 Mar 2025 confirmed the barges remained positioned on the beach with Bailey bridges linked, forming an operational artificial dock.
Theia first automatically detected these vessels, AIS dark, from medium resolution imagery. This initial detection enabled a tip-and-cue to high resolution SAR from partner UMBRA, which penetrated cloud cover to confirm the dock structure and track Bailey bridge deployment, revealing a temporary dock structure with potential military engineering relevance.
On 15 Mar 2025, the Panama-flagged bulk carrier OCEANA ROSE (IMO 9497464) departed Kuwait. The following day, AIS transmissions placed the vessel near Sohar, Oman, while Theia detected the vessel transiting toward Bandar Abbas, Iran.
From 16 Mar to 22 Apr 2025, OCEANA ROSE spoofed its AIS position. While AIS transmissions indicated the vessel was anchored near Sohar, Oman, Theia detected the vessel at Bandar Abbas, Iran, where its observed activity and draft change strongly suggested cargo loading.
Determining a vessel's true movements while spoofing is challenging. Theia's persistent satellite imagery located OCEANA ROSE at Bandar Abbas, Iran, identifying a discrepancy between AIS transmissions and satellite detections, with crew-entered draft data strongly suggesting cargo loading activity.
After the 37 day spoofing period ended on 22 Apr 2025, OCEANA ROSE made a brief stop near Fujairah, UAE before proceeding across the Indian Ocean to Ha Long Bay, Vietnam, arriving on 10 May 2025.
At Ha Long Bay, Theia captured the vessel transferring loose cargo to barges at sea rather than while alongside at port. The ship-to-ship barge transfer may have reduced the transparency typically associated with a conventional port discharge.
The entire operation from Kuwait departure to Vietnam unloading spanned 15 Mar to 12 May 2025. The vessel's route covered thousands of kilometers across the Persian Gulf, Arabian Sea, and South China Sea.
Satellite imagery from Theia tracked OCEANA ROSE throughout its transit and captured the barge unloading operation at Ha Long Bay, Vietnam.
The Barbados-flagged bulk carrier KIBA (IMO 9200445) broadcast its AIS position off the coast of the UAE for 21 days. Theia detected the vessel berthed at Asalouyeh Port, Iran, loading cargo prior to its later transit toward East Africa.
Theia captured KIBA port side at Asalouyeh, showing the AIS-position discrepancy. Imagery then confirmed the vessel heading east towards the Strait of Hormuz, concluding its three-week spoofing operation.
AIS broadcast: Oman coastline · Actual position: Asalouyeh Port, Iran (~200km offset)
Theia identified the vessel's position at Asalouyeh Port while AIS transmissions indicated a different location off the UAE coast.
KIBA exited through the Strait of Hormuz on 20 May 2025, briefly anchoring near Fujairah before departing the Gulf of Oman on 24 May 2025. Theia tracked the vessel as it transited towards Africa, proceeding down the Mozambique Channel.
KIBA arrived off Beira, Mozambique on 07 Jun 2025 and anchored outside the port for over three weeks before entering on 29 Jun 2025. The vessel departed on 08 Jul 2025 after discharging cargo, completing a voyage that began with loading activity in Iranian waters and ended in East Africa.
Theia tracked KIBA's 50-day voyage from the Persian Gulf to Mozambique, including the extended anchorage outside Beira, documenting vessel behavior consistent with sanctions-evasion risk across the entire transit.
Between 25-31 May 2025, the Cameroon-flagged LPG tanker FALCON (IMO: 9014432) was detected broadcasting AIS positions inconsistent with satellite detections, with AIS transmissions placing the vessel 50 km northeast of Tallinn, Estonia while imagery located it in Luga Bay, Ust-Luga Port, Russia.
Cloud cover obscured satellite visibility on 26 and 27 May. However, on 28 May 2025, Theia assessed FALCON as highly likely loading LPG at Ust-Luga Port based on available indicators and vessel positioning.
On 31 May 2025 at 09:43 UTC, satellite imagery captured FALCON departing Luga Bay, supporting the assessment that the vessel remained in Russian waters during the period of AIS discrepancy.
Following cargo operations, FALCON resumed legitimate AIS transmission at 21:18 UTC on 31 May. By 03 Jun 2025, the vessel had crossed the Great Belt Bridge, Denmark, broadcasting Turkey as its destination.
Despite cloud cover and active spoofing, Theia's persistent monitoring located FALCON at Luga Bay while AIS transmissions indicated a position in international waters near Estonia.
On 07 Jul 2025, Houthi militia targeted the Liberia-flagged bulk carrier ETERNITY C (IMO: 9588249) while transiting the Red Sea.
From 30 Jun to 06 Jul 2025, ETERNITY C was docked at Berbera Port, Somalia, where observed port activity suggested cargo operations. The vessel then departed and entered the Red Sea running dark.
08 Jul: Theia captured ETERNITY C drifting with small vessels departing. 09 Jul: Vessel confirmed sunk, only oil slick visible.
ETERNITY C became the 4th vessel to be sunk by the Houthis during the ongoing Red Sea crisis, showing that the absence of AIS transmissions did not prevent the vessel from being located during the incident sequence.
Despite the vessel running dark, Theia tracked ETERNITY C through satellite imagery, documenting the complete attack sequence from cargo loading to the final oil slick confirming the sinking.
On 19 Jul 2025, the Russian-flagged bulk carrier (IMO: 9574195) ceased AIS transmission after returning to the Black Sea. Theia begins tracking its movements through occupied Crimean waters.
Panel 1: Black Sea Operations. MATROS SHEVCHENKO was repeatedly detected anchored in Feodosia Bay until 21 Aug. Between 17-19 Aug, imagery confirmed the vessel berthed at Feodosia Port loading cargo. It then transited along the Crimean coast, anchoring near Yalta, Laspinskaya Bay, and Sevastopol, where it was observed berthed on 09 Sep 2025.
Panel 2: Mediterranean Transit. On 11 Sep 2025, AIS transmissions were again received from the vessel near Sevastopol as it began its southward transit. After crossing the Bosphorus Strait, it docked at El Dekheila, Egypt between 16-17 Sep 2025.
Imagery ingested by Theia tracked the vessel throughout its 54-day dark period across multiple anchorages in occupied Crimea. Draft analysis strongly suggested loading, documenting the transit during a 54-day period in which no AIS data was received.
28 Jul to 17 Aug 2025 — China's first autonomous drone mothership conducts systematic transit through disputed Spratly Islands, visiting multiple contested reef complexes under overlapping territorial claims.
The ZHU HAI YUN (IMO 9947055), an 88-meter vessel described as the "world's first intelligent unmanned system mothership," was detected and tracked by Theia as it surveyed contested features in the South China Sea.
The vessel's route included Irving Reef (29-31 Jul); Subi Reef (31 Jul to 03 Aug), where China has constructed artificial islands; Mischief Reef (05-08 Aug), featuring a 3,000-meter runway; and Fiery Cross Reef (10-16 Aug). All locations remain subject to overlapping claims by China, the Philippines, Taiwan, and Vietnam.
Theia tracks tens of thousands of vessels daily, analyzing more than 27 million km² of satellite imagery. This capability enabled comprehensive tracking of ZHU HAI YUN's systematic survey pattern across contested maritime regions.
Between 29 Aug and 05 Sep 2025, the OFAC-sanctioned LNG tanker ARCTIC VOSTOK (IMO 9216298) conducted a ship-to-ship LNG transfer with the floating storage unit KORYAK FSU (IMO 9915105) off Kamchatka, Russia.
The KORYAK FSU serves as Russia's floating LNG storage facility in the Sea of Okhotsk. ARCTIC VOSTOK, operated by sanctioned Sovcomflot, received a full cargo of liquefied natural gas during the week-long STS operation, a notable node in maritime activity commonly associated with sanctions-evasion risk.
29 Aug 2025 • 53.27°N, 159.84°E · Ship-to-Ship LNG loading from KORYAK FSU, with crew-input draft data strongly suggesting cargo loading
Satellite imagery captured the STS transfer operation off Kamchatka, Russia, identifying both vessels alongside each other during the cargo loading sequence.
After loading from KORYAK FSU, ARCTIC VOSTOK transited south through the Sea of Okhotsk, passing west of Japan before arriving in the Gulf of Tonkin on 16 Sep 2025.
The vessel exhibited an erratic holding pattern in the South China Sea, first anchoring south of Hainan Island, China (20-25 Sep), then shifting to the Vietnamese coast (26-27 Sep). This behavior is consistent with a holding pattern prior to discharge.
On 28 Sep 2025, ARCTIC VOSTOK docked at Beihai LNG Terminal, China, remaining through 30 Sep. This marked the 7th LNG tanker to unload at Beihai in 2025.
28-30 Sep 2025 • 21.45°N, 109.10°E · Discharge at Beihai LNG Terminal, with crew-input draft data strongly suggesting cargo discharge
Satellite imagery tracked the complete transit from Kamchatka, Russia to Beihai, China, documenting the vessel's transit from Kamchatka to Beihai LNG Terminal.
Continuing from May's coverage, between 25 Sep and 02 Oct 2025, the Cameroon-flagged LPG tanker FALCON (IMO 9014432) transmitted AIS positions indicating a transit through the Persian Gulf toward Khor Al Zubair Port, Iraq, while satellite detections placed the vessel alongside at Asaluyeh Port, Iran on 25 Sep. These transmissions were therefore inconsistent with the vessel's observed location.
Following the port call at Asaluyeh, the vessel transited east where it was identified alongside an unidentified vessel south-east of Bandar Abbas on 30 Sep.
AIS transmissions resumed alignment with observed vessel movement on 02 Oct, after which FALCON loitered in the Gulf of Oman until 13 Oct, when it began transiting south toward the Red Sea.
25 Sep 2025 · AIS transmissions indicated transit toward Iraq, while satellite imagery placed FALCON alongside at Asaluyeh Port, Iran.
At 0945 UTC on 18 Oct 2025, the United Kingdom Maritime Trade Operations (UKMTO) issued a report describing an explosion onboard FALCON while the vessel was located east of Aden. As of 20 Oct, no AIS data has been received from the vessel, and satellite monitoring indicates the vessel is drifting in the Gulf of Aden.
Theia's persistent satellite monitoring documented FALCON's movements across the Persian Gulf and Gulf of Aden, identifying AIS position discrepancies during the vessel's port call at Asaluyeh, Iran. This is Part 2 of FALCON's 2025 activity, following the AIS spoofing documented during operations in the Baltic and Russian waters in May.
On 23 Jul 2025, the Iranian-flagged tanker DUNE (IMO: 9569712) was detected loading at Iran's Jask terminal during a period in which no AIS data was received. This was only the second recorded load from this facility since it opened in 2021.
Jask was developed as an export route outside the Strait of Hormuz but has remained largely inactive. Satellite imagery confirmed DUNE loading at the single buoy-mooring while AIS-dark. Crew-input draft data showed a significant increase post-loading.
Theia detected DUNE loading at Jask while AIS-dark. Analysts assessed the vessel's likely transit path across the Indian Ocean based on loading and discharge points. Crew-input draft data corroborated the dark loading operation.
Following loading at Jask, DUNE transited southeast across the Indian Ocean. The vessel briefly transmitted AIS between 15-18 Aug 2025 before going dark again, anchoring in the South China Sea to await its rendezvous.
On 23 Sep 2025, satellite imagery captured DUNE (IMO: 9569712) conducting a ship-to-ship transfer with STELLAR ORACLE (IMO: 9194127), a vessel broadcasting the identity "KSECOND" using the IMO of scrapped tanker EM LONGEVITY.
Between 23-26 Sep 2025, multiple imagery captures confirmed cargo handoff at 104.74°E, 2.02°N. DUNE's draft data showed significant decrease, strongly suggesting discharge to STELLAR ORACLE.
Satellite imagery captured the STS transfer on multiple dates, documenting the cargo handoff and documenting STELLAR ORACLE broadcasting the identity of scrapped vessel EM LONGEVITY during the operation.
KSECOND's real identity is STELLAR ORACLE (IMO: 9194127). The vessel was using the IMO of EM LONGEVITY, a tanker scrapped in 2021, while broadcasting the identity of scrapped vessel EM LONGEVITY during its transit.
After receiving Iranian crude from DUNE, the now-laden STELLAR ORACLE headed north via the South China Sea toward Chinese waters. On 04 Oct 2025, the vessel turned AIS off near Taiwan.
On 04 Oct 2025 near Taiwan (122.12°E, 22.45°N), AIS went dark for ~20 minutes. The vessel reappeared 6km north broadcasting as "SINCON", still using EM LONGEVITY's scrapped IMO to mask its true identity.
Imagery analysis indicated with high confidence that STELLAR ORACLE, KSECOND, and SINCON were the same vessel, documenting repeated identity irregularities during a voyage involving cargo loaded in Iranian waters and later transiting toward Chinese waters.
On 10 Dec 2025, the United States interdicted and seized the tanker SKIPPER, following a month-long investigation into vessel activity involving AIS discrepancies, loading at Jose Terminal, Venezuela, and offshore cargo transfers.
Between 14-18 Nov 2025, SKIPPER was detected loading at Jose Terminal, Venezuela while spoofing AIS. The vessel anchored nearby until 04 Dec 2025 before heading toward Curaçao.
On 07 Dec 2025, ~20km south of Curaçao, SKIPPER conducted STS with NEPTUNE 6 (IMO: 9198666). Theia captured the transfer between 15:09-22:50 UTC. NEPTUNE 6 had loaded at Jose on 03 Dec 2025.
Following the US seizure, SKIPPER transited to the Gulf of Mexico. The vessel has been sitting at anchor approximately 80km south of Galveston, Texas since 21 Dec 2025.
Theia's satellite imagery documented loading at Jose, the STS south of Curaçao, and SKIPPER's subsequent movements, providing supporting intelligence for the investigation. NEPTUNE 6 was last detected transiting toward Cuba via Windward Passage.
Written & VisualizedVivek Patil, Annalisa Branchini, Kris Martin & Rob Gardner
EditedAndrew Brettell, Charles Cormack, Charles Denniston & Matthew Connolly
AnalysisTheia Intelligence Team
PlatformSynMax Theia, 2026
© 2026 SynMax Intelligence