Pandas Network

Active

The Pandas network operates fake maritime websites targeting several African flag states. The network is characterized by sites hosted on the same IP range and sharing similar design templates and registration patterns.

Infrastructure

Sites in this cluster share hosting at 195.201.78.211. Certificate history on crt.sh reveals rapid domain registration and short certificate lifespans consistent with fraud operations that expect to be taken down.

Targeting Pattern

The network focuses on African states with low-profile maritime administrations:

  • Benin — multiple fake versions of the Benin maritime authority
  • Zambia / Zimbabwe — landlocked states where legitimate registries are minimal
  • Mozambique — Indian Ocean access makes this a more plausible target

Attributed Sites (4)

Domain Status
beninmaritime.co Confirmed Fake
beninmaritime.net Confirmed Fake
beninmaritime.org Confirmed Fake
matthew-registry.org Confirmed Fake