Aisino Corporation — 2 prefixes (MA-L)

A MAC address starting with 40:95:58 or 40:98:7B belongs to Aisino Corporation (航天信息股份有限公司), a Beijing-headquartered company publicly traded on the Shanghai Stock Exchange (SSE: 600271). Aisino's networked hardware is most often a tax-control terminal or point-of-sale device built for China's mandatory VAT "Golden Tax" invoicing system, so a device carrying this prefix is far more likely to be enterprise or government compliance equipment than a consumer product.

The company holds two IEEE MA-L (/24) OUI blocks, both registered to "Aisino Corporation" at the same Beijing address — No. 18(A), Xingshikou Road, Haidian District, Beijing, CN 100195. That address is an exact match, down to the postal code, to Aisino's independently reported real headquarters. Neither prefix is a slice of a shared IEEE-administered base; each is its own individually assigned block, and no additional Aisino rows exist in the MA-M or MA-S registries.

Beyond tax terminals, Aisino's product lines include smart-card and information-security systems, plus government, public-safety, transportation, and IoT hardware. Business-data aggregators describe Aisino as a state-owned enterprise under China Aerospace Science and Industry Corporation, incorporated in 2000 and listed in 2003 — a characterization not independently confirmed against a primary regulatory filing.

Aisino's mandatory tax software has twice been the vector for a documented supply-chain backdoor. In 2020, Trustwave SpiderLabs found the company's "Intelligent Tax" software silently installing GoldenSpy (MITRE ATT&CK S0493) with system-level persistence; Trustwave said it could not determine whether Aisino knowingly participated. An earlier backdoor, GoldenHelper (2018-2019), appeared in a related Golden Tax package whose malicious binaries were signed by NouNou Technologies, an Aisino subsidiary. No CVE identifier is recorded for either as of an August 2026 NVD search.

Company

Aisino Corporation (航天信息股份有限公司); publicly traded on the Shanghai Stock Exchange (SSE: 600271) [Confirmed] — finance.yahoo.com/quote/600271.SS, aisino.com

IEEE assignment

2 prefixes → Aisino Corporation, registered Beijing, CN [Confirmed] — the IEEE MA-L registry 409558, the IEEE MA-L registry 40987B

Registry / block size

MA-L (24-bit OUI) x2: 40:95:58, 40:98:7B — individually assigned, not a shared IEEE base; zero additional Aisino rows found in MA-M or MA-S [Confirmed] — the IEEE MA-L registry 409558, the IEEE MA-L registry 40987B, the IEEE MA-M registry, the IEEE MA-S registry

HQ / address

No. 18(A), Xingshikou Road, Haidian District, Beijing, CN 100195 (the 40:95:58 registration omits "Haidian District" but is otherwise the same address); exact match down to postal code to the company's independently reported real HQ

[Confirmed] — the IEEE MA-L registry 40987B, datanyze.com/companies/aisino/6808056

Company status

active; publicly traded (SSE: 600271) [Confirmed] — finance.yahoo.com/quote/600271.SS

Ownership / history

reported by business-data aggregators as a state-owned enterprise under China Aerospace Science and Industry Corporation (CASIC), incorporated 2000, listed 2003-07-11; not independently confirmed against a primary regulatory filing

[Likely] — simplywall.st/stocks/cn/software/shse-600271, businessabc.net/wiki/aisino

Device types

tax-control terminals ("Golden Tax Disk"/金税盘, Tax UKey), POS/financial terminals, smart-card and information-security products, government/public-safety/transportation/IoT hardware [Confirmed] — aisino.com/eng/product_list.asp?art=395

Notable products

Golden Tax invoicing and tax-control equipment (mandatory Chinese VAT compliance hardware) [Confirmed] — zhuanlan.zhihu.com/p/526277625, aisino.com/eng/product_list.asp?art=395

Verified sample prefixes (both MA-L, Aisino Corporation)

40:95:58, 40:98:7B [Confirmed] — the IEEE MA-L registry 409558, the IEEE MA-L registry 40987B

Security incident (GoldenSpy)

mandatory "Intelligent Tax" software found in 2020 silently installing a system-level backdoor (MITRE ATT&CK S0493); Trustwave stated it could not determine whether Aisino knowingly participated [Confirmed] — levelblue.com (SpiderLabs blog), bleepingcomputer.com, attack.mitre.org/software/S0493

Security incident (GoldenHelper)

earlier backdoor (active 2018-01 to 2019-07 per Trustwave) found in a related Golden Tax package; malicious binaries signed by NouNou Technologies, an Aisino subsidiary [Confirmed] — bleepingcomputer.com, levelblue.com

CVE status

no CVE identifier recorded for GoldenSpy or GoldenHelper as of an August 2026 search of NVD [Unknown] — nvd.nist.gov/vuln

Website

https://www.aisino.com — identity corroborated via independent aggregators (Datanyze, ZoomInfo); direct requests to the site itself returned no usable content (empty response / HTTP 405) as of an August 2026 check, so the vendor's own site text was not read directly

[Likely] — datanyze.com/companies/aisino/6808056, zoominfo.com/c/aisino-co-ltd/6808056

Special note

IEEE's public the IEEE MA-L registry carries no assignment/registration-date column; maclookup.app's third-party "registered" dates (2010-01-05 for 40:95:58, 2010-11-24 for 40:98:7B) are database artifacts, not IEEE facts [Confirmed] — maclookup.app/vendors/aisino-corporation

Related vendors

NouNou Technologies (Aisino subsidiary; its certificate signed the GoldenHelper-carrying binaries) [Confirmed] — bleepingcomputer.com

Analyst note

A 40:95:58 or 40:98:7B MAC identifies genuine Aisino hardware — most likely a tax-control, POS, or financial terminal deployed under China's mandatory Golden Tax system, not consumer equipment. Because Aisino's tax software has twice been the vector for a supply-chain backdoor, treat a networked Aisino terminal with the same scrutiny as other embedded compliance/IoT hardware; attribution of intent to Aisino itself for either incident remains unresolved per the original researchers.

[Confirmed] — synthesized from the IEEE MA-L registry and the GoldenSpy/GoldenHelper sources above