Ragentek Technology Group — 3 prefixes (MA-L)
Summary
- // what this is
- Ragentek Technology Group is registered to MAC prefix
28:FB:D3and 2 more in the IEEE OUI database. When a device's MAC address begins with28:FB:D3, that block was registered by Ragentek Technology Group — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Three OUI registrations under one company name plus a named commercial hardware deal indicate an active ODM, not a shell registrant. The firmware security history (CVE-2016-6564) is a supply-chain/software finding tied to Ragentek-built OTA update code bundled across partner-brand phones, not to any single OUI block.
About this vendor.
A MAC address beginning 28:FB:D3, 88:A7:3C, or C0:85:4C belongs to Ragentek Technology Group, a Shanghai-based original design manufacturer (ODM), typically seen on Android smartphones it designs and builds for partner brands. All three /24 blocks are registered to the identical company name and Pudong, Shanghai postal address, confirming one corporate registrant rather than three unrelated firms that happen to share a name.
Ragentek is not a bare single-OUI shell registration. It holds three separate MA-L blocks under this exact name, and it is named directly in a March 2017 MicroVision Inc. investor press release as the manufacturer of the "VOGA V" phone built around a MicroVision pico-projector display engine — a named, on-the-record commercial deal that corroborates active hardware production rather than a paper entity.
The company's OTA (over-the-air) update mechanism was the subject of a well-documented 2016 security disclosure. A privileged update binary reportedly ran as root and communicated over unencrypted HTTP, letting a network-path attacker push arbitrary commands or exfiltrate device identifiers. The issue was assigned CVE-2016-6564 and CERT/CC advisory VU#624539, and independent reporting put the exposure at roughly 2.8 million devices across about 55 phone models sold under brands including BLU, Infinix, DOOGEE, LEAGOO, IKU, Beeline, and XOLO.
A fourth, textually distinct registrant — "HONGKONG RAGENTEK COMMUNICATION TECHNOLOGY CO.,LIMITED" (BC:B3:08) — shares the same Shanghai building address but is a separate legal name. No source confirms it is the same corporate entity as Ragentek Technology Group, so its prefix is flagged for awareness only and not folded into this entry's set.
- Company
- Ragentek Technology Group, Shanghai-based Android ODM [Confirmed] (the IEEE MA-L registry)
- Device class
- Android smartphones, ODM-built for partner brands [Likely] (MicroVision investor press release; BitSight security research)
- Also seen on
- phones branded BLU, Infinix, DOOGEE, LEAGOO, IKU, Beeline, XOLO per the 2016 firmware disclosure [Confirmed] (CERT/CC VU#624539; NVD CVE-2016-6564)
- Registered prefixes
- 28:FB:D3, 88:A7:3C, C0:85:4C [Confirmed] (the IEEE MA-L registry)
- Related but distinct entity
- BC:B3:08 registers to "HONGKONG RAGENTEK COMMUNICATION TECHNOLOGY CO.,LIMITED", same building address, not included in this vendor's prefix set [Likely] (the IEEE MA-L registry)
- IEEE assignment
- 3 prefixes → Ragentek Technology Group, registered Pudong District, Shanghai, CN [Confirmed] — the IEEE MA-L registry (assignment keys 28FBD3, 88A73C, C0854C)
- Registry / block size
- MA-L (24-bit OUI); 3 confirmed blocks under this exact registrant name [Confirmed] — the IEEE MA-L registry
- HQ / country
- D10/D11, No.3188 Xiupu Road, Pudong District, Shanghai, CN 201315/201703 (address varies slightly by registration) [Confirmed] — the IEEE MA-L registry
- Company status
- active; ODM named in a 2017 commercial hardware partnership [Likely] — ir.microvision.com press release
- Device types
- Android smartphones, ODM-built for partner brands [Likely] — ir.microvision.com; bitsight.com
- Notable products
- "VOGA V" smartphone (MicroVision pico-projector partnership) [Confirmed] — ir.microvision.com
- Verified sample prefixes
- 28:FB:D3, 88:A7:3C, C0:85:4C [Confirmed] — the IEEE MA-L registry
- Security history
- CVE-2016-6564 / CERT VU#624539, unencrypted-OTA root command execution, ~2.8M devices across ~55 models [Confirmed] — nvd.nist.gov, kb.cert.org
- Related entity (not included in this vendor)
- BC:B3:08 → HONGKONG RAGENTEK COMMUNICATION TECHNOLOGY CO.,LIMITED, same building address [Likely] — the IEEE MA-L registry
- Registration date
- Unknown — IEEE publishes no assignment date for MA-L registrations [Unknown] — the IEEE MA-L registry
- Own-site corroboration
- english.ragentek.com did not resolve at research time; company background relies on search-result excerpts and the MicroVision press release rather than a direct primary-source fetch [Unknown] — n/a