whois.handle: LVLT-ORG-4-8
whois.name: Level 3 Parent, LLC
whois.cidrs: 4.0.0.0/9
whois.created: 1992-12-01T00:00:00.000000
whois.updated: 2019-07-17T00:00:00.000000
whois.allocation_type: ALLOCATION
whois.handle: LPL-141
whois.name: Level 3 Parent, LLC
whois.street: 100 CenturyLink Drive
whois.city: Monroe
whois.state: LA
whois.postal_code: 71203
whois.country: US
whois.handle: LAC56-ARIN
whois.name: L3 Abuse Contact
whois.email: abuse@level3.com
whois.handle: APL7-ARIN
whois.name: ADMIN POC LVLT
whois.email: ipadmin@centurylink.com
whois.handle: APL7-ARIN
whois.name: ADMIN POC LVLT
whois.email: ipadmin@centurylink.com
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T18:53:13.779312
services.banner: HTTP/1.1 200 OK
  Date:  <REDACTED>
  Content-Type: text/html; charset=UTF-8
  Transfer-Encoding: chunked
  Connection: keep-alive
  X-FRAME-OPTIONS: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;
  Strict-Transport-Security: max-age=31536000
  Set-Cookie: PHPSESSID=c1e78df59972269585461d1ca1aaced8; path=/; HttpOnly; SameSite=Strict; secure; HttpOnly
  Expires: Thu, 19 Nov 1981 08:52:00 GMT
  Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
  Pragma: no-cache
  Allow: GET, HEAD, POST, PUT, DELETE, OPTIONS
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
services.ja4s: t120300_c014_bec8bdbaef8a
services.version: TLSv1_2
services.ja4s: t120300_c014_bec8bdbaef8a
services.version: TLSv1_1
services.ja4s: t110200_c014_344b4dce5a52
services.names: 47e338aa9793cc1ee94f8ee1c27311b0c8609814355d7453de397e14064422c4
services.issuer_dn: C=US, ST=CA, L=Santa Clara, O=Palo Alto Networks, OU=Support, CN=localhost, emailAddress=support@paloaltonetworks.com
services.common_name: localhost
services.country: US
services.locality: Santa Clara
services.province: CA
services.organization: Palo Alto Networks
services.organizational_unit: Support
services.email_address: support@paloaltonetworks.com
services.subject_dn: C=US, ST=CA, L=Santa Clara, O=Palo Alto Networks, CN=47e338aa9793cc1ee94f8ee1c27311b0c8609814355d7453de397e14064422c4, emailAddress=support@paloaltonetworks.com
services.common_name: 47e338aa9793cc1ee94f8ee1c27311b0c8609814355d7453de397e14064422c4
services.country: US
services.locality: Santa Clara
services.province: CA
services.organization: Palo Alto Networks
services.email_address: support@paloaltonetworks.com
services.scan_time: 2025-07-27T05:14:06.155165
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: PHP
services.product: PHP
services.cpe: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: h
services.vendor: Palo Alto Networks
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Palo Alto Networks
services.product: PAN-OS
services.cpe: cpe:2.3:o:paloaltonetworks:pan\-os:*:*:*:*:*:*:*:*
services.value: login-page
services.value: bootstrap
services.value: jquery
services.value: lodash
services.path: /php/login.php
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T18:53:13.779312
services.uri: https://4.1.158.14/php/login.php
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Transfer-Encoding
services.headers: chunked
services.key: Strict-Transport-Security
services.headers: max-age=31536000
services.key: Allow
services.headers: GET, HEAD, POST, PUT, DELETE, OPTIONS
services.key: Connection
services.headers: keep-alive
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Pragma
services.headers: no-cache
services.key: Date
services.headers: <REDACTED>
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Expires
services.headers: Thu, 19 Nov 1981 08:52:00 GMT
services.key: Cache-Control
services.headers: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
services.key: Content-Security-Policy
services.headers: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;
services.key: X-FRAME-OPTIONS
services.headers: SAMEORIGIN
services.key: Set-Cookie
services.headers: PHPSESSID=c1e78df59972269585461d1ca1aaced8; path=/; HttpOnly; SameSite=Strict; secure; HttpOnly
services.html_tags: <TITLE>Login</TITLE> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=.85"> <meta http-equiv="refresh" content="900">
services.body: <!DOCTYPE html>
  
  <html lang="en">
  <head>
      <meta charset="utf-8">
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta name="viewport" content="width=device-width, initial-scale=.85">
      <meta http-equiv="refresh" content="900">
      <script type="text/javascript">
          window.Pan = window.Pan || {}; window.Pan.st = { st: {}}; window.Pan.st.st.st0 = "4794K8778443725P4SBYB24662FN42Y1PZ7D9ATH";    </script>
      <base href="/">
  <!--[if IE]>
      <script type="text/javascript">
          (function() {
              var baseTag = document.getElementsByTagName('base')[0];
              if (!(/^http/i).test(baseTag.href)) { // in case browser already translate to absolute path
                  baseTag.href = location.protocol + '//' +  location.host +  baseTag.href;
              }
              baseTag.href = baseTag.href; // IE9 not correctly loading resources issue.
          })();
      </script>
  <![endif]-->
      <TITLE>Login</TITLE>
      <!-- FIXME: need to use Page::includeStaticResource -->
      <link rel="shortcut icon" type="image/x-icon" href="/login/images/favicon.ico">
      <link rel="stylesheet" href="login/css/bootstrap.min.css">
  
      <!-- IE10 viewport hack for Surface/desktop Windows 8 bug -->
      <link rel="stylesheet" href="login/css/ie10-viewport-bug-workaround.css">
      <link rel="stylesheet" href="login/css/login-admin.css">
  
      <!--[if lt IE 9]>
      <script src="login/js/html5shiv.min.js"></script>
      <script src="login/js/respond.min.js"></script>
      <![endif]-->
  
      <script src="login/js/jquery.min.js"></script>
      <script src="login/js/bootstrap.min.js"></script>
  
      <!-- IE10 viewport hack for Surface/desktop Windows 8 bug -->
      <script src="login/js/ie10-viewport-bug-workaround.js"></script>
  
  </head>
  
    <body>
      <div class="loginscreen_logo">
        <img src="/login/images/logo-pan-48525a.svg" alt="">
        <div id="formdiv">
          <!-- BEGIN PAN_FORM_CONTENT -->
  <!--suppress HtmlUnknownAttribute -->
  <form name="login" id="login_form" method="post" autocomplete="off">
  <!-- hidden variables, we are going to set this to the session, bug fix 2157 -->
  <input type="hidden" name="prot" value=""/>
  <input type="hidden" name="server" value=""/>
  
  <input type="hidden" name="authType" value="init"/>
  <input type="hidden" name="challengeCookie" value=""/>
  <input type="hidden" name="_csrf" value="4794K8778443725P4SBYB24662FN42Y1PZ7D9ATH" />
  
  <div id="taLogin" >
  <script src='js/lib/lodash.js?__version=1629775668'></script>
  <script src='js/lib/global-store.js?__version=1629775668'></script>
  <script src='js/lib/type-plus.js?__version=1629775669'></script>
  <script src='js/lib/pan-json.js?__version=1629775668'></script>
  <script src='js/lib/pan-logging.js?__version=1629775672'></script>
  <script src='js/lib/pan-module-injection.js?__version=1629775669'></script>
  <script src='js/lib/pan-environment.js?__version=1629775669'></script>
  <script src='js/lib/pan-extjs3.js?__version=1629775671'></script>
  <script src='js/lib/pan-xml.js?__version=1629775668'></script>
  <script src='js/lib/panos-base-utils.js?__version=1629775688'></script>
  <script src='js/lib/panos-login.js?__version=1629775688'></script>
  <script src='js/pan/ext/util.js?__version=1629775605'></script>
  <script src='js/pan/base/util.js?__version=1629775605'></script>
  <script src='js/pan/base/msg.js?__version=1629775605'></script>
  <script src='js/pan/base.js?__version=1629775605'></script>
  <script src='js/pan/base/cookie.js?__version=1629775605'></script>
  <script src='js/pan/test/QaAutomation.js?__version=1629775605'></script>
  <script type="text/javascript">
  var cacUserName = "";
  // initialize upon load to let all browsers establish content objects
  function initDHTMLAPI() {
      if (document.images) {
          window.isIE6CSS = (document.compatMode && document.compatMode.indexOf("CSS1") >= 0) ? true : false;
      }
      if(Ext.isIE){
          if (new RegExp(/msie ([0-9]{1,})/i).exec(navigator.userAgent) != null) {
              var rv = parseFloat( RegExp.$1 ); // ie version
              if (rv > 9) {
                  // 10 and above
                  Pan.base.cookie.set('isAboveIE10',rv);
              }
          }
      } else if (new RegExp(/trident/i).exec(navigator.userAgent) != null) {
          Pan.base.cookie.set('isAboveIE10','10'); // 11 and above always treat it as 10. Ext.isIE failed here
      }
  }
  
  // Return the available content width space in browser window
  
  function getInsideWindowWidth() {
      if (window.innerWidth) {
          return window.innerWidth;
      } else if (isIE6CSS) {
          // measure the html elements clientWidth
          return document.body.parentElement.clientWidth;
      } else if (document.body && document.body.clientWidth) {
          return document.body.clientWidth;
      }
      return 0;
  }
  
  // Return the available content height space in browser window
  function getInsideWindowHeight() {
      if (window.innerHeight) {
          return window.innerHeight;
      } else if (isIE6CSS) {
          // measure the html elements clientHeight
          return document.body.parentElement.clientHeight;
      } else if (document.body && document.body.clientHeight) {
          return document.body.clientHeight;
      }
      return 0;
  }
  
  function hideElement() {
      for (var i=0; i < arguments.length; i++) {
          var dv  = document.getElementById(arguments[i]);
          if(dv) {
              dv.style.display = "none";
          }
      }
  }
  
  function showWait(show){
      if(show){
          hideElement("trInitName", "trInitPwd", "trLoginBtn", 'trInitLocale');
          var dv = document.getElementById("wdiv");
          if(dv) dv.style.display="block";
      }
  }
  
  function get_url_param( name )
  {
      name = name.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");
      var regexS = "[\\?&]"+name+"=([^&#]*)";
      var regex = new RegExp( regexS );
      var results = regex.exec( window.location.href );
      if( results == null )
          return "";
      else
          return results[1];
  }
  
  //
  function loadPage() {
  
      initDHTMLAPI();
  
      var errMsg = "";
      if (0) {
          var issuesMsg = "<li>&lt;pre&gt;&lt;/pre&gt;";
          errMsg = issuesMsg;
      } else if (0) {
          var upgradeLogMsg = "<li>";
          errMsg = upgradeLogMsg;
      }
  
      var thisForm = document.getElementById("login_form");
  
      var respStatus = "Success";
      var redirectUrl = "";
      var showSaml = false;
      if (!showSaml) {
          hideElement('trSSO');
      }
      if (respStatus == "Warning") {
          var msg = "";
          alert(msg.replace(/&#039;/g, "'"));
          showWait(true);
          Pan.base.cookie.set("isFromLogin", "true", 1);
          window.location.href = redirectUrl;
      } else if (respStatus == "Error") {
          if (errMsg != "")
              errMsg += "<br><br>";
  
          errMsg += "<li>";
      } else if (respStatus == "Success") {
          if ("yes" == "yes") {
              if ("yes" == "no") {
                  // no password needed
                  if (!cacUserName) {
                      // if password is not needed and there is no user name it means cac check failed or something
                      errMsg += "<li>Insufficient credentials.";
  
                      // don't show any username/password fields and login button
                      hideElement("trInitName", "trInitPwd", "trLoginBtn", 'trInitLocale');
                  } else {
                      thisForm.user.value = cacUserName;
  
  
                      // fill the authType field with "cacOnly" so that when we submit the form we know what to do
                      // at the back end
                      thisForm.authType.value = "cacOnly";
  
                      /* KK Test - for now it looks like this automatic submit is not working. Show
                       * the submit button for now. When we uncomment this we should move it to after
                       * showing/hiding the buttons below
                       // fill in stuff as if submit was clicked
                       submitClicked();
  
                       // then submit the form
                       thisForm.submit();
                       //document.getElementById("trLoginBtn").onclick();
                       */
  
                      // hide some of the fields in the form
                      hideElement("trInitName", "trInitPwd");
                      // showing the login button for now
                      //document.getElementById("trLoginBtn").style.display = "none";
                      document.getElementById("trLoginBtn").style.display = "block";
  
                      // show the creating user session message
                      document.getElementById("wdiv").style.display = "block";
                      document.getElementById("wdiv").innerHTML = "Click the login button to login as" + ' ' + cacUserName;
                  }
  
              } else {
                  // password needed, just go on to show the page
  
                  // fill the userName field
                  thisForm.user.value = cacUserName;
              }
          } else {
              // everything ok, just redirect to next page
              var expMsg = "";
              if (expMsg != "" ) {
                  alert(expMsg);
                  //document.getElementById("wdiv").innerHTML = "<span style=\"color:#166D7D\">" + expMsg + "</span><br>" + document.getElementById("wdiv").innerHTML ;
              }
              showWait(true);
              Pan.base.cookie.set("isFromLogin", "true", 1);
              window.location.href = redirectUrl;
          }
      } else if (respStatus == "Challenge") {
          // hide the init name/pwd row and show the challenge msg/pwd row
          hideElement("trInitName", "trInitPwd");
          document.getElementById("trChallengeMsg").style.display = "";
          document.getElementById("trChallengePwd").style.display = "";
  
          // fill the challenge msg field
          document.getElementById('spChallengeMsg').innerHTML = "";
  
          // fill the authType and challengeCookie field
          thisForm.authType.value = "challenge";
          thisForm.challengeCookie.value = "";
  
          // also fill the user field with the previously entered user name
          thisForm.user.value = user;
  
      }
      // respStatus can also be "" when we come to this page the first time
  
      if (errMsg != "") {
          var divObj = document.getElementById("dError");
  
          divObj.style.display = "block";
          divObj.innerHTML = errMsg;
      }
  
      if (document.login.user.value == '') {
          var nameRow = document.getElementById('trInitName');
          if (nameRow && nameRow.style.display != "none") {
              // use this to check if this field is visible
              document.login.user.focus();
          }
      }
  }
  
  function submitClicked() {
      var thisForm = document.getElementById("login_form");
      // hide the error div, just incase it was showing.
      var divObj = document.getElementById("dError");
  
      divObj.style.display = "none";
      divObj.innerHTML = "";
  
      // fill the hidden fields for prot and server, bug fix 2157
      var prot = window.location.protocol;
      var server = window.location.host;
      //alert("prot: " + prot + ", server: " + server);
      thisForm.prot.value = prot;
      thisForm.server.value = server;
  }
  
  function submitSamlClicked() {
      var thisForm = document.getElementById("login_saml_form");
      thisForm.submit();
      return true;
  }
  
  function checkCapsLock(e){
      var el = document.getElementById('divcl');
      if (!el) return;
  
      var keycode = e.keyCode? e.keyCode : e.which;
      var shift = e.shiftKey? e.shiftKey : !!(keycode == 16);
  
      if((keycode >= 65 && keycode <= 90 && !shift) || (keycode >= 97 && keycode <= 122 && shift))
          el.style.visibility = 'visible';
      else
          el.style.visibility = 'hidden';
  }
  
  function checkCapsLockChallenge(e){
      var el = document.getElementById('divclChallenge');
      if (!el) return;
  
      var keycode = e.keyCode? e.keyCode : e.which;
      var shift = e.shiftKey? e.shiftKey : !!(keycode == 16);
  
      if((keycode >= 65 && keycode <= 90 && !shift) || (keycode >= 97 && keycode <= 122 && shift))
          el.style.visibility = 'visible';
      else
          el.style.visibility = 'hidden';
  }
  
  function checkSubmitBtnAvail() {
      var user = Ext.get('user');
      var passwd = Ext.get('passwd');
      var challengePwd = Ext.get('challengePwd');
      var loginBanner = Ext.getCmp('bannerFieldSet');
  
      var avail = true;
      var submitBtn = Ext.get('submit');
  
      if (Ext.fly('trInitName').dom.style.display !== 'none') {
          avail = avail && !!user.getValue();
      }
  
      if (Ext.fly('trInitPwd').dom.style.display !== 'none') {
          avail = avail && !!passwd.getValue();
      }
  
      if (Ext.fly('trChallengePwd').dom.style.display !== 'none') {
          avail = avail && !!challengePwd.getValue();
      }
  
      if (loginBanner && loginBanner.getValue) {
          avail = avail && loginBanner.getValue();
      }
  
      submitBtn.dom.disabled = !avail;
  }
  
  Ext.onReady(function(){
      var ml = 20;
      ml = 63;
      var btn = Ext.get('submit');
      if (btn) {
          btn.on('click', submitClicked);
      }
      var user = Ext.get('user');
      if (user && user.dom) {
          var u = Ext.get('user').dom;
          var uname = Pan.base.param('user') || '';
          if (uname) {
              u.value = uname;
          }
          u.maxlength = ml;
      }
      loadPage();
  
      var loginForm = Ext.get('login_form');
      var passwd = Ext.get('passwd');
      var checkSubmitBtnAvailHandler = function() {
          checkSubmitBtnAvail();
      };
      loginForm.on('click', checkSubmitBtnAvailHandler);
      loginForm.on('keyup', checkSubmitBtnAvailHandler);
      user.on('change', checkSubmitBtnAvailHandler);
      passwd.on('change', checkSubmitBtnAvailHandler);
  
      var msgE = Ext.getDoc().child('.msg');
      if (msgE) {
          if (Ext.isIE8) {
              var prefMaxWidth = msgE.getStyle('max-width').replace(/px$/, '');
              var prefMaxHeight = msgE.getStyle('max-height').replace(/px$/, '');
              if (msgE.getHeight() > prefMaxHeight) {
                  msgE.setHeight(prefMaxHeight);
              }
              if (msgE.getWidth() > prefMaxWidth) {
                  msgE.setWidth(prefMaxWidth);
              }
          }
          if ("") {
              var fieldSet = Ext.create({
                  id: "bannerFieldSet",
                  title: "I Accept and Acknowledge the Statement Below",
                  xtype: "fieldset",
                  checkboxToggle: true,
                  width: 550,
                  autoScroll: true,
                  onCheckClick: function() {
                      checkSubmitBtnAvail();
                  },
                  getValue: function() {
                      if (this.checkbox) {
                          return this.checkbox.dom.checked;
                      }
                  },
                  renderTo: 'motd',
                  bodyCfg: {
                      html: msgE.dom.innerHTML
                  }
  
              });
              fieldSet.checkbox.dom.checked = false;
          } else {
              Ext.fly('motd').appendChild(msgE);
              msgE.setStyle({visibility: 'visible'});
          }
      }
  
      checkSubmitBtnAvail();
  });
  
  if( self == top ) {
      document.documentElement.style.display = 'block' ;
  } else {
      top.location = self.location ;
  }
  
  function doSubmit(thisform)
  {
      return true;
  }
  </script>
      <div id="wdiv" style="display: none;">
          Creating administrative session. Please wait...    </div>
      <div id="dError" style="display: none;">
          Invalid username or password
      </div>
      <table>
          <tr id="trInitName" style="display: table-row;">
              <td>
                  <label for="user">
                      Username                </label>
              </td>
              <td><input type="text" id="user" name="user" size="19"></td>
          </tr>
          <tr id="trInitPwd" style="display: table-row;">
              <td>
                  <label for="passwd">
                      Password                </label>
              </td>
              <td>
                  <input type="password" style="display:none"> <!-- Work around to disable password autofill from browser -->
                  <input type="password" maxlength="120" size="19" id="passwd" name="passwd" onkeypress="checkCapsLock(event);">
                  <span id="divcl" style="visibility: hidden;"><img src="images/ssl_decryption.gif" title="CAPS LOCK" alt="CAPS LOCK" /></span>
              <td>
          </tr>
          <tr id="trInitLocale" style="display: none;">
              <td>Language</td>
              <td></td>
              <td></td>
          </tr>
          <tr id="trChallengeMsg" style="display: none;">
              <td></td>
              <td id="spChallengeMsg">Enter Management UI's PASSCODE</td>
          </tr>
          <tr id="trChallengePwd" style="display: none;">
              <td>
                  <label for="challengePwd"></label>
              </td>
              <td>
                  <input type="password" name="challengePwd" id="challengePwd" size="19" maxlength="120" onkeypress="checkCapsLockChallenge(event);">
                  <span id="divclChallenge" style="visibility: hidden;"><img src="images/ssl_decryption.gif" title="CAPS LOCK" alt="CAPS LOCK" /></span>
              </td>
          </tr>
          <tr id="trLoginBtn" style="display: table-row;">
              <td></td>
              <td>
                  <input class="buttonFixed" type="submit" id="submit" name="ok" value="Log In" onclick="return doSubmit(this.form);">
                    <span id="trSSO" class="login_option" style="display: inline-block;">
                      <a href="javascript:void(0)" onclick="return submitSamlClicked();">Use Single Sign-On</a>
                    </span>
              </td>
          </tr>
      </table>
      <div id="motd">
      </div>
  </div>
  </form>
  <!-- END PAN_FORM_CONTENT -->
  <!-- FORM for SAML -->
  <form name="login_saml" id="login_saml_form" method="post" action="">
      <input name="loadSamlForm" value="true" type="hidden"/>
      <input type="hidden" name="_csrf" value="4794K8778443725P4SBYB24662FN42Y1PZ7D9ATH" />
  </form>
        </div>
      </div>
      <div class="msg" style="visibility: hidden;">
              </div>
    </body>
  </HTML>
  
  <!--
  	 __LOGIN_PAGE__
  -->
  
  <!--
  	 __LOGIN_PAGE_FOR_PANORAMA_BACKWARD_COMPATIBILITY__
  -->
  
  
services.name: https://4.1.158.14/login/images/favicon.ico
services.name: https://4.1.158.14/favicon.ico
services.body_hash_sha1: sha1:32d8871a81893c1c52ea463cd1fd91a52408339d
services.supported_versions: HTTP/1.1
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-27T12:31:07.988342
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_2
services.ja4s: t120200_c02f_344b4dce5a52
services.issuer_dn: C=US, O=Palo Alto Networks, CN=Palo Alto Networks Root CA 1
services.common_name: Palo Alto Networks Root CA 1
services.country: US
services.organization: Palo Alto Networks
services.subject_dn: C=US, O=Palo Alto Networks, CN=Palo Alto Networks Device 410
services.common_name: Palo Alto Networks Device 410
services.country: US
services.organization: Palo Alto Networks
services.scan_time: 2025-07-19T08:58:29.217449
[binary data, 22 values, 524 bytes]