# Certificate Transparency — Full Subdomain Discovery
# Date: 2026-09-23

## Source: crt.sh logs

### pharmalink.id — 50 subdomains discovered

#### NEW IPs discovered (17 unique)

| IP | Subdomains | Cloud | Status |
|----|-----------|-------|--------|
| 199.36.158.100 | alpha/app/apt/beta/clima/far/order.farmacare.id (7) | GCP | Not scanned yet |
| 34.126.159.226 | api-apps/api/ethical/exodus/helix/pharos.pharmalink.id, portal.pharos.co.id (7) | GCP | Not scanned |
| 34.126.103.195 | cfu.pharmalink.id | GCP | Not scanned |
| 34.87.120.34 | jenkins.pharmalink.id | GCP | **Jenkins login 200** |
| 34.50.65.188 | jitsi.chc.pharmalink.id | GCP | Not scanned |
| 18.141.144.97 | dasbor.farmacare.id, oda.farmacare.id | AWS SG | Not scanned |
| 35.172.94.1 | farmacare.id | AWS | SSL error |
| 13.250.47.209 | order-api.farmacare.id | AWS SG | Not scanned |
| 34.143.157.84 | personalia.pharmalink.id | GCP | No open ports |
| 34.143.136.252 | sentry.pharmalink.id | GCP | **Sentry v25.8.0 login!** |
| 34.124.199.12 | staging-api-partner/staging-api/staging-integra.cfu.pharmalink.id | GCP | 404 |
| 35.187.252.87 | staging-api/staging-izmo/staging-request-pickup.chc.pharmalink.id | GCP | 404 |
| 18.140.103.153 | staging-apps.pharmalink.id | AWS SG | Not scanned |
| 203.175.9.152 | meeting.pharos.co.id | Indonesia | Not scanned |
| 203.89.26.2 | wap.pharos.co.id | Indonesia | Known (WP session) |
| 54.251.28.144 | apps.pharmalink.id | AWS SG | Apache "test" |
| 99.83.169.22 | blog.farmacare.id | AWS CF | Not scanned |

### Critical findings

#### Sentry (sentry.pharmalink.id, 34.143.136.252)
- Version: Sentry 25.8.0
- Login page: /auth/login/ (200)
- Registration: /auth/register/ (200, but returns 500 on POST)
- Organization-based SSO: /<org>/ → /auth/login/<org>/
- Organizations found: pharmalink, pharos, cfu, chc, pharmanet, innopharm, farmacare, virtue, panakea
- pharos org has different login page (13KB vs 10KB) — SSO configured
- API: /api/0/auth/, /api/0/organizations/, /api/0/projects/ (all 401)
- API root: {"version":"0","auth":null,"user":null}
- Login brute: all creds failed (CSRF protected)

#### Jenkins (jenkins.pharmalink.id, 34.87.120.34)
- nginx/1.18.0 (Ubuntu)
- Login: /login = 200 (login page available)
- Anonymous access: whoAmI = anonymous, authenticated
- API/json: 403 (needs auth)
- Signup: 404 (disabled)
- Credentials API: 403

#### apps.pharmalink.id (54.251.28.144)
- Apache/2.4.6 (CentOS) PHP/7.2.34
- Returns "test" on /
- /admin/ = 403 (admin panel exists)
- /index.php = "test"

#### staging APIs
- staging-api.cfu.pharmalink.id: 404 (API exists but no content)
- staging-api.chc.pharmalink.id: 404