# DNS Recon — PharmaLink / Innopharm
# Date: 2026-09-07

## Known Domains (from our data)

| Domain | IP | Notes |
|--------|-----|-------|
| pharmalink.id | 34.143.202.81 | Main domain |
| www.pharmalink.id | 34.126.145.28 | — |
| jenkins.pharmalink.id | 34.87.120.34 | CI/CD |
| vault.pharmalink.id | 34.126.159.226 | Vault |
| gitlab.pharmalink.id | 35.247.168.114 | GitLab (DEAD) |
| prog2.pharmanet.id | 13.250.197.171 | MySQL (our access) |
| scm.pharmalink.id | 34.126.145.28 | Logistics |
| century.pharmalink.id | 34.126.145.28 | — |
| apotekcentury.id | 52.74.0.72 | E-commerce |
| cfu.pharmalink.id | 34.126.103.195 | — |
| blackhole.pharmalink.id | 34.126.145.28 | — |
| monitoringlogs.pharmalink.id | 34.126.145.28 | — |
| virtue-panakea.pharmalink.id | 34.126.145.28 | — |

## GCP IPs (all in GCP range 34.126.x.x, 34.87.x.x, 34.143.x.x)

| IP | Service |
|----|---------|
| 34.126.145.28 | Shared hosting (multiple subdomains) |
| 34.87.120.34 | Jenkins |
| 34.126.159.226 | Vault |
| 34.143.202.81 | Main domain |
| 34.126.103.195 | CFU |

## Shodan Queries (manual)

Search: `pharmalink.id`
Search: `pharmanet.id`
Search: `34.126.145.28`
Search: `34.87.120.34`
Search: `34.126.159.226`
Search: `34.143.202.81`
Search: `34.126.103.195`

## Censys Queries

`pharmalink.id`
`pharmanet.id`
`34.126.145.0/24`

## Next Steps

1. Shodan search for open ports/services
2. Censys for certificate transparency
3. Subdomain enumeration (crt.sh, subfinder)
4. Port scan on known IPs