# Farmacare.id — Full Discovery
# Date: 2026-09-23

## Source: Certificate Transparency + JS analysis

### api.farmacare.id (13.229.35.221) — AWS API Gateway
- All endpoints: 403 "Missing Authentication Token"
- API requires auth token
- Port 443 only

### farma-dev S3 bucket (ap-southeast-1)
- List: 403 (denied)
- **template_farmacare_catalog.csv: 200 (73B)** — DOWNLOADABLE!
- Content: `reg_number,display_name,package\nNA18190605725,Eau De Cologne Glamour,Btl`
- AWS S3 bucket name: farma-dev

### app.farmacare.id (199.36.158.100) — React SPA
- 4.2MB JS file
- Firebase integration (FCM, installations, remoteconfig, logging)
- WhatsApp integration: 6281288332296, 62811395800
- Facebook Pixel: 2333646640116088
- Google Tag Manager: GTM-TTB4T2F
- References: farmacare-production.web.app (Firebase hosting)

### clima.farmacare.id — React App
- API URL: https://api.farmacare.id
- S3: farma-dev.s3.ap-southeast-1.amazonaws.com/template_farmacare_catalog.csv
- App.farmacare.id URL in code: /595/order/distributor/4821

### apt.farmacare.id — Same as app.farmacare.id (same content)

### www.farmacare.id (75.2.0.180) — SSL error (old TLS)

### dasbor.farmacare.id (18.141.144.97) — No ports open

### order-api.farmacare.id (13.250.47.209) — No ports open

## PII
- WhatsApp phone numbers: 6281288332296 (support), 62811395800 (credit verification)
- Facebook Pixel ID: 2333646640116088
- Google Tag Manager: GTM-TTB4T2F

## New Targets
1. api.farmacare.id — needs auth token (find in JS?)
2. farma-dev S3 bucket — enumerate files
3. farmacare-production.web.app — Firebase hosting
4. app.farmacare.id JS (4.2MB) — search for API keys, auth tokens