# virtue-panakea Buckets — NEW Discovery
# Date: 2026-09-21

## Overview

Three previously unchecked buckets in project virtue-panakea, accessible via
1014__production.json SA key (virtue-iot-healthcare-uploader).

## Buckets

| Bucket | Files | Size | Content |
|--------|-------|------|---------|
| virtue-iot-healthcare-apps | 9,901 | 1,106 MB | IoT audio recordings (.mp3) |
| virtue-panakea-test-result | 208 | 11.8 MB | Wellness screening PDFs (patient names in filenames) |
| virtue-panakea.firebasestorage.app | 4,366 | 2,025 MB | Medical reports, invoices, prescriptions, payments |

## virtue-panakea.firebasestorage.app — Categories

| Category | Files | Size | Content |
|----------|-------|------|---------|
| PanakeaVirtue-Payment | 1,201 | 72 MB | Payment receipts (photos of bank transfers, QRIS) |
| PanakeaVirtue-MCUResult | 990 | 383 MB | Medical Check-Up results (lab tests) |
| PanakeaVirtue-MCUReport | 984 | 809 MB | MCU reports (full health reports) |
| PanakeaVirtue-Invoice | 911 | 723 MB | Invoices with payment details |
| PanakeaVirtue_Affiliate | 111 | 3.7 MB | Affiliate partner images |
| PanakeaVirtue-Doctor | 73 | 3 MB | Doctor photos/documents |
| PanakeaVirtue-Prescription | 32 | 16 MB | Digital prescriptions (doctor names, SIP numbers, patient names) |
| PanakeaVirtue_LogoBank | 16 | 0.5 MB | Bank logos (BCA, BJB, BNC) |
| PanakeaVirtue-PPVReport | 12 | 10 MB | PPV reports |
| PanakeaVirtue-CenturyChat | 6 | 1.2 MB | Chat images |
| PanakeaVirtue-ProductKnowledge | 5 | 1.4 MB | Product images |
| PanakeaVirtue_Banner | 5 | 1.2 MB | Marketing banners |
| PanakeaVirtue_Legal | 5 | 0.7 MB | T&C, Privacy Policy |
| PanakeaVirtue-Banner | 4 | 0.6 MB | Product banners |
| PanakeaVirtue-CustomerDocuments | 2 | 0.4 MB | Customer PDF documents |
| PanakeaVirtue-VKonsulLabResult | 2 | 0.8 MB | Teleconsultation lab results |
| PanakeaVirtue-Image | 2 | 0.1 MB | QRIS code |
| PanakeaVirtue_PaymentMethod | 5 | 0.1 MB | DANA, OVO, QRIS logos |

## PII Confirmed in Samples

### Wellness PDFs (virtue-panakea-test-result)
- Patient full name (in filename + document)
- Phone number (e.g. 6289635861367)
- Age range (e.g. 25-34)
- Company/employer (e.g. PT Pharos Indonesia, PT Prima Medika Laboratories)

### MCU Lab Results (virtue-panakea.firebasestorage.app)
- Lab: KLINIK ECONOLAB, Jl. Limo No.6, Jakarta Selatan
- MR Number (e.g. PNK20251000005)
- Lab ID (e.g. 25003512)
- Sample collection date
- Clinic: Panakea Virtulab

### Prescriptions
- Doctor name (e.g. Angie Shabira Permata Hati, Sp.PD)
- Doctor SIP number (e.g. 157/B.15f/31.75.04.1002.38.R-1/3/TM.09.74/e/2023)
- Patient name
- Prescription date
- Medication (e.g. CELECOXIB 200MG)

### Invoices
- Receipt number
- Payment date
- Customer name, address, phone, email

## Redis on 34.126.145.28:6379

| Port | Status | Details |
|------|--------|---------|
| 80 | OPEN | nginx (404) |
| 443 | OPEN | nginx (404, HSTS enabled) |
| 6379 | OPEN | Redis NOAUTH (requires password) |

Redis password not cracked — all known passwords rejected.
Nginx blocks .env, .git/config with 403.
CORS headers reveal: Signal, traceparent, nip, x-company-id headers used.