TLD Threat Intelligence

Flagged .id Domains

65 domains using the .id extension have been flagged by threat-intelligence feeds. The .id extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe.

65
Flagged Domains
29
Avg Risk Score
Jul 5
Last Flagged

Flagged .id Domains

60 shown
DomainLast Seen
aktiffkan-paylaterz.jqxc.my.id Jul 5 driksjb11jul.kaisen.my.id Jul 5 pemulihan-akun.acctri.biz.id Jul 3 website-danaid.bantu4n.biz.id Jul 3 amazon-app7.biz.id Jun 23 danaa-iindonesiaa.ckk.my.id Jun 22 in.flea.biz.id Jun 20 daanaindoonesiaz.resmi-exs.my.id Jun 17 layannindo-dnaaformnx.stormiexyz.my.id Jun 15 aktifkann-payylaterr4.resmi-kaz.my.id Jun 15 aktiffkan-paylater.edz.my.id Jun 15 aktiffkan-paylater.zff.my.id Jun 14 indoopaylterxz.hurokei.biz.id Jun 14 costmerznpaylteridnx.sufisme.web.id Jun 14 hcvnk.drxye.biz.id Jun 13 zonaeventmaterials.web.id Jun 12 aktiffkan-paylater.vwk.my.id Jun 12 aktiffkan-paylater.vdd.my.id Jun 12 danaa-iindonesiaa.wxx.my.id Jun 11 ajukanpinjamanvlt4.zzxe.biz.id Jun 11 registrasitokivlt2.zzxe.biz.id Jun 11 onlineratingwork.id Jun 8 danaa-iindonesiaa.olgk.my.id Jun 8 skillplatformworking.id Jun 7 aktifka4npayllaters.resmi-lzo3.my.id Jun 3 danaa-iindonesiaa.vaa.my.id Jun 2 xlynnid-danaz.mildcou.biz.id Jun 2 danaa-iindonesiaa.ndd.my.id Jun 2 aktifkandanapayltter.amormarch.biz.id Jun 1 xnewdana-lyananfromz.amormarch.biz.id Jun 1 aktiifkanpaylaterr.ydd.my.id Jun 1 xinnewfrom-costmerzn.sufisme.web.id Jun 1 dnallyanx-newfromn.fredped.biz.id Jun 1 xlayaannewindozs.mildcou.biz.id Jun 1 xymnsy.xnncal.biz.id Jun 1 dna-formnindonesia.xoxoiuh.biz.id May 31 xznewdnaa-indocostmer.xoxoiuh.biz.id May 31 aktiifkanpayylaterll.from-resmi.my.id May 29 xmnsy.evexy.biz.id May 28 batalkanpembayarandisini.apexe.biz.id May 25 aktiifkanpaylaaterz.resmi-yaa3.my.id May 25 nnewsdana-lyanindonx.safaather.biz.id May 25 captshop.singharaya-syndicate.id May 20 aktifkannx-dnacicil.fascist.biz.id May 19 botnet.fizra.biz.id May 18 konfirmasidanaterr.kart4claim.biz.id May 17 xnindodlyandanaa.safaather.biz.id May 16 xformnewzdnalyan.highway.biz.id May 16 atendimento-flow-sp-free.my.id May 13 aktiifkan-payllaterrs4.from-resmi3.my.id May 10 danaa-iindonesiaa.onn.my.id May 10 danaiindonesia4.nmm.my.id May 9 aktivasidanaterpendig.layanan-webresmi.biz.id May 9 nmm.my.id May 9 aktifkaanpaylaterr4.gyct.my.id May 9 payltterdanaxids.tubersis.biz.id May 8 xlayaanid-paylternewz.tiaoxsid.my.id May 8 pulihkanakun.dse-id.biz.id May 5 danaaiindonesiiaa4x.azxz.my.id May 3 bantuan-dana2.layanan-help-care.biz.id May 2

Frequently Asked Questions

Are all .id websites scams?

No. The .id extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe. Many legitimate sites use .id. This page lists only the specific .id domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .id domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .id site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →
← All flagged TLDs