PANDI Maximises IDADX to Protect .id Domains from Digital Crime

The Indonesian Internet Domain Name Manager (PANDI) is maximising the Indonesia Domain Abuse Data Exchange (IDADX) to strengthen protection for the .id domain ecosystem from digital crime threats. PANDI Chairman Isnawan stated in Malang, East Java, on Thursday that the platform ensures every indication of domain abuse can be handled in a more measured, fast, and accountable manner.

The IDADX platform is supported by the Breach Identification and Monitoring Assistant (BIMA), enabling more massive detection, validation, and handling of various digital crimes. During the period from 1 January to 30 June 2026, IDADX recorded 32,535 URLs indicated to be abusing domains, with a total of 25,815 domains monitored.

By category, the majority of findings were online gambling with 24,523 reports, followed by phishing with 6,491 reports and malware with 961 reports. Other recorded abuses included pornography (173 reports), impersonation (104 reports), spam (73 reports), intellectual property rights violations (44 reports), gambling invitations (27 reports), and botnets (23 reports).

In the same period, the highest domain abuse occurred on the .id second-level domain with 18,699 domains, followed by .my.id with 2,037 domains, .biz.id with 1,326 domains, .web.id with 1,154 domains, .ac.id with 705 domains, and .sch.id with 607 domains. Other affected domains included .co.id (435 domains), .or.id (300 domains), .go.id (270 domains), .ponpes.id (148 domains), .desa.id (88 domains), .net.id (36 domains), and .mil.id (10 domains).

In terms of the number of URLs indicated to be abusing domains, .id remained the highest with 20,055 URLs, followed by .my.id with 2,906 URLs, .biz.id with 1,877 URLs, .ac.id with 1,798 URLs, .web.id with 1,685 URLs, .sch.id with 1,434 URLs, .co.id with 845 URLs, .go.id with 837 URLs, .or.id with 526 URLs, .ponpes.id with 228 URLs, .desa.id with 190 URLs, .net.id with 99 URLs, and .mil.id with 55 URLs.

PANDI Vice Chairman Ery Punta Hendraswara explained that the creation of pages with .id domains has strict requirements, such as not containing elements of ethnicity, religion, race, and intergroup relations (SARA) or online gambling. These requirements comply with regulations in each country, and for .id domains, the reference is Indonesian government regulations. He noted that because Indonesia does not permit such content, actions such as takedowns or suspensions are taken, with attention also paid to scams and phishing.

PANDI continues to strengthen collaboration with the Ministry of Communication and Digital Affairs and the National Cyber and Crypto Agency to conduct digital patrols addressing online gambling, phishing, scams, and malware. The organisation is also enhancing capabilities through training for operators on server infrastructure, cyber security, and firewalls.