# Phishing domains under .im

.im accounts for 70 of the 224,866 domains in the PhishDestroy database (0.03%), with 7 new ones in the last 30 days. The most impersonated brand under .im is Ledger. 35 were online at the last check and 9 have a confirmed takedown.

70Reported .im domains

0.03%Share of PhishDestroy reports

7Last 30 days

9Confirmed takedowns

## Detections per month

.im phishing domains detected per month: 68 from 2025-11 to 2026-10; peak 13.

## Brands and registrars

### Impersonated brands

- [Ledger](https://phishdestroy.io/brand/ledger/)3
- [Trezor](https://phishdestroy.io/brand/trezor/)3
- [Ethereum](https://phishdestroy.io/brand/ethereum/)2
- [Zoom](https://phishdestroy.io/brand/zoom/)2
- [Cosmos](https://phishdestroy.io/brand/cosmos/)2
- [Microsoft](https://phishdestroy.io/brand/microsoft/)2
- [Coinbase](https://phishdestroy.io/brand/coinbase/)2
- [Google](https://phishdestroy.io/brand/google/)2

### Registrars

- Redacted42
- Cloudflare2
- N/A1
- SHOPIFY-NET (ASN: 13335)1
- LINODE (ASN: 63949)1
- Kalada1

## Latest .im phishing domains

The 30 most recently detected .im domains
Domain | First detected | Status at last check | Registrar | 
[trocador-app.im](https://phishdestroy.io/domain/trocador-app.im/) | 2026-10-21 | Offline | — | 
[en-exodus.co.im](https://phishdestroy.io/domain/en-exodus.co.im/) | 2026-10-15 | Online | — | 
[help.steampowered.com.im](https://phishdestroy.io/domain/help.steampowered.com.im/) | 2026-10-15 | Online | Redacted | 
[trezor-suite.im](https://phishdestroy.io/domain/trezor-suite.im/) | 2026-10-10 | Online | Redacted | 
[atomicwallet.im](https://phishdestroy.io/domain/atomicwallet.im/) | 2026-09-27 | Online | Redacted | 
[mintpwt.im](https://phishdestroy.io/domain/mintpwt.im/) | 2026-09-25 | Online | — | 
[osejp.im](https://phishdestroy.io/domain/osejp.im/) | 2026-09-22 | Online | Redacted | 
[rufus.im](https://phishdestroy.io/domain/rufus.im/) | 2026-09-21 | Offline | Redacted | 
[godatafeed.im](https://phishdestroy.io/domain/godatafeed.im/) | 2026-09-16 | Online | Redacted | 
[bitwinex.im](https://phishdestroy.io/domain/bitwinex.im/) | 2026-09-11 | Online | Redacted | 
[metaswap.im](https://phishdestroy.io/domain/metaswap.im/) | 2026-09-09 | Online | — | 
[eth.im](https://phishdestroy.io/domain/eth.im/) | 2026-08-18 | Online | Redacted | 
[tronscan.org.im](https://phishdestroy.io/domain/tronscan.org.im/) | 2026-08-09 | Offline | Redacted | 
[bitget.arbitrum.im](https://phishdestroy.io/domain/bitget.arbitrum.im/) | 2026-07-29 | Online | — | 
[konvert.im](https://phishdestroy.io/domain/konvert.im/) | 2026-07-27 | Offline | Redacted | 
[2132.im](https://phishdestroy.io/domain/2132.im/) | 2026-07-27 | Online | Redacted | 
[chat.consultation.com.im](https://phishdestroy.io/domain/chat.consultation.com.im/) | 2026-07-24 | Online | — | 
[trezor.wallet.com.im](https://phishdestroy.io/domain/trezor.wallet.com.im/) | 2026-07-22 | Online | — | 
[bt.arbitrum.im](https://phishdestroy.io/domain/bt.arbitrum.im/) | 2026-07-14 | Online | — | 
[ledger.org.im](https://phishdestroy.io/domain/ledger.org.im/) | 2026-07-10 | Online | — | 
[sez.im](https://phishdestroy.io/domain/sez.im/) | 2026-07-06 | Online | — | 
[bozei.im](https://phishdestroy.io/domain/bozei.im/) | 2026-06-23 | Online | Redacted | 
[lvvas.im](https://phishdestroy.io/domain/lvvas.im/) | 2026-06-23 | Online | — | 
[krab7.im](https://phishdestroy.io/domain/krab7.im/) | 2026-06-17 | Offline | — | 
[upholdvip.im](https://phishdestroy.io/domain/upholdvip.im/) | 2026-06-16 | Offline | — | 
[trx.im](https://phishdestroy.io/domain/trx.im/) | 2026-06-15 | Online | Redacted | 
[trezor.com.im](https://phishdestroy.io/domain/trezor.com.im/) | 2026-06-15 | Online | Redacted | 
[uniswap.org.net.im](https://phishdestroy.io/domain/uniswap.org.net.im/) | 2026-06-08 | Offline | Kalada | 
[slon8.im](https://phishdestroy.io/domain/slon8.im/) | 2026-06-08 | Offline | — | 
[krab3.im](https://phishdestroy.io/domain/krab3.im/) | 2026-06-08 | Offline | — | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .im registrations; first .im report 2025-09-06.

Canonical: https://phishdestroy.io/tld/im/