It's "real" in that the police shared the picture: https://x.com/NYPDnews/status/1864706407985221974
though the clothing seems different from an earlier picture, especially with this one having big front pockets in the jacket. so there's claims that it is not the same suspect.
to top it off, the problem was a "serverHold" which as I understand can only be initiated by the top-level domain registrar, so the only way to make sure it doesn't happen again is not to use a .io domain