interpolsupport[.]boats

Analysis of the domain interpolsupport.boats indicates a confirmed brand impersonation campaign targeting Interpol, classified as a tech support scam. The domain was registered on February 21, 2026, through registrar Global Domain Group LLC and currently resolves to the IP address 104.21.67.37, hosted on Cloudflare's infrastructure (AS13335) in the United States. The domain's HTTP status returns a 403 Forbidden response, suggesting either takedown actions or defensive measures by the hosting provider. Infrastructure analysis reveals the use of Cloudflare nameservers (kay.ns.cloudflare.com and mack.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are consistent with legitimate services but frequently exploited by threat actors to lend credibility to phishing operations.

The domain appears on one security blocklist and is flagged by PhishDestroy, a specialized anti-phishing service. VirusTotal detection data shows that 2 of 93 security vendors classify this domain as malicious, providing additional corroboration of its fraudulent nature. The page title, 'Interpol,' aligns with the reported brand target, confirming the intent to impersonate the international law enforcement organization. The Gridinsoft trust score of 0/100 further supports the assessment of elevated risk.

While the domain is currently offline, defenders should remain vigilant for reactivation or migration to alternative infrastructure. Organizations are advised to proactively block the domain and its associated IP (104.21.67.37) at the network level, monitor for related registrations under the same registrar, and alert users to the risks of tech support scams leveraging Interpol's branding. Given the use of Cloudflare, defenders should also consider implementing additional scrutiny for domains utilizing similar hosting patterns, particularly those with low detection counts but clear indicators of brand impersonation.