blueowlcapital.us
Classification: Malicious
blueowlcapital.us is a malicious hostname. Linked to Connectwise malware. Reported by Threat Observatory, last seen 2026-10-16. Seen in CR.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:34:45.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: CONNECTWISE (S0591)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CR, across government networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| connectwise | Maltiverse Threat Observatory | 2026-09-11 22:45:12 | 2026-10-16 18:15:15 | country_code:cr industry:government-and-public-sector malicious-activity malware | S0591 ConnectWise |
IP addresses resolved by this hostname
- 172.64.80.1 (2026-10-17 20:34:45)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 20:34:45)
Whois information
- Domain
- blueowlcapital.us
- TLD
- us
- Nameservers
- kara.ns.cloudflare.com, amir.ns.cloudflare.com
- Registrant
- opeck Foundation
- City
- Hadlyme
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- Domain created
- 2026-07-31 22:28:25
- Domain expires
- 2027-07-31 22:28:25
- First indexed
- 2026-10-16 18:19:50
- Last updated
- 2026-10-17 20:34:45