revoltengineering[.]co[.]ke

On July 19, 2026, analysis of the domain revoltengineering.co.ke identified a high‑risk generic phishing infrastructure. The site presents the title “Revolt Engineering – Shaping the infinite future Through Solar Energy” and returns an HTTP 301 redirect. DNS resolution points to the IP address 209.145.52.241, which is hosted by Contabo Inc. in the United States. The TLS certificate is issued by Let’s Encrypt (R13), indicating a recent or automatically renewed certificate. The domain appears on one security blocklist and is actively blocked by PhishDestroy. AlienVault OTX references the domain in three separate threat‑intelligence pulses, reinforcing its malicious reputation. VirusTotal analysis shows that 15 of 91 scanned security vendors flagged the domain, suggesting observable malicious activity. Current evidence confirms the domain remains active; however, the specific phishing landing page content, targeted brand, or kit used has not been publicly disclosed, leaving those details uncertain. Defenders should prioritize adding revoltengineering.co.ke and its resolving IP 209.145.52.241 to network deny lists, monitor for related traffic, and consider sharing indicators of compromise with upstream threat‑sharing platforms. Ongoing observation is advised to detect any evolution of the phishing campaign.