app[.]catalyst-trust[.]com

This domain was identified as a credential harvesting platform impersonating a legitimate trust or authentication service. Visitors were likely presented with fake login portals designed to capture usernames, passwords, or multi-factor authentication codes. The site targeted users seeking verification or security-related services, exploiting trust in authentication workflows to extract sensitive credentials. Analysis indicates the domain was registered on May 25, 2025, through Dynadot LLC, a registrar frequently associated with short-lived malicious infrastructure. At the time of detection, 11 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain resolved to the IP address 192.3.141.251 and appeared on one security blocklist before being taken offline. Its Gridinsoft trust score of 0/100 further confirms its high-risk classification. If you visited app.catalyst-trust.com, immediately revoke any active sessions on accounts accessed during the visit. Reset passwords using a secure device and enable multi-factor authentication if not already active. Monitor linked accounts for unauthorized activity, particularly financial or identity-related services. Check browser history for redirects to the domain and clear cached credentials. If payment details were entered, contact your financial institution to flag potential fraud. Report the incident to your organization’s security team or a trusted cybersecurity authority for further analysis.