catlcloud[.]metakarat[.]vip

This domain, catlcloud.metakarat.vip, operates as a credential harvesting phishing site specifically designed to mimic Contemporary Amperex Technology Co., Limited (CATL) login interfaces. The page title 'Masuk CATL' suggests targeting of Indonesian-speaking users, likely aiming to collect enterprise credentials for subsequent unauthorized access to corporate systems or supply chain compromise. Analysis of the infrastructure indicates a deliberate attempt to impersonate legitimate cloud services associated with CATL, a critical component in global battery manufacturing and energy storage sectors. Technical indicators confirm the malicious nature of this domain. VirusTotal reports 6 out of 95 security vendors flagging catlcloud.metakarat.vip as malicious, while Gridinsoft assigns a trust score of 0/100. The domain was registered on March 27, 2026, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals resolution to IP address 163.181.214.143, and the domain appears on at least one security blocklist, with PhishDestroy currently blocking access. The creation date discrepancy (2026) suggests potential WHOIS manipulation or future-dated registration to evade immediate detection. Users who accessed catlcloud.metakarat.vip should assume credential compromise and take immediate remediation steps. All passwords entered on this domain must be reset from a clean device, prioritizing accounts with elevated privileges or access to sensitive systems. Enable multi-factor authentication (MFA) using app-based or hardware tokens, avoiding SMS-based methods. Monitor associated accounts for unauthorized access attempts, particularly those linked to enterprise resource planning (ERP) systems, supply chain management platforms, or financial portals. Organizations should review network logs for connections to 163.181.214.143 and implement domain-wide password resets if internal traffic to this IP is detected. Report the incident to relevant computer emergency response teams (CERTs) or sector-specific information sharing and analysis centers (ISACs) for broader threat intelligence dissemination.