If you (or any Apple ID you have access to) ever "got" Catalina before—even for free—it lives in your purchase history.
The search for a "macos catalina dmg direct download verified" is a technical necessity for many users, but it is fraught with security pitfalls. A DMG is only "verified" if the cryptographic signature remains intact or the checksum matches the original Apple release. By utilizing the codesign and shasum utilities, a user can transform an unsafe direct download into a verified, secure installation source. macos catalina dmg direct download verified