print-let[.]vercel[.]app

This domain, print-let.vercel.app, is identified as a generic phishing site designed to impersonate legitimate document printing or cloud-based file processing services. Analysis indicates the infrastructure was likely configured to harvest user credentials through fake login portals or document upload interfaces, though no specific brand impersonation or drainer kit signatures have been confirmed. The domain exhibits characteristics typical of credential theft campaigns, including the use of a low-reputation hosting provider and a recently registered domain to evade detection. Technical indicators reveal the domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to the IP address 216.198.79.131, associated with AS16509 (Amazon.com, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common choice for threat actors due to its free availability. At the time of assessment, the domain was flagged by 17 out of 95 security vendors on VirusTotal and appears on at least one security blocklist. The page title, 404: NOT_FOUND, suggests the phishing content may have been removed or the domain was abandoned post-compromise. Current status indicates the domain has been taken offline, likely due to detection and subsequent mitigation efforts. However, residual risk remains elevated as the infrastructure (IP, registrar, and SSL certificate) could be repurposed for future campaigns. Organizations are advised to monitor for related domains registered under the same registrar or resolving to the same IP range. Users should treat any prior interactions with this domain as compromised and reset credentials for associated accounts. Network-level blocking of the IP address 216.198.79.131 is recommended to prevent potential lateral movement or secondary infections.