Fake Jev AI storefronts (Eye Research 25 Sep / CSN 28 Sep): lookalike resellers intercept prompts at 3–11.5× TypeSafe prices
Eye Security research (Dion Fieret & Lucas Hop; published 25 September 2026; Cyber Security News amplified 28 Sep) documents lookalike storefronts that appeared within days of TypeSafe AI’s Jev model launch (15 Sep; hosted API public ~21 Sep). Fake sites (e.g. jev-ai.pro, jevtypesafeai.com, jev-agent.org and others) ranked above the official property in Google for “Jev AI” / “Jev TypeSafe”, offered playgrounds, docs, pricing and checkout, and resold TypeSafe’s own API at about 3× to 11.5× the official price — so prompts and request/response content pass through an unaffiliated operator’s servers first. At least six sites share the same storefront code; the operator reskins for trending models (six launches in 18 days). Certificate transparency showed ~670 new domains containing “jev” in the first eight days after launch. Affiliation disclaimers buried in footers/terms. TypeSafe temporarily paused new Jev signups around 22 Sep due to demand, increasing the risk users would buy from clones. Buy only via typesafe.ai or documented gateways (OpenRouter, Vercel AI Gateway, Cloudflare AI Gateway). Primary: Eye Research; wire: Cyber Security News 28 Sep.
- Product
- TypeSafe AI Jev API access (unofficial lookalike reseller storefronts)
- Versions
- n/a (social/SEO reseller fraud; not a product CVE). Official launch ~15 Sep 2026; clone domains from ~18 Sep.
- Exploited in Australia?
- unknown
- Patch to
- Purchase Jev only from typesafe.ai or documented partners (OpenRouter / Vercel AI Gateway / Cloudflare AI Gateway). Treat jev-*.pro/.com lookalikes, unexpected checkout domains, and 3–11× price markups as hostile. Do not paste sensitive prompts through third-party “Jev” storefronts; rotate any keys entered on clones; prefer org-controlled gateways with allowlists.
Primary: Eye Research — Rise of the Jev-Clones (25 Sep 2026) · Vendor: Eye Security research (Jev clone storefronts) · Cyber Security News — Fake Jev AI stores intercept prompts (28 Sep 2026)