Malwarebytes finds 100-plus fake subscription sites built on one $249 toolkit

Malwarebytes has linked more than 100 subscription websites to a single commercial website starter kit and closely related developer details. The sites impersonate products including GPT-6 Astra, DaVinci Resolve, PixAI and OpenCut, and one borrows the name of Omegle, the chat service that closed in 2023.

The pages use polished product copy, genuine Google sign-in screens and paid plans priced from under $10 a month to more than $2,000 a year. Some display star ratings, performance comparisons and user counts, including one claim of more than 12 million users, with no independent evidence behind them.

Identical underlying files and developer email addresses that differ only by small additions such as numbers suggest one operator or a closely connected group runs the network. The starter kit costs $249 as a one-time purchase, with extra templates at about $2 each, and several sites still carry its demonstration material, including a paid plan named after boilerplate code.

The sites list no registered company names or business addresses, and support contacts were free webmail addresses rather than brand-owned ones. Malwarebytes said its Browser Guard blocks such pages and Scam Guard can assess a suspicious web address or screenshot.