jarfluxrow[.]com
Analyse phishing et sécurité de jarfluxrow.com
“Jar Fluxrow - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”
jarfluxrow.com — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Argent; Type d'arnaque : Brand Impersonation. Résumé des preuves: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 56/100. Bureau d’enregistrement: PDR.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
jarfluxrow.com was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 21 February 2026. The domain resolves to the Cloudflare edge address 188.114.97.3, which is associated with ASN 13335 (Cloudflare, Inc.) and geolocated to the United States. Authoritative name servers are elinore.ns.cloudflare.com and jakub.ns.cloudflare.com, indicating that the domain is fully hosted on Cloudflare’s infrastructure. No TLS certificate was observed; the site was reachable only over HTTP before being taken offline.
The public page title returned by the server reads "Jar Fluxrow – Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas", suggesting a fraudulent trading‑related offering. The title explicitly references the brand "argent", confirming that the operator is attempting a brand impersonation attack against that financial service. The domain is listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal analysis shows that 1 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. Gridinsoft assigned a trust score of 0 / 100, the lowest possible rating.
Current status is reported as offline, indicating that the malicious content has been removed or the hosting has been terminated. However, the combination of recent registration, use of Cloudflare CDN, lack of SSL, low trust score, and the presence on a blocklist suggests a short‑lived campaign typical of brand‑impersonation scams. Open questions remain regarding the exact payload delivered, any credential‑harvesting forms, and whether additional infrastructure (e.g., command‑and‑control servers) was used, as these details have not been disclosed.
Defenders should add jarfluxrow.com to URL filtering and domain‑blocking policies, monitor Cloudflare‑owned IP ranges for similar short‑duration registrations, and enforce strict TLS inspection to detect future HTTP‑only impersonation attempts.
Couverture des données12 recorded checks
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externesIndependent lookups and source reports
PD-20260107-D779E1 Recipient: abuse-contact@publicdomainregistry.com Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.