jarfluxrow[.]com

jarfluxrow.com was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 21 February 2026. The domain resolves to the Cloudflare edge address 188.114.97.3, which is associated with ASN 13335 (Cloudflare, Inc.) and geolocated to the United States. Authoritative name servers are elinore.ns.cloudflare.com and jakub.ns.cloudflare.com, indicating that the domain is fully hosted on Cloudflare’s infrastructure. No TLS certificate was observed; the site was reachable only over HTTP before being taken offline.

The public page title returned by the server reads "Jar Fluxrow – Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas", suggesting a fraudulent trading‑related offering. The title explicitly references the brand "argent", confirming that the operator is attempting a brand impersonation attack against that financial service. The domain is listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal analysis shows that 1 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. Gridinsoft assigned a trust score of 0 / 100, the lowest possible rating.

Current status is reported as offline, indicating that the malicious content has been removed or the hosting has been terminated. However, the combination of recent registration, use of Cloudflare CDN, lack of SSL, low trust score, and the presence on a blocklist suggests a short‑lived campaign typical of brand‑impersonation scams. Open questions remain regarding the exact payload delivered, any credential‑harvesting forms, and whether additional infrastructure (e.g., command‑and‑control servers) was used, as these details have not been disclosed.

Defenders should add jarfluxrow.com to URL filtering and domain‑blocking policies, monitor Cloudflare‑owned IP ranges for similar short‑duration registrations, and enforce strict TLS inspection to detect future HTTP‑only impersonation attempts.