Pro tip: If the official Duke page is ever down for maintenance, many universities host verified mirrors, but always check the file hash if you are paranoid.
Because JFLAP has been around for decades, there are many old versions floating around on third-party sites. Avoid those. They may be outdated or unsafe. jflap download