COMERead the source address before a COME APK download
Read the actual hostname of a download destination. A COME name in page text, a path or a file label is not enough to identify the website.
Find the host
In a normal web address, the hostname appears after the scheme and before the next slash. Inspect it in the browser's address area. Long paths and query strings can contain familiar words while the website itself belongs to a different host.
Treat changes as a new check
A download entry can lead to another page. When the host changes, inspect the new address and current options again. Avoid assuming that a branded button on the first page guarantees every later page or file.
Stop on confusing addresses
Look carefully for misspellings and unexpected hostnames. If you cannot identify the destination, do not enter account details or install its file. Return to the known entry instead of choosing an unrelated mirror suggested by a popup.
A useful next step
Use the current COME entry on the download page, then inspect the address that your browser actually reaches.
Related: What HTTPS tells you about a COME APK source