Getting a client safely

A desktop client for a trading venue comes from exactly two places: the venue's own website, or the official app store (Microsoft Store / Mac App Store). There is no third legitimate source.

A search ad leads to a page that looks identical to the venue's site — but the domain in the address bar differs by one character or uses a different ending. The page is a copy. The file it gives you is not the client.

A page whose "install" step is "open PowerShell (or Terminal) and paste this command" is not distributing a client — it is running something on your machine. No legitimate trading venue distributes its desktop app as a pasted command. This pattern exists solely to run code that the site's visitor cannot read. Close the page.

Venues do not need mirrors — the app stores cover every region. A "mirror" is a copy with something extra you didn't ask for.

A "faster" or "pro" build that exists nowhere on the venue's own channels does not exist.

1. Read the domain. Character by character, against the venue's known domain. Lookalikes rely on you skimming.
2. Check the publisher. In a store listing, the publisher name must match the venue's verified developer account.
3. Never paste commands from a website. If a page's install instruction is "paste this into your terminal", that page is not distributing software — it is executing it. No exceptions.