An independent guide to identifying the official Come website: domain verification, certificate checks, and impersonation warnings. Where a forwarded link does not match the verified domain, walk away.
Treat the four desk passes as a checklist. Complete them in order before trusting any link that purports to be Come's official website.
Confirm the domain matches across at least two of the platform's official channels.
Confirm HTTPS, a valid certificate, and certificate details that match the domain.
Reject unfamiliar flyers, QR codes, or forwarded links that purport to be Come.
Store the verified URL in your password manager so future visits use the verified path.
The single most important check is the URL bar. Confirm the domain matches across at least two of the platform's official channels: the platform's verified social accounts, the platform's own mobile-app store listing, and the platform's customer-care email domain.
Counterfeit sites live in three places: search-engine ads, forwarded links in messages, and printed flyers with QR codes. Each vector has a different verification pass.
Once you have verified the official Come domain, store the URL in your password manager so future visits use the verified path. This is the single most effective defence against impersonation.
Six rejection signals mean the link or page is not the official Come website. Walk away.
The URL is one character off from the official domain. Common substitutes include zero for O, hyphen for underscore, and added prefixes.
The URL begins with HTTP instead of HTTPS. A real platform always serves HTTPS.
The browser shows a certificate warning. A real platform's certificate is valid and matches the domain.
The URL redirects through an unknown domain before reaching the platform. Walk away.
The page demands immediate action. Genuine platform pages do not carry urgency.
The page asks for payment to "verify" or "unlock" your account. Genuine platforms never ask.
Where you have the verified domain but not the file, the app verification guide walks through what to check before installing.
The single best way to confirm you are on the official Come site is the URL bar and the SSL certificate. Check that the domain matches Come's published web address exactly, that the certificate is valid, and that the page does not ask for credentials on an unusual subdomain. If anything looks off, leave the page.
This desk only links to Come's officially published domain. If a third-party page claims to be Come, we will say so rather than redirect you.