Evaluating a fan-made client requires separating transparent community code from predatory wrappers. The following table contrasts standard, verified Unity modding environments against the files currently circulating as the Airlock tool:
| Feature / Metric | Verified Community Frameworks | Circulating "Airlock" Downloads |
|---|---|---|
| Distribution Method | Open-source GitHub / Itch.io pages | Passworded ZIPs on file-lockers / Discord |
| Code Transparency | Public C# repositories; inspectable assemblies | Heavily obfuscated native binaries (.exe / .scr) |
| Network Behavior | Direct peer-to-peer or verified self-hosted ports | HTTP POSTs to unlisted Eastern European endpoints |
| Security Software Flags | Zero to minor generic heuristic warnings | Confirmed LummaC2, RedLine, or injector signatures |
