Avoid sites that ask you to download a “downloader” or “installer.” The ROM itself is a simple ZIP file. If you see an .exe, close the page immediately.