Security Review

Is revanced.app legit or a scam?

Our verdict:Suspicious· 55/100

Official ReVanced open-source project with legitimate heritage but mixed trust ratings and active counterfeit-impersonation threats.

revanced.appScanned 6h ago
0
Trust score
SUSPICIOUS
Heuristics 99·MT 52
Category tags
open-source-softwareandroid-customization65% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
4 years old
Registered Mar 19, 2022
MT Intelligence
Suspicious
Moderate likelihood · 65% confidence
SUSPICIOUS

Warning signs detected

Official ReVanced open-source project with legitimate heritage but mixed trust ratings and active counterfeit-impersonation threats. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of revanced.app
LIVE RENDER
revanced.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust52/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
ReVanced is a genuine open-source Android customization tool that succeeded the discontinued Vanced project. The domain is over four years old, hosted on clean infrastructure, and carries no antivirus detections. The GitHub organization, Reddit community (r/revancedapp), and privacy-focused forums (PrivacyGuides, Techlore) all vouch for the official project's legitimacy. However, independent trust aggregators assign it a 40/100 score with mixed reviews, and the project's own documentation emphasizes the prevalence of counterfeit sites and unsafe pre-patched APKs from third parties. The evidence package shows that while the official revanced.app is safe, the ecosystem around it is actively targeted by scammers distributing malware-laden fakes. The lack of formal business registration and hidden WHOIS data, combined with the project's open-source nature, contribute to the moderate trust rating rather than a higher one.
Full dossier
Analysis complete

Page Content

The site presents itself as the official ReVanced project — a tool for patching Android applications (notably YouTube) to add features like ad-blocking. The page is minimal but functional, with navigation links to Download, Contributors, and Donate sections, plus social links to GitHub, Twitter, Discord, Reddit, Telegram, and YouTube. No contact email, phone, or postal address is listed, which is typical for open-source projects but unusual for commercial entities.

Infrastructure

Domain age is 1550 days (~4.25 years), registered via Cloudflare with valid SSL (Google Trust Services issuer, 61 days to expiry). Hosting IP 104.26.8.2 has zero abuse reports and a clean reputation score. No antivirus engines flag the page, and it does not appear on major browser blocklists. The site loads external resources from GitHub, Twitter, Reddit, Telegram, YouTube, and DMCA services — all legitimate third-party domains.

Domain History

The domain has been active for over four years and is actively maintained with announcements and community engagement. The project operates a separate counterfeits.revanced.app warning page and has legally acquired multiple fake domains to redirect users to the official site — evidence of deliberate anti-impersonation efforts.

Web Reputation

Independent trust aggregators rate the site 40/100 (questionable), citing mixed positive and negative reviews. Community forums (PrivacyGuides, Reddit, Techlore) generally endorse the official ReVanced tools as reputable and open-source. However, GitHub discussions and the project's own warnings highlight widespread counterfeit sites and unsafe pre-patched APKs from third parties that contain ads, tracking, or malware. The project explicitly advises users to download only from revanced.app or official GitHub releases.

Risk Factors
6
  • Independent trust aggregators assign a 40/100 score with mixed reviews, below the threshold for high confidence.
  • No formal business registration found; WHOIS privacy is disabled but company details are not publicly registered.
  • No contact email, phone, or postal address on the site — typical for open-source projects but limits accountability.
  • Project documentation extensively warns about counterfeit sites and unsafe third-party APKs, indicating active malicious impersonation in the ecosystem.
  • GitHub discussions report odd behavior from pre-patched APKs (popup ads, view farming), though not from the official revanced.app.
  • an independent review aggregator notes mixed positive and negative reviews and advises further research before use.
Positive Signals
5
  • Domain is 4.25 years old with consistent active maintenance and community engagement.
  • Zero antivirus detections across 92 engines; clean browser blocklists and sandbox results.
  • Hosting IP has zero abuse reports and a clean reputation score.
  • Official GitHub organization (revanced) with public repositories and transparent development.
  • Privacy-focused communities (PrivacyGuides, Techlore) and active subreddits (r/revancedapp) vouch for the official project's legitimacy and open-source nature.
AI Recommendation
If you are interested in using ReVanced to customize Android apps, download only from the official revanced.app or the GitHub releases page (github.com/revanced). Avoid pre-patched APKs from third-party sites, as they may contain ads, tracking, or malware. The official project is open-source and maintained by a reputable community, but the ecosystem is actively targeted by counterfeiters.
Scam network detected
1 linked domain correlated

The official ReVanced project actively combats counterfeit impersonation by operating counterfeits.revanced.app (a warning and redirect page) and acquiring multiple fake domains. This indicates a known scam ecosystem targeting ReVanced users, though the official revanced.app itself is not part of the fraud network.

counterfeits.revanced.app
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for revanced.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
4.2 yrs
Registered Mar 2022
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Independent review aggregators
40/100 · questionable
Average across 1 independent review aggregator.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 3 positive
Web ratings
Scores pulled directly from third-party trust & review sites
ScamAdviser
40/100
Questionableopen
Key findings
7 headline facts from open-web research
  • Official website for open-source ReVanced project (GitHub: revanced), successor to discontinued Vanced YouTube mod; provides ReVanced Manager and patches for customizing Android apps including ad-blocking on YouTube.
  • Domain age approximately 1550 days (~4.25 years); actively maintained with announcements, Discord, Reddit (r/revancedapp), and GitHub repositories.
  • Scamadviser reports average/reasonable trust score but notes mixed positive and negative reviews, hidden WHOIS, and advises further research.
  • Project team operates counterfeits.revanced.app warning page stating "The only official ReVanced website is revanced.app" and has legally acquired multiple fake domains to redirect users.
  • Community discussions (PrivacyGuides, Reddit, Techlore) generally view official ReVanced tools as reputable and open-source but emphasize trusting developers and avoiding pre-patched APKs from third-party sites due to malware risks.
  • No direct evidence of malware on revanced.app itself; warnings focus on counterfeit/fake sites and unofficial prebuilt APKs that may contain ads, tracking, or other unwanted behavior.
  • GitHub discussions confirm official downloads only from revanced.app or GitHub releases; pre-patched APKs from other sources not endorsed and reported to cause issues like popup ads or view farming.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Scamadviseropen

    "We found both positive as well as negative reviews for this site... The company has been reviewed both very positively as well as negatively. This is unusual. We, therefore, advise you to do more research."

  • GitHub ReVancedopen

    "It is not safe, because it's not clear how or with what code those apps were patched with... We've had reports of odd behavior when users installed prepatched apps, ranging from popup ads... to unknown random videos showing up in users watc"

Positive reviews (3)
Quotes indicating the site is legitimate.
  • PrivacyGuides Forumopen

    "ReVanced’s maintainers and contributors are reputable people, I doubt they would do anything malicious."

  • r/revancedappopen

    "ReVanced - Links, Guides, Help, and FAQs"

  • Techlore Forumopen

    "I didn’t even know such things existed, and didn’t even notice anything shady : my phone wasn’t slower, my accounts were not hacked"

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Independent trust aggregators rate revanced.app as questionable (40/100), citing mixed positive and negative reviews. an independent review aggregator advises further research due to hidden WHOIS data and the mixed sentiment, though it does not flag the site as a confirmed scam.

GitHub discussions and the project's own documentation emphasize that the official revanced.app is safe, but warn extensively about counterfeit sites and unsafe pre-patched APKs from third parties. Users report issues like popup ads and view farming from unofficial sources, not from the official site.

Community forums (PrivacyGuides, Reddit, Techlore) generally view the official ReVanced project as reputable and open-source, with maintainers considered trustworthy. The project operates counterfeits.revanced.app to warn users and has legally acquired multiple fake domains to redirect to the official site.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles5
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Links to 10 social profiles.

Domain & Encryption

Domain History
Age4 years old
RegistrarCloudFlare, Inc.
RegisteredMar 19, 2022
ExpiresMar 19, 2030
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 17, 2026 (61d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://revanced.app/
  • 2200https://revanced.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat revanced.app as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked revanced.app as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • revanced.app currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. revanced.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 61 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • revanced.app is 4.2 years old, registered on 3/19/2022 through CloudFlare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report revanced.app as clean.
  • No. revanced.app is not currently listed on the major browser blocklist feeds that modern browsers use.
  • revanced.app resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Independent trust-rating sites currently show the following for revanced.app: ScamAdviser: 40/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.

Final Verdict

0
Trust / 100
Final Verdict·revanced.app
SUSPICIOUS

ReVanced is the official open-source successor to the discontinued Vanced YouTube mod, with a 4.25-year-old domain and active community support. However, independent trust aggregators rate it as questionable, and the project itself warns extensively about counterfeit sites and unsafe third-party APKs — a sign that malicious actors actively impersonate it.

If you are interested in using ReVanced to customize Android apps, download only from the official revanced.app or the GitHub releases page (github.com/revanced). Avoid pre-patched APKs from third-party sites, as they may contain ads, tracking, or malware. The official project is open-source and maintained by a reputable community, but the ecosystem is actively targeted by counterfeiters.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.