Android has a lot of developers and most of them are enthusiatic. They develop good stuff like Magisk and Xposed but don't care about marketing, and therefore such applications don't have good-looking official websites. This gives scammers chances to build websites "for" those apps and advertise or even spam them, for example here's some spam records of a fake website for YouTube Vanced. Very unintuitively, the official website for YTV is https://vanced.azurewebsites.net/ (seen on XDA), which doesn't even turn up on the first page of Google result. Similar things also happens for Lucky Patcher (doesn't have its own domain) or Magisk (doesn't have a website at all), etc. Fortunately, apps like Titanium Backup or (previously) SuperSU that are available from Google Play can be easily verified.
Shall we create our list of official websites for those ncie stuff whose websites are often mistaken or surpassed by spammers?