I get vanced-manager(com) and apkpure in the top 3 along with the official site.

There is no download link on the official site, and the type of end user that would usually use this does not know what a hash or signature is.