Recommendation

Proceed

Overall Summary

Safe

Why we think so

Immich.app is a self-hosted photo and video management platform with a strong focus on user privacy and open-source development. It handles around 620,000 monthly visits, mostly from the US, Germany, and China. The website uses recognized technologies such as Cloudflare CDN and HTTPS for security. Reviews praise its fast performance, AI features like face recognition, and privacy controls, but note challenges with mobile app reliability for large backups and some restoration bugs. There are no credible scam reports or lawsuits identified. Despite some rapid development issues, Immich.app is generally seen as a trustworthy service suitable for users comfortable with self-hosting.

Confidence Score

87%

Risk Insights

📈

Strong User Engagement

Over 600,000 monthly visits

Traffic mainly from US, Germany, China

Balanced sources: direct and search

🛡️

Clean Security Record

Valid SSL certificate through 2026

No phishing or scam blacklists

Uses Cloudflare CDN and HTTPS

✅

Trusted Brand With Trademark

IMMICH trademark registered

Owned by FUTO Holdings Inc.

No lawsuits or disputes detected

Contradictory Signals

Google flagged some test or preview URLs as dangerous due to misclassification, but main domain is clean and issue resolved.

Signal A: No scam reports or phishing blacklists

Signal B: Past Google Safe Browsing flags on preview sites

Category Scores

Identity 85/100

Reputation 90/100

Technical 88/100

Content 85/100

Legal 80/100

Business Validity 88/100

Red Flags & Warnings

Google Safe Browsing previously flagged some Immich preview sites likely due to mistaken phishing detection, though resolved on main domains.
Some user reports describe bugs with mobile app backups and photo restoration issues for large libraries impacting reliability.

🔎 Detailed Checks & Analysis

Traffic and Engagement Check

Score: 85/100

Passed

"Monthly visits around 620K with leading traffic from US, Germany, and China confirm genuine usage."

Reason: Site shows healthy, consistent monthly visits with a good mix of direct and search traffic.

Technical Security Check

Score: 88/100

Passed

"Infrastructure employs recognized tech such as Cloudflare and standard security protocols."

Reason: Uses Cloudflare CDN, HTTPS, and has a valid SSL certificate not expiring soon.

Blacklist and Phishing Check

Score: 95/100

Passed

"Google Safe Browsing and crypto scam scanners report no risk."

Reason: Domain is not on any current phishing or scam blacklists.

Reputation and Community Feedback

Score: 80/100

Passed

"Feedback includes praise for AI features but warns about mobile app backup and restoration issues."

Reason: No credible scam reports; positive reviews emphasize privacy and open-source benefits though noting some bugs.

Legal and Trademark Standing

Score: 80/100

Passed

"No active litigation identified; licensing and trademark status stable."

Reason: No lawsuits reported; trademark 'IMMICH' registered by a legal entity.

Contact and Ownership Transparency

Score: 85/100

Passed

"Direct communication channels and developer presence support legitimacy."

Reason: Contact email, GitHub repository, and social media links publicly available.

Your Next Steps

1

Use the official Immich app and website links to avoid unofficial or phishing versions.
2

Keep the app updated to benefit from patched vulnerabilities, especially OAuth2 fixes.
3

For self-hosting, follow recommended security best practices like deploying reverse proxies.
4

Monitor community forums and GitHub issues for ongoing developments or reported concerns.

Evidence & Citations

Immich.app Review Summary and User Feedback
Contains detailed user reviews and performance feedback highlighting strengths and known issues.
Security Vulnerability (CVE-2025-43856) Details
Describes a patched OAuth2 security vulnerability affecting immich.app.
Trademark Registration for IMMICH
Shows live trademark registration owned by FUTO Holdings Inc.
Google Safe Browsing and Blacklist Status
No current blacklisting or phishing flags for immich.app domain.

🕵🏻 Keep investigating

Recommended →

🌐 Vet another Website

Run another instant due diligence scan on any domain. Verify before you subscribe or shop!

Vet suspicious ticket resale websites

Scammers clone legitimate ticket exchanges or invent resale hubs that require wire transfers and Zelle deposits. ScamAI...

Read playbook →

Evaluate investment webinar funnels

Webinars promise secret trading signals but quietly upsell unregistered brokers or payment wallets. ScamAI inspects regi...

Read playbook →