The URL of the actual app is terrifying. I was certain the site had been hijacked when it redirected to the most suspicious looking URL imaginable at the domain "drv.tw": https://lzdmsmujepoc2xlgp13srg-on.drv.tw/Don%27tTouchYaFace/... (HN shortens this, but I think the real kicker is the '.com.html' at the end)