While this is an interesting website, which is it asking to take photos me record audio?
The site doesn't use HTTPS, perhaps someone is tampering with your connection? Some ISPs have been known to do that, but not for very nefarious purposes AFAIK.
Is that still legal considering the GDPR?