Pawheadshots vs Thefacerating

One-time packs only, no subscription: Superstar Pack $19.90 (36 ultra-HD images: 30 included looks + 6 styles chosen, plus Employee ID, PawkedIn profile and Pet Resume); Me & My Human Pack $29.90 (30 owner-plus-pet portraits, 30 transparent PNG cutouts). USD, local tax/VAT added at checkout. Checked 2026-11-02 on the homepage pricing section and /studio - the site has no /pricing route (404).

Submitted via form 2026-11-03 02:39 UTC (contact field a third-party mail.grokbot.com alias, vban@) - editorial entry written independently from live pages fetched 2026-11-02 Pacific. Live: /, /studio, /me-and-my-human, /pet-resume, /resume, /breeds, /privacy, /terms all 200; /pricing, /about, /contact, /faq, /cookies, /refund 404. Operator named as Vban LLC in both policies; processors named by company (Cloudflare, fal.ai running OpenAI and Google models, Stripe and Link as merchant of record); retention stated as periods (uploads 3 days, images 7 days, IP counters 1-2 days, order records for tax); training use explicitly denied; commercial rights granted with the pack and revoked on full refund; 18+ rule. Analytics: Cloudflare Web Analytics is the only tracker on the fetched pages and the policy names it as cookieless - disclosure and instrumentation match. Checkout is wired, not announced: /api/checkout is a live POST route in the shipped client bundle and /api/orders answers GET 200 with an empty list; no purchase was attempted. No governing-law clause, jurisdiction or postal address anywhere (whole-page sweep of /terms for 'governing law', 'jurisdiction', 'courts', 'arbitration', 'address' returns zero). Domain registered 2026-10-30 14:25 UTC (Cloudflare registrar, NS johnathan/athena - a pair in no other ledger row); the name appears on a March 2026 .com drop list, so this is a re-registered generic pet-name domain, not a squat. Contact support@pawheadshots.com verified deliverable before any send: SMTP RCPT TO against Cloudflare Email Routing MX returned 250 2.1.0 Ok while a random local part returned 550 5.1.1, so the domain is not a catch-all (nothing sent on the probe).

Free on-device scan, then one-time reports: Starter USD 7.99, Pro USD 16.99, VIP USD 24.99, each marked 'One-time - no subscription'. Verified on three independent surfaces that agree - the homepage plan cards, the results-page paywall reached by running a real scan, and Terms section 6 - and confirmed purchasable by opening the checkout, which returned a live Stripe session (cs_live) titled 'TheFaceRating Starter Report' at USD 7.99 with merchant Vban LLC and Apple Pay / Google Pay offered. Studio credit packs are priced only in the Terms: 10 credits USD 9.99, 30 credits USD 19.99, one credit per rating plus render, credits do not expire. Free colour analyses are limited to two per day per hashed IP. No subscription price exists anywhere on the site.

submitted via form by vendor; editorial entry written independently. Received through FormSubmit on 2026-10-24 12:49 UTC from vban@mail.grokbot.com, no prior submission under this name or domain in the repository, the hold ledger or any mail folder. Live pages fetched 2026-10-24: /, /tools, /tools/face-shape-detector, /tools/attractiveness-test, /studio, /privacy, /terms, /sitemap.xml and /robots.txt all 200; /pricing, /privacy-policy, /terms-of-service, /about, /contact, /refund-policy, /sample-report, /refunds and /llms.txt all 404 (the nav's Pricing link is the homepage anchor, and Terms section 7 is the only refund text). Product behaviour verified rather than read: the free scan was run in a logged headless Chrome against the vendor's own sample image (/examples/ai-face-rating-sample.jpg) after instrumenting window.fetch and XMLHttpRequest - the scan produced 478/478 landmarks, 78/100 harmony, a face shape and per-region bands with zero outbound requests, and the following step posted to /api/scan/create a body of sha256 + geometry + celebrity match and no photo field when the consent step was declined. A result page was created at /scan/<uuid> with no account. The paywall there lists the same three one-time prices as the homepage and Terms, and clicking Unlock Starter opened a live Stripe checkout for USD 7.99; the checkout was abandoned and no payment was made. Analytics read from the shipped markup: GA4 G-VGC2RBRR2T preloaded and configured inline with anonymize_ip, allow_google_signals false and ad personalization off, plus an unnamed Cloudflare Web Analytics beacon. Domain registered 2026-09-15 (Spaceship), Cloudflare NS johnathan/athena, and no MX record at all, so every published @thefacerating.com address - privacy@ in the policy and Terms - cannot receive mail; the submission address on a separate domain resolves to AWS inbound SES and is the only working route we could identify. An SMTP RCPT probe against that host returned 550 5.7.1 'IP address blacklisted by recipient' for both the candidate address and a random local part, so the probe says nothing about the mailbox - SES is refusing this machine's IP, not the address; the real send left through Gmail's SMTP. Entity 'Vban LLC' with a Sheridan, Wyoming address and Wyoming governing law is named in the Terms but did not surface in a public company search. No name collision of consequence: 'The Face Rating' is descriptive, the nearest properties are the competing products the site itself names (TheFaceReport, Umax, Qoves, PinkMirror, FaceIQ Labs), and the product is already indexed by third-party directories (ainave.com, aisotools.com). Category submitted as Creative - accurate.