The public site is a static Vercel deploy. The public API is a separate hostname. Report suspected abuse via Contact.
Secrets, credentials, or Track-1 packages through public forms. Law-enforcement package requests go through /for-le and Contact.