You might want to serve your javascript and submit your forms for a security-related website from a domain not called something like "toxiccode.com"…