Comment by joshellington

Wow, they're using Stripe for payments. Here's their API key: pk_live_1vI9jQQVPUd9XXtXEXxRBMDL

Just reported them through the generic Stripe contact form (all I could quickly find).