diff --git a/webapp/home/api.py b/webapp/home/api.py
index e7f2bc31..f9b4f477 100644
--- a/webapp/home/api.py
+++ b/webapp/home/api.py
@@ -1,7 +1,6 @@
 """API endpoints."""
 
 import json
-from django.core.exceptions import SuspiciousOperation
 from django.http import JsonResponse, HttpResponse, HttpResponseBadRequest
 
 from .forms import SupportRequestForm
@@ -33,7 +32,7 @@ def dismiss_notice(request):
 def subdomain_feedback(request, subdomain):
     """Process feedback form for *.usegalaxy.org.au subsites."""
     if request.method != 'POST':
-        raise SuspiciousOperation
+        return HttpResponseBadRequest()
     form = SupportRequestForm(request.POST)
     if form.is_valid():
         form.dispatch(subject=f"{subdomain.title()} subdomain feedback")