Help with guidance to hack a scam website?

[5]

Hello,
I have a friend who for some reason believed in the scammers of https://comma-entertainmentpro.com/ . They lock in the persons so they will put in more money with the hope to get back his own money and a "commission" they were quiet helpful when I looked at their communication.

I know he will not be able to get back the money but I would like to do something anyway.

so far I have written a python script that register new users and registered a couple of thousands of users. They had to close the registration for a while but are we back again. I have started using different APIs that I identified to continue send POST commands. next I will start using GET to send multiple request.

The python script starts multiple process with multiple threads.

Now I would like to know if you have other ideas for measures I can take?

[30]

if the page has a search box or some fields to type in you can see if they are sanitized or if it allows you to execute payloads, that way you can find a space where you can enter.

[5]

if the page has a search box or some fields to type in you can see if they are sanitized or if it allows you to execute payloads, that way you can find a space where you can enter.

Unfotunatly there are none. At the moment I have used the inspection mode on the browser and Wireshark. But inspection mode was enough. I have mapped the available API for the website and am trying to use that.
But the only API that I found able to affect the database or backend is the register API.

[97]

goodluck reported their website at the host

Like my posts for sharing more