I was wondering if there was anyway to get the site taken down and if there was a way to get my friend's money back.
I'd appreciate any help, thanks in advance.
The more people that report it, the more likely it is that at least Chrome users will get a warning when visiting it.
You could also try reporting it to the TLD owner of .online which is Radix: https://radix.website/report-abuse
* Report to https://safebrowsing.google.com/safebrowsing/report_phish/
* Report to https://www.phishtank.com (account required)
* Use a WHOIS lookup service for the hostname, find who's the registrar and submit an abuse report to them.
- you can contact their hosting/DNS provider by checking the whois entry for the domain and the resolved IP
- you can report them to industry big names like Google (through safe browsing https://safebrowsing.google.com/safebrowsing/report_phish/?h...)
- you can report them to community projects like Phishtank (they get used by opendns and others)
- you can find a local LE provided website where you can report it (not sure what your local would be but Australia has https://www.scamwatch.gov.au/ for example)