If you are trying to reduce the chance that the URL endpoint will be used to make spam accounts, I think reCaptcha is your best bet (on the terms of its easy UX and easy to implement). Good luck whatever you choose :)
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
If you are trying to reduce the chance that the URL endpoint will be used to make spam accounts, I think reCaptcha is your best bet (on the terms of its easy UX and easy to implement). Good luck whatever you choose :)