Since Bearer token is exposed we can use Duolicious API to do all kinds of things...

Scrolling a lot of profiles in search using Everyone and top100 clubs, collecting the UUIDs - Universally Unique Identifiers.

We can see them because when scrolling you load profile pictures from profiles with said UUID.

Using this information we can use a script that will visit every profile in a list of UUIDs, while avoiding the Rate limit error.

This way you can also circumvent the intro limit which is 5-10 intros a day, based on my experience.

This CAN SHADOWBAN you, you should separate the scripted visits, maybe max 1000 visits per session, up to 2000 per day (2000/day with 2 sessions with 1000 requests, was tested without a suspension) Other things that can trigger a shadowban/ban are NSFW pictures including GIFs and hateful or disturbing language that might deem you as reportable.

The list of UUIDs is not incomplete, due to scrolling being allowed up to about 400-500 profiles, so there needs to be more work done with the filters to see the whole userbase.