>This little script would send him about 5000 different combinations of the above parameters in a completely random fashion.

More work, but with potential to waste more of the scammer’s time, would be to fake up requests corrupted in a way that suggests your browser config exposes some subtle bug, say a race condition, in his scripts. Might keep him busy for days …