[knotty66]

I wondered if there is anything different about the second (view source) request that could be detected and a different response provided - but I don't think so after a quick look with WireShark.

[sesqu]

Well, you could set up a temporary client blacklist based on cookies or IP addresses.