Instead of having the client brute-force everything, run this script server-side once a day/week, assume the list of taken domains stay taken, and just have the client double-check the available names.