See: htxp://www.shadyurl.com/index.php?e=captcha
and where it goes could also better be blocked: hxtp://www.5z8.info
See: https://www.mywot.com/en/scorecard/5z8.info?utm_source=addon&utm_content=popup
Stumbled upon while looking for hackable uri threats…
polonus (volunteer website security analyst and website error-hunter)