A POC tricking the end user of a captcha to reveal his browser history