A fake model leading to a fake CAPTCHA... what could go wrong?