kbin.social seems to keep asking if I want to download a file when opening the page? Is this an xss? bug? what is this the filename usually has 6-9 characters of random letters