Clicking download buttons on unverified sites usually triggers a cascade of pop-ups, redirects, and malicious browser extensions.