Ignoring the warning, I get served the plain .png file, without any javascript or other elements. I don't know why it's considered malicious, as it's one of the few no-nonsense file hosts I know of.