Recently .ZIP was added as a valid top level domain (TLD). What this means is there will eventually be websites like https://google.zip that will work the same as https://google.com (for example). But this can cause some confusion in malicious emails or links that may appear to be a file when in fact they take you to a malicious website. An example of this might look like:
Please download this totally safe attachment: sketchy-link.zip
But instead of downloading a file, you’ll be taken to https://sketchy-link.zip where it will have the ability to run scripts and potentially compromise your computer.
CourseVector has created a security poster for use to illustrate the dangers of this new TLD.
https://cybersafework.com/wp-content/uploads/2023/08/July-Bonus-Poster.pdf