Yeah that’s the exact reason why I dislike the .zip TLD, and the same goes for .mov. The TLDs can be easily abused to look like something they’re not to trick people into visiting their website that downloads something malicious.