When a domain looks like a file
Google opened .zip (and its cousin .mov) to the public in 2023. Security researchers immediately pointed out the problem: people see ".zip" and think "compressed file," not "website." Chat apps and email clients that auto-link domain names can turn a harmless-looking "photos.zip" into a link to an attacker's site.
The TLD itself isn't malicious, and many .zip names are perfectly legitimate. But train your eyes — and your users — to hover before clicking.
Good for
- Brands built around the word "zip" (fast, zipping around)
Watch out for
- Links like "invoice.zip" can be mistaken for file attachments
- Some email and chat tools auto-link .zip names, which phishers exploit
.zip by the numbers
.zip is a generic top-level domain (gTLD), aimed at tech & startups. Charleston Road Registry Inc. runs the registry under a contract with ICANN.
.zip entered the DNS root zone on September 15, 2014, 12 years ago. It came out of ICANN's New gTLD Program, the 2012 application round that grew the root from 22 generic TLDs to well over a thousand.
Charleston Road Registry Inc. operates a large portfolio of 46 TLDs, including .ads, .android, .app, .boo and .cal.
On the technical side, .zip is served by 5 authoritative name servers, every one of them reachable over IPv6. It is also DNSSEC-signed: the root zone carries a DS record for .zip, which lets validating resolvers check its answers cryptographically. Registration data is published over RDAP.
Same registry, other endings
45 other TLDs share this operator.
.zip FAQ
Is .zip a real domain?
Yes. Google Registry operates .zip, and it has been open for public registration since 2023.
Why is .zip considered risky?
Because it looks like a file extension. A message that mentions "report.zip" may turn into a clickable link to a website, which attackers can use for phishing.
What does .zip mean?
.zip is a generic top-level domain named for the word "zip", and it's aimed at tech & startups. It doesn't belong to any country.
What is .zip used for?
.zip is mostly used for tech & startups. Like most gTLDs, it's a label of intent rather than a guarantee — check the site, not just the ending.
What country is .zip?
None. .zip is a generic top-level domain, so it isn't tied to any country.
Who owns the .zip domain extension?
Charleston Road Registry Inc. operates .zip as its registry, under a registry agreement with ICANN.
When was .zip created?
.zip was delegated to the DNS root zone on September 15, 2014.
Is .zip a valid domain?
Yes. .zip is an active top-level domain in the DNS root zone, delegated in 2014, so .zip addresses work in every browser.
Can I buy a .zip domain?
.zip names are sold through ICANN-accredited registrars. Some gTLDs restrict who can register, so read Charleston Road Registry Inc.'s policy if you're unsure.
Is .zip DNSSEC-signed?
Yes, the root zone holds a DS record for .zip.
Sources
Data from IANA root zone version 2026102000. Last changed October 21, 2026. Spotted something wrong? Tell us.
