.zip top level domains being used in cyber attacks

If <a href="https:&#x2F;&#x2F;microsoft-office.zip" rel="nofollow">https:&#x2F;&#x2F;microsoft-office.zip</a> can fool people then why not <a href="https:&#x2F;&#x2F;microsoft-office.info" rel="nofollow">https:&#x2F;&#x2F;microsoft-office.info</a> or <a href="https:&#x2F;&#x2F;microsoft-office.app" rel="nofollow">https:&#x2F;&#x2F;microsoft-office.app</a> or <a href="https:&#x2F;&#x2F;microsoft-office.ninja" rel="nofollow">https:&#x2F;&#x2F;microsoft-office.ninja</a>?

&gt; It seems that Google has reduced the registration price to $15 per year for a .zip domain last week, which appears to be less than halve the previous price. The price drop appears to have increased interest for .zip domains, and some new registrations are already used in phishing campaigns.<p>It is interesting that $15 a year is enough savings to justifying starting a new phishing attempt. I assumed there was so much money in phishing that an extra ~$1.05 a month could be easily absorbed.<p>Either way, I&#x27;m shocked that a .zip domain was ever approved. This should have been obvious for whatever mysterious board approves TLDs.

And here I thought Google purchased those TLDs to prevent spoofing and phishing attempts. Not to start selling domains under each.

Isn&#x27;t this a good chance to provide the public a way to save their time for those that are stuck in terminal only land.

Are there any TLDs that aren&#x27;t being used in cyber attacks?