Google’s release of two new top-level domains, .zip and .mov, earlier this month has raised concerns among cybersecurity experts. These file extensions are commonly associated with ZIP files and videos encoded in the MPEG 4 format, respectively. The concern is that hackers could use these extensions to trick users into clicking malicious URLs. Some social media platforms and messaging apps now turn ZIP file names shared by users into clickable links, which could potentially lead to a website with malware. Cybersecurity startup Silent Push has already discovered a .zip website that mimics Microsoft’s login page, intended to trick users into sharing their login credentials. Chrome users could also be targeted by deceptive links embedded in web pages. However, Google argues that the potential risks associated with the new TLDs are manageable and can be addressed with existing breach prevention mechanisms. The TLDs also support a new cybersecurity technology called HSTS preloading, which ensures that browsers only connect to a website via an encrypted network connection.