.zip is seriously a bad idea.

People are already scooping up domains like microsoft-office.zip to phish for credentials. Did nobody think this through even a little bit?