Google's .zip top level domain has been opened up for public registration, and criminals are already using .zip sites in phishing campaigns.