Security professionals warn that Googles new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.