Always hover your mouse over a link to see the actual destination in the bottom corner of your browser.
The arrival of these domains means we have to update our "internet street smarts":
The New Frontier of Phishing: Why Amazon.zip is a Security Nightmare
These tools are smarter than humans; they won't autofill your credentials on amazon.zip because they know it isn't the real amazon.com .
Instead of clicking links in emails, go directly to Amazon.com in your browser and check your "Orders" tab manually.
You land on a pixel-perfect replica of the Amazon login page, hand over your password, and give hackers full access to your account. Why This is Different From Traditional Phishing