: Hover over the link. If it shows https://gaypal.zip , it is a website, not a local file.

: Scammers can send a link like gaypal.zip . While it looks like a file name, your browser or messaging app (like Discord or Slack) may treat it as a live URL that takes you to a malicious website.

: If a friend sent this to you, their account may have been compromised . Reach out to them through a different platform to confirm.

: Malicious actors often use provocative or meme-based names (like "gaypal") to pique curiosity and bypass a user's natural caution.