: Once you see the contents, look for dangerous extensions like .exe , .bat , or .js . If you expected a document but see an executable, delete the file immediately.

: Before opening the .zip , upload it to VirusTotal to scan it with dozens of different antivirus engines.

Read the contents of a zipped file without extraction? - Super User