Yes, and I think this case gets somewhat more notoriety because the phishing site has the .com domain and the legitimate one has a .org. Like it or not, .com a

Yes, and I think this case gets somewhat more notoriety because the phishing site has the .com domain and the legitimate one has a .org. Like it or not, .com adds perceived trustworthiness and works as a branding signal, especially in these times of VCs throwing large amounts of money at branding and buying 3 to 6 letter .com domains, but a small project like 7zip cannot afford that kind of expense.