Before extracting, upload the .zip file to VirusTotal to check for flags from multiple antivirus engines. Note that "false negatives" are common for newly created malware.

If the "checker" is supposed to be open-source, look for the original Python or JavaScript files rather than a compiled .zip .

When dealing with "token checkers" distributed as .zip files, you must be extremely cautious: