What happens is, they type in your address regarding web browser and are contacting your hosting service and chances are they'll see the files that set up using cPanel and Ftp.
Don't ever download zip files or attachments when it is an email that says it's from Facebook. https://7Zip.site