My guess is that these sites are relatively new and probably mass reported by bad-actors to make these domains show up as risky.

There was another post a while back of another service flagging .win domains, but was removed as a false-positive after the admin team/regular users contacted them.

I guess it’s better to always be wary but the above seems far more likely to me that this is just due to mass reporting by libtards in an attempt to delegitimize the site.