worth noting many of these security software companies get their phishing site lists from third parties, someone is probably mass reporting .win to these third party malware/phising site list aggregators and it may not be a concious decision by the antivirus company they are aware of.

Only way to tell is to see how they react when you report a false positive and ask to have it whitelisted.