It’s funny; I know the usual advice is to stick to com/net/org, but I think there’s a certain crowd online that’s all about the wacky TLDs. I’ve definitely seen devs and artists with TLDs like .pizza and .rocks (not a portfolio, but https://stoneclub.rocks as example). I’ve seen enough of these sites that something like https://sh.itjust.works doesn’t make me blink and I trust I’d be able to tell a phishing site from folks playing with TLDs, but I can totally understand how that could be off-putting without that sort of background.
Again, I think there’s a certain crowd of internet users who are familiar with fun domain names and enjoy playing in that space. My example is particularly innocuous (a club of people who love stone megaliths in the UK). I also think the fun and playful names aren’t difficult to tell from phishing sites, but maybe I have a gut instinct developed from exposure to the folks who do use playful domains.
My point is that thinking these quirky links look dangerous is specific to a certain social or generational group, and it wouldn’t hurt for them to keep an open mind about URLs/TLDs.
(Adding an icon to remote fediverse instance links is a nice idea too.)