Question: why are xyz domains so cheap?
Answer: xyz domains were first introduced they were very inexpensive. I just checked and they are still very inexpensive; less than $1 USD per year. Because of this, spammers, phishers, and hackers have jumped at the chance to use these domains to try and scam people.