I'm seeing it too. Probably people have used domains like amazon.XYZ for phishing in the past.