[jabroni_salad]

In Defender for Exchange (or whatever they call the filter in exchange online these days), there is a checkbox that blocks .xyz and .biz as a bundle. Why those two? dunno, but microsoft especially hates them.