Avoid it. Apache's SpameAssassin flags several TLDs including .xyz as 'suspicious' nTLD[1].

[1]: https://github.com/apache/spamassassin/blob/trunk/rulesrc/sa...