It’s for the cheap “1.111B” 6 or 7 digit xyz domains. I think it’s a recent thing, but they’re basically being bought up en masse and used for botnets/spam, so as an attempt to stem the flow the .xyz registry asks for ID