After redirecting the http request to another URI multiple windows are opening on browser

you can use browser's developer tool to track which http transaction triggers the new window open.
press F12 in browser to open it.

browser by default sends referencing webpage in addres in Referer and Origin request header.
xyz.com might be configured to not allow other sites as referencing source.
internet banking websites usually implements this method to prevent spoofig etc.