Why do companies not use legit emails?

I just received an email from Agoda and this is the address:

wallet@sg.newsletter.agoda-emails.com

I find it totally insane that companies use non-domain emails and want people to click links and log in

Last year I had an anti-phishing email from Santander - it was not even from their domain and not verified!!