Maybe their email domains, I don't think scammers can get a hold of domains like "microsoftsupport.com"
OK, looks like "microsoftsupport.com" is taken, but GoDaddy is happy to offer me alternatives like microsoftsupport.app, microsoftsupport.site, microsoftsupport.tv, or microsoftsupport.uk that should work equally well for scam purposes. Or microsoftpcsupport.com is available, if a ".com" is particularly desirable.
aka.ms
Or “cudaserv.com”, which is auto enabled link scanning for Office365