If some good soul would compile a list of all the fake exch.net domains and list them one per line we could add them to the Domainsure Crypto Defender threat feed:

https://domainsure.com/rpz-threat-feeds/

That gets pushed out to resolver services (like Quad9) which can dampen the reach of known phishing domains before they get taken down.