Is this suspicious: https://microsoft.c1ic.link/0B7jqd_invoice.vbs ?

I think Microsoft have their own version of this

Msn.com Office.com Sharepoint.com Hotmail.com Etc, plus all the subdomains they insert before them. It makes it very easy to create phishing emails that look plausible.