That first link looks like it came from email that went through Office 365, probably copy pasted. We see the same in our Office 365 environment, links are re-wr

That first link looks like it came from email that went through Office 365, probably copy pasted. We see the same in our Office 365 environment, links are re-written to redirect through outlook.com's safelinks service.