Your welcome.
#1 - You are correct - every alias email address in an account always uses the same mailbox storage
#2 - Whenever you get a suspicious message (from anyone) asking you to click on a link in the message, it is always a good idea to first check the underlying URL that the link points to by hovering your mouse over the link or right-clicking on the link --> select <Copy> --> paste it into any text editor.
#3 - While this isn't directly related to your original question, the following is a standard reply I give to those who ask about a sudden increase in <spam> and <unexpected> log in attempts which you may find of interest. It may explain how the spammer got your Hotmail address
The usual source of a sudden increase in failed login attempts or spam mail received is that the email address was harvested by a hacker who breached a data base on a website where you subscribed to something. That database gets repeatedly sold to other hackers/spammers on the dark web.
Many people think that hackers penetrate the actual Microsoft servers to gain access to email accounts when that isn't the case. Instead they gain access to an actual account via any number of other ways including phishing emails.
You can check to see if the email address comes up on a breached database on the following website created/run by Microsoft MVP Troy Hunt.
https://haveibeenpwned.com/
Pwned websites
https://haveibeenpwned.com/PwnedWebsites#Epik
Other articles that may be of interest
The 773 Million Record "Collection #1" Data Breach
https://www.troyhunt.com/the-773-million-record...
How Do Spammers Get My Email Address?
https://www.lifewire.com/how-do-spammers-get-my...
Protect your privacy on the internet
https://support.microsoft.com/en-us/help/409145...
*** if you find that the email address was on a breached website where a password was also entered, what you really do want to do is make sure that the same email address/password combination is NOT being used on other sites (i.e. Social Media, Facebook, Paypal, Amazon etc) and if that password is still the one being used on your email account - make sure to change it immediately. Not a question of <IF> a hacker will test those account(s) - just a matter of <WHEN>
Required Forum Disclaimer: The above links is a non-Microsoft website. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.