Yes that's 100% because aol.com is NOT a Microsoft address, it is a third party free email service anyone can sign up a free account and send emails from there.
A leigitimate email from Microsoft regarding your account always comes from domains ending in @accountprotection.microsoft.com