com to microsoft.com: Authoritative AAAA records exist for ns1-39.azure-dns.com, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
microsoft.com/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.