Hi @Dillon Silzer and @ajkuma thanks for the follow up. Thought i had responded to Dillon's questions earlier but i'm not seeing anything here in the thread.
The sender was Azure ******@secureserver.net and i have a 1/2 dozen azure subscriptions, and associated azure ad tenant with only 3 of this currently having active subscriptions. The email made no mention of which one this was provisioned in and looking at "dns zones" resource blade in each with an active subscription i'm seeing now mention of the zone that is set to renew here in late july.