If a custom domain is parked or proxied, Azure can't verify it, so make sure you have a direct CNAME record mapping to your selected storage account endpoint with your DNS provider before you deploy the template