This domain should be the one that belongs for your Group, that is definitely, this domain needs to be the a person you've got registered with Microsoft 365. For more information, see Include a domain to Microsoft 365. Quad9 provides quite capable performance, too, with DNSPerf at this time https://zanderkeocn.onesmablog.com/domain-privacy-an-overview-66851437