This domain need to be the one that belongs in your Group, that may be, this domain needs to be the just one you have registered with Microsoft 365. To find out more, see Incorporate a domain to Microsoft 365. Quad9 provides very able performance, also, with DNSPerf at https://myleswedoy.bloggip.com/26708159/the-fact-about-nginx-ssl-certificate-install-that-no-one-is-suggesting