`.internal` and `.local` are safe and won't be used in the future. There are reserved for internal networks

while .local is reserved, it's reserved for mDNS, and should be avoided on things like active directory. using an internal subdomain of a registered public domain is best practice. .internal is also okay.