These are all the websites Windows 10 connects to after a clean install

Windows 10 has always had a bad reputation for snooping on users. While that was a valid issue at the start, each new feature update has made changes to the privacy side of the operating system, and users now have much greater control over things.

When you perform a clean install of Windows 10, the operating system connects to a large number of sites for different purposes, including -- naturally enough -- to send and receive email, download apps and security updates, and so on. The sheer number of endpoints that the operating system connects to might surprise you however. It's a very, very long list.

SEE ALSO:

Microsoft has released details of which endpoints Windows 10 1709 (Fall Creators Update) and 1803 (April 2018 Update) connect to following a clean install.

This list was created by installing the OS on a virtual machine using the default settings and leaving it running without user interaction for a week.

Most of the first batch of sites are for Windows 10 1709 onwards, but any that are for 1803 are marked as such under Destination.

Windows 10 Enterprise connection endpoints

APPS    
Weather app Live Tile  
Source processProtocolDestination  
explorerHTTPtile-service.weather.microsoft.com  
 HTTPblob.weather.microsoft.com (1803)  
OneNote Live Tile  
Source processProtocolDestination  
 HTTPScdn.onenote.net/livetile/?Language=en-US  
Twitter updates  
Source processProtocolDestination  
 HTTPSwildcard.twimg.com  
svchost.exe oem.twimg.com/windows/tile.xml  
Facebook updates  
Source processProtocolDestination  
  star-mini.c10r.facebook.com  
Photos app  
Source processProtocolDestination  
WindowsApps\Microsoft.Windows.PhotosHTTPSevoke-windowsservices-tas.msedge.net  
Candy Crush Saga  
Source processProtocolDestination  
 TLS v1.2candycrushsoda.king.com  
Microsoft Wallet  
Source processProtocolDestination  
system32\AppHostRegistrationVerifier.exeHTTPSwallet.microsoft.com  
Groove Music  
Source processProtocolDestination  
system32\AppHostRegistrationVerifier.exeHTTPSmediaredirect.microsoft.com  
   
CORTANA AND SEARCH  
Images for Store suggestions  
Source processProtocolDestination  
searchuiHTTPSstore-images.s-microsoft.com  
Cortana greetings, tips, and Live Tiles  
Source processProtocolDestination  
backgroundtaskhostHTTPSwww.bing.com/client  
Configures parameters  
Source processProtocolDestination  
backgroundtaskhostHTTPSwww.bing.com/proactive  
Report diagnostic  
Source processProtocolDestination  
searchuiHTTPSwww.bing.com/threshold/xls.aspx  
   
CERTIFICATES   
Checks trusted authorities for updates  
Source processProtocolDestination  
svchostHTTPctldl.windowsupdate.com  
Downloads fraudulent certificate list  
Source processProtocolDestination  
svchostHTTPctldl.windowsupdate.com  
   
DEVICE AUTHENTICATION  
Authenticate a device.  
Source processProtocolDestination  
  dmd.metaservices.microsoft.com.akadns.net  
 HTTPdmd.metaservices.microsoft.com  
   
DEVICE METADATA  
Retrieve device metadata  
Source processProtocolDestination  
  dmd.metaservices.microsoft.com.akadns.net  
 HTTPdmd.metaservices.microsoft.com (1803)  
   
DIAGNOSTIC DATA   
Connected User Experiences and Telemetry   
Source processProtocolDestination  
svchost cy2.vortex.data.microsoft.com.akadns.net  
Connected User Experiences and Telemetry   
Source processProtocolDestination  
svchost v10.vortex-win.data.microsoft.com/collect/v1  
Used by Windows Error Reporting  
Source processProtocolDestination  
wermgr watson.telemetry.microsoft.com  
 TLS v1.2modern.watson.data.microsoft.com.akadns.net  
   
FONT STREAMING   
Download fonts on demand  
Source processProtocolDestination  
svchost fs.microsoft.com  
  fs.microsoft.com/fs/windows/config.json  
   
LICENSING    
Online activation and app licensing  
Source processProtocolDestination  
licensemanagerHTTPSlicensing.mp.microsoft.com/v7.0/licenses/content  
   
LOCATION    
Location data  
Source processProtocolDestination  
 HTTPlocation-inference-westus.cloudapp.net  
   
MAPS    
Check offline map data  
Source processProtocolDestination  
svchostHTTPS*g.akamaiedge.net  
   
MICROSOFT ACCOUNT
  
Account sign-in  
Source processProtocolDestination  
  login.msa.akadns6.net  
system32\Auth.Host.exeHTTPSauth.gfx.ms  
   
MICROSOFT STORE
   
Windows Push Notification Services (WNS)  
Source processProtocolDestination  
  *.wns.windows.com  
Revoke malicious app licenses  
Source processProtocolDestination  
 HTTPstorecatalogrevocation.storequality.microsoft.com  
Download app image files  
Source processProtocolDestination  
 HTTPSimg-prod-cms-rt-microsoft-com.akamaized.net  
backgroundtransferhostHTTPSstore-images.microsoft.com (1803)  
Communicate with store  
Source processProtocolDestination  
 HTTPstoreedgefd.dsx.mp.microsoft.com  
 HTTPpti.store.microsoft.com  
 TLS v1.2cy2.*.md.mp.microsoft.com.*.  
svchostHTTPSdisplaycatalog.mp.microsoft.com (1803)  
   
NETWORK CONNECTION STATUS INDICATOR
Detects Internet connectivity  
Source processProtocolDestination  
 HTTPwww.msftconnecttest.com/connecttest.txt  
   
OFFICE    
Office 365 portal's shared infrastructure  
Source processProtocolDestination  
  *.a-msedge.net  
hxstr *.c-msedge.net  
  *.e-msedge.net  
  *.s-msedge.net  
 HTTPSocos-office365-s2s.msedge.net (1803)  
Office 365 portal's shared infrastructure  
Source processProtocolDestination  
system32\Auth.Host.exeHTTPSoutlook.office365.com  
Office app metadata  
Source processProtocolDestination  
Windows Apps\Microsoft.Windows.PhotosHTTPSclient-office365-tas.msedge.net  
   
ONEDRIVE    
Automatically update URLs  
Source processProtocolDestination  
onedriveHTTP \ HTTPSg.live.com/1rewlive5skydrive/ODSUProduction  
OneDrive for Business  
Source processProtocolDestination  
onedriveHTTPSoneclient.sfx.ms  
   
SETTINGS    
Apps dynamically update configuration  
Source processProtocolDestination  
dmclient cy2.settings.data.microsoft.com.akadns.net  
Apps dynamically update configuration  
Source processProtocolDestination  
dmclientHTTPSsettings.data.microsoft.com  
Apps dynamically update configuration  
Source processProtocolDestination  
svchostHTTPSsettings-win.data.microsoft.com  
   
SKYPE    
Retrieve Skype configuration values  
Source processProtocolDestination  
microsoft.windowscommunicationsapps.exeHTTPSconfig.edge.skype.com  
   
WINDOWS DEFENDER  
Cloud-based Protection  
Source processProtocolDestination  
  wdcp.microsoft.com  
Definition updates  
Source processProtocolDestination  
  definitionupdates.microsoft.com  
MpCmdRun.exeHTTPSgo.microsoft.com  
   
WINDOWS SPOTLIGHT  
Retrieve Spotlight metadata  
Source processProtocolDestination  
backgroundtaskhostHTTPSarc.msn.com  
backgroundtaskhost g.msn.com.nsatc.net  
 TLS v1.2*.search.msn.com  
 HTTPSris.api.iris.microsoft.com  
 HTTPSquery.prod.cms.rt.microsoft.com  
   
WINDOWS UPDATE  
Downloads app and OS updates  
Source processProtocolDestination  
svchostHTTPS*.prod.do.dsp.mp.microsoft.com  
Download patches and updates  
Source processProtocolDestination  
svchostHTTP*.windowsupdate.com  
 HTTPfg.download.windowsupdate.com.c.footprint.net  
Highwinds Content Delivery Network updates  
Source processProtocolDestination  
  cds.d2s7q6s2.hwcdn.net  
Verizon Content Delivery Network updates  
Source processProtocolDestination  
 HTTP*wac.phicdn.net  
  *wac.edgecastcdn.net  
Apps and Windows Insider builds  
Source processProtocolDestination  
svchost *.tlu.dl.delivery.mp.microsoft.com.c.footprint.net  
Apps from Store  
Source processProtocolDestination  
svchost emdl.ws.microsoft.com  
Enable connections  
Source processProtocolDestination  
svchostHTTPSfe2.update.microsoft.com  
svchost fe3.delivery.mp.microsoft.com  
  fe3.delivery.dsp.mp.microsoft.com.nsatc.net  
svchostHTTPSsls.update.microsoft.com  
 HTTP*.dl.delivery.mp.microsoft.com (1803)  
Content regulation  
Source processProtocolDestination  
svchostHTTPStsfe.trafficshaping.dsp.mp.microsoft.com  
   
Source processProtocolDestination  
  a122.dscd.akamai.net  
  a1621.g.akamai.net  
   
MICROSOFT FORWARD LINK REDIRECTION SERVICE
Redirect web links  
Source processProtocolDestination  
VariousHTTPSgo.microsoft.com  

You can find out more, including any problems that blocking certain endpoints might have on the smooth running of your system here.

Non-Enterprise versions of Windows 10 also connect to the following:

Windows 10 Home 1709

DestinationProtocolDescription
*.tlu.dl.delivery.mp.microsoft.com.c.footprint.netHTTPEnables connections to Windows Update.
*.wac.phicdn.netHTTPUsed by the Verizon Content Delivery Network to perform Windows updates.
*.1.msftsrvcs.vo.llnwi.netHTTPUsed for Windows Update downloads of apps and OS updates.
*.c-msedge.netHTTPUsed by OfficeHub to get the metadata of Office apps.
*.delivery.dsp.mp.microsoft.com.nsatc.netTLSv1.2Enables connections to Windows Update.
*.dscd.akamai.netHTTPUsed to download content.
*.dspg.akamaiedge.netHTTPUsed to check for updates to maps that have been downloaded for offline use.
*.hwcdn.netHTTPUsed by the Highwinds Content Delivery Network to perform Windows updates.
*.m1-msedge.netTLSv1.2Used by OfficeHub to get the metadata of Office apps.
*.search.msn.comTLSv1.2Used to retrieve Windows Spotlight metadata.
*.wac.edgecastcdn.netTLSv1.2Used by the Verizon Content Delivery Network to perform Windows updates.
*.wns.windows.comTLSv1.2Used for the Windows Push Notification Services (WNS).
*prod.do.dsp.mp.microsoft.comTLSv1.2/HTTPSUsed for Windows Update downloads of apps and OS updates.
.g.akamaiedge.netHTTPUsed to check for updates to maps that have been downloaded for offline use.
telecommand.telemetry.microsoft.comHTTPSUsed by Windows Error Reporting.
2.dl.delivery.mp.microsoft.comHTTPEnables connections to Windows Update.
2.tlu.dl.delivery.mp.microsoft.comHTTPEnables connections to Windows Update.
arc.msn.comHTTPSUsed to retrieve Windows Spotlight metadata.
arc.msn.com.nsatc.netTLSv1.2Used to retrieve Windows Spotlight metadata.
a-ring.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
au.download.windowsupdate.comHTTPUsed to download operating system patches and updates.
b-ring.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
candycrushsoda.king.comTLSv1.2Used for Candy Crush Saga updates.
cdn.content.prod.cms.msn.comHTTPUsed to retrieve Windows Spotlight metadata.
cdn.onenote.netHTTPUsed for OneNote Live Tile.
client-office365-tas.msedge.netHTTPUsed to connect to the Office 365 portal’s shared infrastructure, including Office Online.
config.edge.skype.comHTTPUsed to retrieve Skype configuration values.
ctldl.windowsupdate.comHTTPUsed to download certificates that are publicly known to be fraudulent.
cy2.displaycatalog.md.mp.microsoft.com.akadns.netTLSv1.2Used to communicate with Microsoft Store.
cy2.licensing.md.mp.microsoft.com.akadns.netTLSv1.2Used to communicate with Microsoft Store.
cy2.purchase.md.mp.microsoft.com.akadns.netTLSv1.2Used to communicate with Microsoft Store.
cy2.settings.data.microsoft.com.akadns.netTLSv1.2Used as a way for apps to dynamically update their configuration.
cy2.vortex.data.microsoft.com.akadns.netTLSv1.2Used to retrieve Windows Insider Preview builds.
definitionupdates.microsoft.comHTTPSUsed for Windows Defender definition updates.
displaycatalog.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
dl.delivery.mp.microsoft.comHTTPSEnables connections to Windows Update.
dual-a-0001.a-msedge.netTLSv1.2Used by OfficeHub to get the metadata of Office apps.
fe2.update.microsoft.comHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe2.update.microsoft.com.nsatc.netTLSv1.2Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe3.delivery.dsp.mp.microsoft.com.nsatc.netTLSv1.2/HTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fg.download.windowsupdate.com.c.footprint.netHTTPUsed to download operating system patches and updates.
fp.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
g.live.com/1rewlive5skydrive/HTTPSUsed by a redirection service to automatically update URLs.
g.msn.com.nsatc.netHTTPUsed to retrieve Windows Spotlight metadata.
geo-prod.do.dsp.mp.microsoft.com.nsatc.netTLSv1.2Enables connections to Windows Update.
go.microsoft.comHTTPSUsed by a redirection service to automatically update URLs.
img-prod-cms-rt-microsoft-com.akamaized.netHTTPSUsed to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps).
*.login.msa.akadns6.netTLSv1.2Used for Microsoft accounts to sign in.
licensing.mp.microsoft.comHTTPSUsed for online activation and some app licensing.
location-inference-westus.cloudapp.netTLSv1.2Used for location data.
login.live.comHTTPSUsed to authenticate a device.
mediaredirect.microsoft.comHTTPSUsed by the Groove Music app to update HTTP handler status.
modern.watson.data.microsoft.com.akadns.netTLSv1.2Used by Windows Error Reporting.
msftsrvcs.vo.llnwd.netHTTPEnables connections to Windows Update.
msnbot-*.search.msn.comTLSv1.2Used to retrieve Windows Spotlight metadata.
oem.twimg.comHTTPSUsed for the Twitter Live Tile.
oneclient.sfx.msHTTPSUsed by OneDrive for Business to download and verify app updates.
peer4-wst.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
pti.store.microsoft.comHTTPSUsed to communicate with Microsoft Store.
pti.store.microsoft.com.unistore.akadns.netTLSv1.2Used to communicate with Microsoft Store.
purchase.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
ris.api.iris.microsoft.com.akadns.netTLSv1.2/HTTPSUsed to retrieve Windows Spotlight metadata.
settings-win.data.microsoft.comHTTPSUsed for Windows apps to dynamically update their configuration.
sls.update.microsoft.com.nsatc.netTLSv1.2/HTTPSEnables connections to Windows Update.
star-mini.c10r.facebook.comTLSv1.2Used for the Facebook Live Tile.
storecatalogrevocation.storequality.microsoft.comHTTPSUsed to revoke licenses for malicious apps on the Microsoft Store.
storeedgefd.dsx.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
store-images.s-microsoft.comHTTPUsed to get images that are used for Microsoft Store suggestions.
tile-service.weather.microsoft.comHTTPUsed to download updates to the Weather app Live Tile.
tsfe.trafficshaping.dsp.mp.microsoft.comTLSv1.2Used for content regulation.
v10.vortex-win.data.microsoft.comHTTPSUsed to retrieve Windows Insider Preview builds.
wallet.microsoft.comHTTPSUsed by the Microsoft Wallet app.
wallet-frontend-prod-westus.cloudapp.netTLSv1.2Used by the Microsoft Wallet app.
watson.telemetry.microsoft.comHTTPSUsed by Windows Error Reporting.
wdcp.microsoft.akadns.netTLSv1.2Used for Windows Defender when Cloud-based Protection is enabled.
wildcard.twimg.comTLSv1.2Used for the Twitter Live Tile.
www.bing.comHTTPUsed for updates for Cortana, apps, and Live Tiles.
www.facebook.comHTTPSUsed for the Facebook Live Tile.
www.microsoft.comHTTPSUsed for updates for Cortana, apps, and Live Tiles.

Windows 10 Pro 1709

DestinationProtocolDescription
..akamai.netHTTPUsed to download content.
..akamaiedge.netTLSv1.2/HTTPUsed to check for updates to maps that have been downloaded for offline use.
*.a-msedge.netTLSv1.2Used by OfficeHub to get the metadata of Office apps.
*.blob.core.windows.netHTTPSUsed by Windows Update to update words used for language input methods.
*.c-msedge.netHTTPUsed by OfficeHub to get the metadata of Office apps.
*.dl.delivery.mp.microsoft.comHTTPEnables connections to Windows Update.
*.dspb.akamaiedge.netTLSv1.2Used to check for updates to maps that have been downloaded for offline use.
*.dspg.akamaiedge.netTLSv1.2Used to check for updates to maps that have been downloaded for offline use.
*.e-msedge.netTLSv1.2Used by OfficeHub to get the metadata of Office apps.
*.login.msa.akadns6.netTLSv1.2Used for Microsoft accounts to sign in.
*.s-msedge.netTLSv1.2Used by OfficeHub to get the metadata of Office apps.
*.telecommand.telemetry.microsoft.com.akadns.netTLSv1.2Used by Windows Error Reporting.
*.wac.edgecastcdn.netTLSv1.2Used by the Verizon Content Delivery Network to perform Windows updates.
*.wac.phicdn.netHTTPUsed by the Verizon Content Delivery Network to perform Windows updates.
*.wns.windows.comTLSv1.2Used for the Windows Push Notification Services (WNS).
*prod.do.dsp.mp.microsoft.comTLSv1.2/HTTPSUsed for Windows Update downloads of apps and OS updates.
3.dl.delivery.mp.microsoft.comHTTPSEnables connections to Windows Update.
3.dl.delivery.mp.microsoft.com.c.footprint.netHTTPEnables connections to Windows Update.
3.tlu.dl.delivery.mp.microsoft.comHTTPEnables connections to Windows Update.
3.tlu.dl.delivery.mp.microsoft.com.c.footprint.netHTTPEnables connections to Windows Update.
arc.msn.comHTTPSUsed to retrieve Windows Spotlight metadata.
arc.msn.com.nsatc.netTLSv1.3Used to retrieve Windows Spotlight metadata.
au.download.windowsupdate.comHTTPSUsed to download operating system patches and updates.
b-ring.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
candycrushsoda.king.comHTTPSUsed for Candy Crush Saga updates.
cdn.content.prod.cms.msn.comHTTPUsed to retrieve Windows Spotlight metadata.
cdn.onenote.netHTTPSUsed for OneNote Live Tile.
client-office365-tas.msedge.netHTTPSUsed to connect to the Office 365 portal’s shared infrastructure, including Office Online.
config.edge.skype.comHTTPSUsed to retrieve Skype configuration values.
ctldl.windowsupdate.comHTTPUsed to download certificates that are publicly known to be fraudulent.
cs12.wpc.v0cdn.netHTTPUsed by the Verizon Content Delivery Network to download content for Windows upgrades with Wireless Planning and Coordination (WPC).
cy2.displaycatalog.md.mp.microsoft.com.akadns.netTLSv1.2Used to communicate with Microsoft Store.
cy2.settings.data.microsoft.com.akadns.netTLSv1.2Used as a way for apps to dynamically update their configuration.
cy2.vortex.data.microsoft.com.akadns.netTLSv1.2Used to retrieve Windows Insider Preview builds.
definitionupdates.microsoft.comHTTPSUsed for Windows Defender definition updates.
displaycatalog.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
download.windowsupdate.comHTTPEnables connections to Windows Update.
evoke-windowsservices-tas.msedge.netHTTPSUsed by the Photos app to download configuration files, and to connect to the Office 365 portal’s shared infrastructure, including Office Online.
fe2.update.microsoft.comHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe2.update.microsoft.com.nsatc.netTLSv1.2Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe3.delivery.dsp.mp.microsoft.com.nsatc.netTLSv1.2/HTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe3.delivery.mp.microsoft.comHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fg.download.windowsupdate.com.c.footprint.netHTTPUsed to download operating system patches and updates.
fp.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
fs.microsoft.comHTTPSUsed to download fonts on demand
g.live.comHTTPUsed by a redirection service to automatically update URLs.
g.msn.comHTTPSUsed to retrieve Windows Spotlight metadata.
g.msn.com.nsatc.netTLSv1.2Used to retrieve Windows Spotlight metadata.
geo-prod.do.dsp.mp.microsoft.comHTTPSEnables connections to Windows Update.
geover-prod.do.dsp.mp.microsoft.comHTTPSEnables connections to Windows Update.
go.microsoft.comHTTPSUsed by a redirection service to automatically update URLs.
gpla1.wac.v2cdn.netHTTPUsed for Baltimore CyberTrust Root traffic.
img-prod-cms-rt-microsoft-com.akamaized.netHTTPSUsed to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps).
licensing.mp.microsoft.comHTTPSUsed for online activation and some app licensing.
location-inference-westus.cloudapp.netTLSv1.2Used for location data.
login.live.comHTTPSUsed to authenticate a device.
l-ring.msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
mediaredirect.microsoft.comHTTPSUsed by the Groove Music app to update HTTP handler status.
modern.watson.data.microsoft.com.akadns.netTLSv1.2Used by Windows Error Reporting.
msnbot-*.search.msn.comTLSv1.2Used to retrieve Windows Spotlight metadata.
oem.twimg.comHTTPUsed for the Twitter Live Tile.
oneclient.sfx.msHTTPUsed by OneDrive for Business to download and verify app updates.
peer1-wst.msedge.netHTTPUsed by OfficeHub to get the metadata of Office apps.
pti.store.microsoft.comHTTPSUsed to communicate with Microsoft Store.
pti.store.microsoft.com.unistore.akadns.netHTTPSUsed to communicate with Microsoft Store.
purchase.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
ris.api.iris.microsoft.comHTTPSUsed to retrieve Windows Spotlight metadata.
settings-win.data.microsoft.comHTTPSUsed for Windows apps to dynamically update their configuration.
sls.update.microsoft.comHTTPSEnables connections to Windows Update.
storecatalogrevocation.storequality.microsoft.comHTTPSUsed to revoke licenses for malicious apps on the Microsoft Store.
storeedgefd.dsx.mp.microsoft.comHTTPSUsed to communicate with Microsoft Store.
store-images.s-microsoft.comHTTPSUsed to get images that are used for Microsoft Store suggestions.
store-images.s-microsoft.comHTTPSUsed to get images that are used for Microsoft Store suggestions.
telecommand.telemetry.microsoft.comHTTPSUsed by Windows Error Reporting.
tile-service.weather.microsoft.comHTTPUsed to download updates to the Weather app Live Tile.
tsfe.trafficshaping.dsp.mp.microsoft.comHTTPSUsed for content regulation.
v10.vortex-win.data.microsoft.comHTTPSUsed to retrieve Windows Insider Preview builds.
wallet.microsoft.comHTTPSUsed by the Microsoft Wallet app.
watson.telemetry.microsoft.comHTTPSUsed by Windows Error Reporting.
wdcp.microsoft.akadns.netHTTPSUsed for Windows Defender when Cloud-based Protection is enabled.
wildcard.twimg.comTLSv1.2Used for the Twitter Live Tile.
www.bing.comTLSv1.2Used for updates for Cortana, apps, and Live Tiles.
www.facebook.comHTTPSUsed for the Facebook Live Tile.
www.microsoft.comHTTPSUsed for updates for Cortana, apps, and Live Tiles.

Windows 10 Family 1803

DestinationProtocolDescription
*.e-msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
*.g.akamaiedge.netHTTPSUsed to check for updates to maps that have been downloaded for offline use.
*.s-msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
*.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/HTTPEnables connections to Windows Update.
arc.msn.com.nsatc.netHTTPSUsed to retrieve Windows Spotlight metadata.
arc.msn.com/v3/Delivery/PlacementHTTPSUsed to retrieve Windows Spotlight metadata.
client-office365-tas.msedge.net*HTTPSUsed to connect to the Office 365 portal’s shared infrastructure, including Office Online.
config.edge.skype.com/config/*HTTPSUsed to retrieve Skype configuration values.
ctldl.windowsupdate.com/msdownload/update*HTTPUsed to download certificates that are publicly known to be fraudulent.
cy2.displaycatalog.md.mp.microsoft.com.akadns.netHTTPSUsed to communicate with Microsoft Store.
cy2.licensing.md.mp.microsoft.com.akadns.netHTTPSUsed to communicate with Microsoft Store.
cy2.settings.data.microsoft.com.akadns.netHTTPSUsed to communicate with Microsoft Store.
displaycatalog.mp.microsoft.com*HTTPSUsed to communicate with Microsoft Store.
dm3p.wns.notify.windows.com.akadns.netHTTPSUsed for the Windows Push Notification Services (WNS).
fe2.update.microsoft.com*HTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe3.delivery.dsp.mp.microsoft.com.nsatc.netHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
fe3.delivery.mp.microsoft.comHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
g.live.com/odclientsettings/ProdHTTPSUsed by OneDrive for Business to download and verify app updates.
g.msn.com.nsatc.netHTTPSUsed to retrieve Windows Spotlight metadata.
geo-prod.dodsp.mp.microsoft.com.nsatc.netHTTPSEnables connections to Windows Update.
ipv4.login.msa.akadns6.netHTTPSUsed for Microsoft accounts to sign in.
licensing.mp.microsoft.com/v7.0/licenses/contentHTTPSUsed for online activation and some app licensing.
location-inference-westus.cloudapp.netHTTPSUsed for location data.
maps.windows.com/windows-app-web-linkHTTPSLink to Maps application.
modern.watson.data.microsoft.com.akadns.netHTTPSUsed by Windows Error Reporting.
ocos-office365-s2s.msedge.net*HTTPSUsed to connect to the Office 365 portal's shared infrastructure.
ocsp.digicert.com*HTTPCRL and OCSP checks to the issuing certificate authorities.
oneclient.sfx.ms*HTTPSUsed by OneDrive for Business to download and verify app updates.
query.prod.cms.rt.microsoft.com*HTTPSUsed to retrieve Windows Spotlight metadata.
ris.api.iris.microsoft.com*HTTPSUsed to retrieve Windows Spotlight metadata.
settings.data.microsoft.com/settings/v2.0/*HTTPSUsed for Windows apps to dynamically update their configuration.
settings-win.data.microsoft.com/settings/*HTTPSUsed as a way for apps to dynamically update their configuration.
sls.update.microsoft.com*HTTPSEnables connections to Windows Update.
storecatalogrevocation.storequality.microsoft.com*HTTPSUsed to revoke licenses for malicious apps on the Microsoft Store.
storeedgefd.dsx.mp.microsoft.com*HTTPSUsed to communicate with Microsoft Store.
tile-service.weather.microsoft.com*HTTPUsed to download updates to the Weather app Live Tile.
tsfe.trafficshaping.dsp.mp.microsoft.comHTTPSUsed for content regulation.
ip5.afdorigin-prod-am02.afdogw.comHTTPSUsed to serve office 365 experimentation traffic.
watson.telemetry.microsoft.com/Telemetry.RequestHTTPSUsed by Windows Error Reporting.

Windows 10 Pro 1803

DestinationProtocolDescription
*.e-msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
*.g.akamaiedge.netHTTPSUsed to check for updates to maps that have been downloaded for offline use.
*.s-msedge.netHTTPSUsed by OfficeHub to get the metadata of Office apps.
.tlu.dl.delivery.mp.microsoft.com/HTTPEnables connections to Windows Update.
*geo-prod.dodsp.mp.microsoft.com.nsatc.netHTTPSEnables connections to Windows Update.
arc.msn.com.nsatc.netHTTPSUsed to retrieve Windows Spotlight metadata.
au.download.windowsupdate.com/*HTTPEnables connections to Windows Update.
ctldl.windowsupdate.com/msdownload/update/*HTTPUsed to download certificates that are publicly known to be fraudulent.
cy2.licensing.md.mp.microsoft.com.akadns.netHTTPSUsed to communicate with Microsoft Store.
cy2.settings.data.microsoft.com.akadns.netHTTPSUsed to communicate with Microsoft Store.
dm3p.wns.notify.windows.com.akadns.netHTTPSUsed for the Windows Push Notification Services (WNS)
fe3.delivery.dsp.mp.microsoft.com.nsatc.netHTTPSEnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store.
g.msn.com.nsatc.netHTTPSUsed to retrieve Windows Spotlight metadata.
ipv4.login.msa.akadns6.netHTTPSUsed for Microsoft accounts to sign in.
location-inference-westus.cloudapp.netHTTPSUsed for location data.
modern.watson.data.microsoft.com.akadns.netHTTPSUsed by Windows Error Reporting.
ocsp.digicert.com*HTTPCRL and OCSP checks to the issuing certificate authorities.
ris.api.iris.microsoft.com.akadns.netHTTPSUsed to retrieve Windows Spotlight metadata.
tile-service.weather.microsoft.com/*HTTPUsed to download updates to the Weather app Live Tile.
tsfe.trafficshaping.dsp.mp.microsoft.comHTTPSUsed for content regulation.
vip5.afdorigin-prod-am02.afdogw.comHTTPSUsed to serve office 365 experimentation traffic

Image credit: carballo/ Shutterstock

150 Responses to These are all the websites Windows 10 connects to after a clean install

© 1998-2024 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.