I do not see any reference to a formal list of required endpoints; the error presented looks to be related to your specific use.
It sounds like the issue lies in the Whitelisting, and firewall traffic.
Some users have had to ensure TLS 1.2 was functioning correctly...
https://github.com/microsoft/winget-cli/issues/566