After trying to manually download Windows updates from the Windows Update Catalog and getting page not found errors, i found out it's blocked by your list...at least i think it is because Pi-hole's log status says "Blocked (regex blacklist, CNAME)" and yours is the only regex list i use. The whole log domain entry is "catalog.s.download.windowsupdate.com (blocked scdn28557.wpc.ad629.nucdn.net)".
Anyway, the domain that needs to be whitelisted is
scdn28557.wpc.ad629.nucdn.net
After trying to manually download Windows updates from the Windows Update Catalog and getting page not found errors, i found out it's blocked by your list...at least i think it is because Pi-hole's log status says "Blocked (regex blacklist, CNAME)" and yours is the only regex list i use. The whole log domain entry is "catalog.s.download.windowsupdate.com (blocked scdn28557.wpc.ad629.nucdn.net)".
Anyway, the domain that needs to be whitelisted is
scdn28557.wpc.ad629.nucdn.net