that means nothing. fresh install of a custom image? fresh install of what ISO image? insider build or release build? maybe the DNS server being used by default is being hijacked, or the ISO they created, if they created one, has an app installed by the ISO creation tool which made it. not all of those are legit.

I set up a VM and installed Windows 11 Home on it and captured all traffic after initial setup and a reboot. I saw nothing going to any non-microsoft domain.