How is the upload url for the encrypted file generated?

So when using this api we are provided a url e.g *.blob.core.windows.net

Does anyone know how the first part of the url is generated and whether that blob instance is tied to your own tenant or is MS managed?