I have also seen those outbound hits on Enpass, and for me, they were for update and license checks, not vault sync. Blocking them didn't stop autofill or local vault access, but it did stop update nags and version checks. If you're using it completely offline, just remember that you won't get notifications about security fixes unless you unblock or check manually.