

A lot of the time these apps will have heuristics that will reach back out and so you will see network connections occasionally.
Without knowing more about this application, I don’t have the right context to evaluate whether or not I would trust something like that, so it’s gonna be up to your comfort level. But, if clamav came back clean and so did your other virus software, I would assume it’s not malicious traffic.
AirVPN also really good. Plus they have static port forwarding. And very easy flipping of OpenVPN to wireguard