Enzoic for Active Directory must be able to contact its servers to look up the compromised status for passwords.  If your firewall supports whitelisting by FQDN, whitelist the following FQDNs for outbound communications over TCP port 443 from your domain controllers:

api.enzoic.com

app-api.enzoic.com

cdn.enzoic.com

If your firewall cannot whitelist by FQDN, the IP addresses below should be whitelisted for outbound communications over TCP port 443 from your domain controllers.

13.235.194.196

13.48.121.56

13.48.96.148

15.206.40.21

18.196.181.48

3.10.99.236

3.124.25.136

3.231.37.171

3.24.50.155

3.24.93.121

3.9.236.117

34.214.110.33

35.153.27.185

35.163.59.86

35.168.85.109

35.180.249.238

35.181.124.196

52.192.30.99

52.199.52.28

52.212.218.163

52.48.142.122

52.51.10.65

52.79.68.108

52.89.197.157

54.172.238.226

54.180.42.79

54.233.211.111

54.233.236.93

75.2.9.104

99.83.177.145