Scanning is more predictable and DNS queries can be routed through proxy