Verified65% confidenceFactExact time
DNS queries are almost never blocked by enterprise firewalls, and traditional security devices focus their monitoring on HTTP/HTTPS traffic while giving insufficient scrutiny to DNS traffic.
3
Sources
65%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Related Claims
UnverifiedNearly all network environments allow DNS query traffic to pass through, making it susceptible to abuse as a channel for data exfiltration or command delivery.78% similarUnverifiedApplication-layer whitelists (such as allowing access only to specific domains) rely on DNS resolution and proxy configuration and are easy to bypass; network-layer firewall or security group rules intercept at a lower level and are harder to evade.77% similarUnverifiedEven when a sandbox blocks conventional outbound HTTP/HTTPS connections, DNS resolution requests are often still permitted, thereby creating an escape path.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113151API
curl https://kongchang.com/api/v1/knowledge/claims/113151MCP
get_claim(id=113151)