Which form of spoofing involves resolving a domain to a fake or invalid IP address, commonly called DNS spoofing?

• A. Spoofing (DNS)
• B. Spoofing (ARP)
• C. Spoofing (IP)
• D. Spear-Phishing

Answer: (A)

DNS spoofing happens when the process of translating a domain name into an IP address is subverted. An attacker can forge DNS responses or poison a DNS cache so that a legitimate domain resolves to an IP under the attacker’s control rather than the real server. This means users are directed to a rogue site or a malicious server when they try to visit a trusted domain, enabling phishing, credential theft, or malware delivery.

This differs from ARP spoofing, which targets the local network’s address resolution at layer 2 and alters IP-to-MAC mappings to intercept traffic on the same broadcast domain. IP spoofing, on the other hand, involves forging the source IP address in packets rather than changing domain-name resolution. Spear-phishing is a social-engineering tactic, not a DNS-resolution attack.