# DNS Spoofing

An attack that corrupts DNS records so a domain name resolves to a fraudulent IP address instead of the real one.

**DNS spoofing[↗](/dns-spoofing)** is an attack that corrupts the Domain Name System (DNS) process, which translates a website address like example.com into its actual numeric IP address[↗](/ip-address), so that a legitimate domain name resolves to a fraudulent server controlled by the attacker instead. Victims think they're visiting the real site while their traffic is quietly redirected.

A successful DNS spoofing attack can redirect users to a convincing fake login page designed to steal credentials, all without changing the URL they typed. Using DNS providers that support DNSSEC, a security extension that cryptographically validates DNS responses, significantly reduces this risk.