Introduction - If you have any usage issues, please Google them yourself
The principle of DNS ID fraud under Windows and the ID (ID) implemented in the header of DNS datagram is used to match the response and request datagram. Now, let's look at the whole process of domain name resolution. The client first sends the domain query datagram to the DNS server with a specific ID, and then sends the domain response datagram to the client with the same ID number after the DNS server query. The DNS response of client will received datagram ID and its own query datagram transmission, in comparison with the ID if the match indicates the received datagram is to wait, if does not match the discarded.
If we are able to disguise the DNS server to the client in advance to send the response data, so the client's DNS cache in the domain of the IP is our custom IP, at the same time the client was taken to the website we want. There is only one condition, which is that the ID matched to the DSN response datagram arrives at the client before the response datagram sent by the DNS server.