In the case of this HN submission, they&#x27;re the same thing. From what I can gather, Adsuck is essentially just a DNS forwarder that sends NX DOMAIN for blacklisted domains but forwards the DNS requests for all other DNS lookups. So &quot;spoof&quot; is a little misleading since it&#x27;s actually doing the job of a normal DNS forwarder - albeit tuned with privacy in mind. So I think it&#x27;s fair to say this method could more accurately be defined as &quot;block[ing] domains&quot; rather than &quot;spoofing DNS&quot;. However I&#x27;d welcome a correction if I&#x27;m wrong.