An attacker poisons name resolution to direct users to an imitation login page. Which mechanism is abused?

1. DNS
2. Ethernet frame check sequence
3. NTP
4. DHCP lease renewal alone