Correct me if I'm wrong, but couldn't this still be susceptible to DNS Spoofing? This goes under the assumption that the URL has not been tampered with, if I'm

Correct me if I'm wrong, but couldn't this still be susceptible to DNS Spoofing? This goes under the assumption that the URL has not been tampered with, if I'm not mistaken?