There are non dns mechanisms as well - you can directly hijack the websites ip address instead of their dns server.

In theory i think https://en.m.wikipedia.org/wiki/Resource_Public_Key_Infrastr... is the thing that's meant to stop this attack if everyone adopted it.