Not really. Unless they completely hijacked all DNS resolution under .org to IPs they control, fraudulently gain TLS certificates (using DNS-based proof), and proxy the traffic to the true IP. Not a realistic scenario at scale.