Sort of ironic, in Google Chrome, when attempting to visit that legal z.ai site I get:
Your connection is not private Attackers might be trying to steal your information from z.ai (for example, passwords, messages, or credit cards). Learn more about this warning net::ERR_CERT_COMMON_NAME_INVALID
If you’re on a corporate device you may not have recently issued certificates in your cert chain yet
If he is on a corporate device, he has a corporate-issued MITM certificate, which allow third party "security" companies to read, store and analyze his complete network traffic in plain text.
Not the case for me.