They control the DNS so they can direct your client to anything. Since no sane root authority will give them certificate for the random names, you’ll see SSL validation errors. That’s been there since forever 🐶🐾🫡