The hsts domain used in iFrame with http must not lead to load the iframe content as page.