Attacker iframe.