victim.com top-level page

Embedding a third-party ad frame from evil.com: