<!doctype html>
<meta charset="utf-8">
<html>
<script>
window.onload = function () {
  document.location.href = document.location.href.replace('redirect', 'secret');
}
</script>
<body>
  Hello from the redirecting iframe: <span id="title"></span>
</body>
</html>