Supposing an attacker is able to perform Man in the middle attack and intercept requests from a client that wants to connect to an HTTPS server (let say www.google.com).

The attacker has valid certificate (domain : www.randomname.com) signed by Verizon. He will then redirect the client to his fake server.

Normally, there will be no warning as the certificate is signed by a trusted CA.

Is this a way to bypass HTST protection?

Or more globally, does it works?

Supposing an attacker is able to perform a Man In The Middle attack and intercept requests from a client that wants to connect to an HTTPS server (let's say www.google.com).

The attacker has a valid certificate (domain : www.randomname.com) signed by Verizon.

He will then redirect the client to his fake server.

Normally, there will be no warning as the certificate is signed by a trusted CA.

Is this a way to bypass HTST protection?