Supposing an attacker is able to perform a Man In The Middle attack and intercept requests from a client that wants to connect to an HTTPS server (let's say www.google.com).
The attacker has a valid certificate (domain : www.randomname.com) signed by Verizon.
He will then redirect the client to his fake server.
Normally, there will be no warning as the certificate is signed by a trusted CA.
Is this a way to bypass HTST protection?