Supposing an attacker is able to perform Man in the middle attack and intercept requests from a client that wants to connect to an HTTPS server (let say www.google.com). The attacker has valid certificate (domain : www.randomname.com) signed by Verizon. He will then redirect the client to his fake server. Normally, there will be no warning as the certificate is signed by a trusted CA. Is this a way to bypass HTST protection? Or more globally, does it works?