Sub-frame navigations go through shouldInterceptRequest as a separate call. The iframe load event fires even when the filter returns an empty response (the iframe shows a blank page); "blocked" here means the filter returned an empty body AND we can confirm via fetch that the domain is unreachable. When the filter passes the request, the fetch companion succeeds too.