This is a vulnerable page that constructs the login form with javascript (so no iframe). View source to check the javascript.