> Why wouldn't the Iranian government just use its own ip space for the censorship message?

IP addresses are expensive if you're not the US. Also they might be reusing a standard corporate filtering product that expects to be deployed on a private network (and in a way, that's what the Iranian internet is).

I just tried this on a few Iranian websites and never got a 403, let alone an iframe.