src doesn't actually check the current source of an object. When some user script changes the source, IE takes note of it. When you request the source IE checks what the script changed it to rather than checking the current source. If you clicked a link within the page in an iframe and therefore changed the iframes source. src would return the address of the original page instead.