You generally can’t manipulate the content of an iframe originating from a different domain due to the same origin policy — without this kind of restriction you could, for example, replace an image with CSS that makes it look like an instagram user posted something that they didn’t.