I am aware that to read the contents of an iframe, the domains, protocols, and ports must match.

However is this enough to guarantee that an "unknown malicious website" will not be able to get past this restriction?

Basically I'm worried that a very smart anonymous hacker would be able to have an iframe on HIS website, pointing the iframe's url to my webpage, and extract the contents of my webpage.