Trap them with a honeypot: disable HSTS and automatically delete all messages containing "HSTS" string.