Why cloned HTML is not enough
Copying HTML, CSS or JavaScript does not automatically reproduce the authorized interaction context or a valid short-lived authenticity proof. ColorShield ID is designed so that lookalike pages without valid interaction context cannot present a trusted protected form experience.
This page explains the security flow at a commercial level. It does not disclose implementation secrets.