A captured login page, rebuilt so it cannot reach the network.

A simulation landing page has to look like the real sign-in screen. It starts as a capture of the live page, full of the original's scripts and outbound calls, and has to end up believable and inert.

the captured page
The captured live login page
as captured from the live site
the rebuilt simulation page
The rebuilt offline simulation page
rebuilt local, assets inlined
what the rebuild does
scripts removed assets inlined, no remote fetches form posts to the sim endpoint only no third-party beacons

The look is reproduced from the capture; everything that would reach the outside network is stripped, so the page cannot phone home or leak a keystroke to the brand it imitates.

Shipping a raw capture would make the training tool a live security hole in its own right. Getting it to look right is the easy half. Getting it provably inert, and keeping it that way through a hardening pass, is the half that matters.