They load in the background. Look at the second video attempting to attack Slack. Look closely at the first tab in the top left corner, you can see that it is loading and eventually settles on Slack before the victim clicks the button. The attacker website has a delay on the click button to allow it to finish.

Make them fill in the CAPTCHA on the temporary page, then double click to finish.

It could be preloaded