I believe you're using SET to clone the website, right? SET doesnt copy every image from the site to your machine when cloning it, they are urls to the real images. So,maybe what's happening is that your configuration on the DNS spoof is also redirecting the images.


