How disk-snapshot cloning is caught.
The heartbeat carries license metadata only (no lead data). Snapshot-cloning a licensed box shows up as the same install running from more than one place at once — something a genuine migration never does. When that pattern appears the license is suspended and an alert is raised; a real move is a one-click Rebind (see Move to another server).