Captcha, honeypot fields, careful registration.
The Awazon login stops bots and helps you spot a clone.
Six characters of text, case sensitive, with a couple of fake input fields whose names rotate every page load. Bots fill a honeypot and never reach the real login. Type into the visible real field only, matching the case exactly.
Pick a username you have never used elsewhere, generate a unique password in a local manager, and store the recovery phrase on paper. Anyone who holds that phrase owns the account, and no genuine login ever asks for it.