Captcha, and a careful registration.
The Crown login is clean and the registration is where care matters.
Solve the login captcha and confirm the address it prints matches your bar before entering a password.
Pick a username you have never used elsewhere, generate a unique password in a local manager, and store the recovery phrase on paper. No genuine login ever asks for the recovery phrase, so a page that does is a clone.
Crown Market