Bilingual login, captcha, careful registration.
The WTN login runs in English and French and embeds the onion in the captcha.
Solve the login captcha and confirm the address embedded in the image matches your bar before your password. The interface cues are genuine in both languages, not a machine translation.
Pick a username you have never used elsewhere, generate a unique password in a local manager, and store the recovery phrase on paper. No genuine login ever asks for the recovery phrase.