Queue, captcha, and a careful registration.
The Nexus login is a short sequence, and one step in it is the check that protects you.
An anti-DDoS wait page may hold you briefly before the login. When it clears, the captcha renders with the market's address printed into it. Compare that to your bar, then solve the captcha.
Pick a username you have never used anywhere else, generate a unique password in a local manager, and store the recovery phrase the market issues on paper. Anyone who holds that phrase owns the account, and no genuine login ever asks for it, so a page that does is a clone.