Anti-phishing phrases and signed freshness notes exist because UI clones got good. If a page cannot show your phrase — or pushes password fields before any canary — leave. “Verify later” is how seeds leak.
Stale clone pages often skip canaries entirely or show a generic welcome. Some ask for wallet recovery as a “security upgrade.” Real market flows do not need your seed to prove you are human.
Checklist: Anti-phishing. Onions: Dark Markets.