anubisqdpukalgiyxlb7rtcya3u6grun2mcozonmb57c54qrt7sqh7qd.onionanubisqe2yramasw5yvlnipaknraza5rzb5uxb7zqhxuxroobvvm6aid.onionanubisqocgruji655mqys7fpafawiy2g56pjqrtecfdikhh5q4zqmfqd.onionBefore you sign in. Open these in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. If they do not match, close the tab.
Why there is more than one address
A hidden service absorbs traffic floods, and one reachable at a single address stops being reachable when that address is targeted. Several live at once means an attacker has to hold all of them simultaneously. For you the consequence is small and useful: when one is slow another usually is not, and switching costs nothing because they lead to the same place.
Copy rather than type
An onion address is fifty six characters derived from a key rather than chosen, so there is no pattern to help you and no spell check to catch a slip. Two addresses differing by one character are unrelated services. Use the copy control and paste it in.
The check that decides it
When the login screen loads, compare the onion printed on the page against what your browser shows. A cloned page reproduces the design perfectly because the design is served to anybody who asks for it. What it cannot do is display the real address while living at its own, and that contradiction is the whole test. If they differ, close the tab rather than trying again.
Where fake addresses come from
Overwhelmingly from searching while a familiar address is quiet. Somebody wants access, looks for a replacement, and takes the first plausible result. Keeping this page saved means the alternative is already in front of you and that moment never arrives.