The key to this problem is to determine some difference between a request to a real site and a request to a spoof site.
The simplest difference is the preference for a cookie-based user interface. The cookies installed on your (real) website will ever be returned to your website and will never be sent to the spoof website.
, cookie , , , / cookie, , spoof.