Wow. I would've fallen for that. How did you catch such a scam site? That's a pretty sly scammer.
Change your password and stake an address.
By checking the website address of the page you're logging into. It's pretty simple stuff lol
Yes, no green lock on the left of url.
Having to login manually because password manager doesn't autofill.
Checking URL when hovering in the bottom left of the browser window will show you strange signs even when you can't see that a small L is in fact a big i. Though surely, that is hard as long as you don't get aware of it by the login.
Though I don't understand how it can be that the hacker still was in the account since the victim claims that he changed pass.