Don't use public wifi ever without a VPN and a tested third-party encrypted DNS. opendns or adguard with additional filters would catch this.
My DNS would likely block this, as it nulls any domains newer than 30-days. Scammers would be rotating through providers frequently as they will get shut down pretty quickly.
A proper password manager would also catch this as domains wouldn't match.
Two security experts hijack access to the car at the Tesla Supercharger and create their own key. Neither a lot of technology nor a lot of effort was required.