@ukjuhyk
When connecting, your wallet will show a permission request. Review it carefully. Legitimate sites typically request "View Address" permissions only. Be extremely wary of any request for "Spend" permissions for tokens you didn't explicitly approve to send.