How I react when I am asked to connect to a Dapp.
First I scan the link,
Next I scan the contract
Then I check the source of the project on twitter to see project twitter page, their affiliates, sponsors etc.
I also confirm that the twitter page I am checking is not a fake of the original.
Lastly, I only connect to Dapp links from project ecosystem by clicking the link on the ecosystem page.