While a VM (like VirtualBox) adds a layer of isolation, advanced malware can detect VMs and escape the sandbox (VM escape exploits). It is still risky. Furthermore, most game anti-cheats block VMs entirely.
There is no key. These sites earn affiliate commissions for every survey completed. You will waste 15 minutes, share personal data, and end up with nothing but spam emails.
The internet is rife with websites, YouTube videos, and Telegram channels promising free keys. However, the reality of the situation is grim. The security risks associated with searching for these keys far outweigh the potential (and unlikely) benefit of free cheats.
Many websites claiming to offer free keys use "human verification" tactics. They will ask you to complete a survey, download an app, or input your personal details. In reality, these are CPA (Cost Per Action) marketing scams. The website owner gets paid when you fill out the survey, but you will receive a working key. In the worst-case scenario, they will ask for your game login credentials under the guise of "injecting the cheat," resulting in your account being stolen.