I decided to check out the Metaverse today by checking out The Sandbox. I searched "the sandbox" on google and clicked on the first advertisement. It looked legit, turned out to be an exact copy of the sandbox.game website, but this site had a few extra "s" on it sandboxs.games that I didn't notice off the bat.
I fell for it and it successfully stole my MetaMask key, wiping out my account in a matter of minutes. It's my own fault for forgetting not to share my key phrases. Oh well, it was an expensive lesson.Just be aware!