Even the site that considered safe in the megathread, there’s report of malware and trojan and I don’t know what site to use
Simple, trust no one. Get a no-reported-logs VPN, don’t download anything that has a strange file size or extension, look at comments, look at the number of seeders if it’s a torrent. If you can, join something like a private tracker where there’s moderation too. If it walks like a duck and quacks like a duck then it’s probably not the movie you were looking for and there might be a Trojan army inside waiting for you to let the duck enter your computer… That metaphor may have fallen apart on me…
I added the word “reported” because I don’t trust VPN providers to not keep logs, but ideally they should report that they don’t keep logs and have an established history of not providing logs. Tor is really not ideal if you’re trying to download anything large and you’re still vulnerable depending on who controls the exit nodes.
Mullvad I think is very good for this. They have an extensive description of their no-logs policy on their site, and have also been raided by the police before, who apparently were unable to find any customer information.
Shenanigans are always possible of course so you shouldn’t 100% blindly trust anyone, but all the available evidence seems to point to them being pretty legit IMO.
From what are you protecting yourself? Piracy? Then go with a VPN that has been tested in court and didn’t turn over any logs. The second one of these providers turns over their logs in court they are out of business because no one will ever trust them again. That’s all you really need for the seven seas.
Can the NSA see what you’re doing? Who cares. If they can, they aren’t revealing that to help anyone in a civil case.