https://gog-games.to/ is a well-known site with a good reputation (but also, because Gog's games are signed, they couldn't slip malware into them without being caught anyway, which is part of the reason they have a good reputation in the first place. There's enough eyes on them that if they'd ever altered any of the game they put on their site they'd have been caught immediately.)