For newer OS versions, users typically look toward open-source KMS scripts hosted on reputable platforms like GitHub, which are more transparent than encrypted .rar files.
If you are trying to keep an old machine running, consider these safer paths:
If a site asks you to complete a survey or download a secondary "password unlocker" to get the key, it is almost certainly a scam or malware. What is Windows Loader v2.2.2?