Most "free" packs require an email address. Use a primary email (or a producer-specific alias). Vixa will likely send you a confirmation link.
Even if you trust the source, right-click the ZIP > Scan with Windows Defender or Malwarebytes. Never open .exe files claiming to be sample packs. vixa sample pack free
Technically, yes. Sound samples are copyrighted intellectual property. While a record label is unlikely to sue a bedroom producer for using a leaked snare sound, the act of distributing the leak is illegal. Most "free" packs require an email address