noone here can tell you which vendor to use, and you already seem to have some/most things figured out (like where to check if a vendor is legit or not). now there is always a risk involved, but sometimes you just have to take a chance.
going into more details seems just asking for broken rules