If you absolutely must sideload for testing purposes, only download IPAs from trusted archival communities (like Internet Archive’s official software section ), random ad-ridden “ipa download” sites. And even then, only do so on a non-primary device.

Buy the official version when it’s on sale. It’s regularly updated, supports modern iOS, and you won’t risk your Apple ID or personal data.