When a third-party site claims an IPA is "verified," they usually mean the file has been tested to launch on a specific device, not that it is safe.

If you are tech-savvy, you don't need to trust a third party. You can "verify" your own IPA using a Mac and Xcode.