The only trusted repository for old Firefox versions is Mozilla’s own public directory. Despite shutting down the official ftp.mozilla.org in 2022 for new releases, the historical archives remain accessible via archive.mozilla.org .
The safest and most reliable way to obtain legacy versions is through the official Mozilla FTP Archive download old version of mozilla firefox 3.6