The safest and most reliable place to is the official website:

When you search for you are looking for the continuation of this legacy—a version that works on modern Minecraft versions with updated Pokémon mechanics.

A: Yes. If any website asks for payment to download Pixelmon mod here, it is a scam. The mod is open-source and free.