They are paying for that spot on the search bar, and if you think that it is a malicious website, just report it to Google and it will be promptly taken down after garnering similar reports. That's just the way it goes for Google ads for the past few years, and if that's not enough for you, you might even see rated-X ads on family-friendly website lingering around every now and then.
It's just funny that Google had been releasing statements against scam sites and whatnot but keeps on placing such ads without doing a background check on who pays for what.
As long it does pay then that would surely counts and among all of the ads that are trying to register then they wont really have that much time nor effort on filtering which one is
true and which one is just phishing.This had been always an issue on this search engine but somewhat we can really give out reports to taken down such phishing site.
Its not actually surprising to see these sites because everytime a thing do hypes up or did really become a trend or being talked in town then expect for these
criminal minds to take advantage on it.
This is why we do see lots of phishing which they do really try hard to make money out of those fools who do heavily rely on results of a simple google search.