The first (organic) result is legitimate, it's just people buy ads to promote malware/phishing/etc and google puts the ad results above the organic results. By using an adblocker, it removes the ads and leaves only the organic results which are legitimate.
So yeah, install an adblocker and encourage non-tech family/friends to do so too. The amount of actively harmful ads google runs is obscene. And google takes so long to take any action (days or weeks), that it's often more practical to encourage people to click the phishing links to blow their advertising budget.