[kyrra]

Interesting guess. Google does have a URL shortener for google "official" URLs under the g.co domain. And the goo.gl does get used for certain attacks sometimes.

examples of g.co urls: http://g.co/payhelp http://g.co/recover http://g.co/allo