Received a share.google link and checked what it did: It redirects to something with URL format "https://www.google.com/share.google?q=SOME_CODE", which is a normal page that IS the target as far as curl and such tools are concerned but redirects on the browser probably using Javascript, so it will not redirect it with our normal tools. It will need custom code or Javascript execution. So, they knew what they were doing and used their powers for evil, as they usually do now.