Scroll down a bit to "Results (2)": These new accesses were coming directly from Google’s network. The IP address 74.125.63.33 made 17,645 requests (15,554 to BusinessProfile.aspx)
"Google's network" could also just mean an App Engine user.
GKBO appears to be a genuine Google initiative - its domain is registered to Google and served from their nameservers: http://www.kbo.co.ke/
This doesn't mean that the people on the other end of the phone actually are employed by Google. They could have heard of the Google initiative and attempted to capitalize on the opportunity.
Exactly, Pretending to be Someone Else™ is Scamming 101.
And yet the people on the other end of the phone are somehow able to create phony websites you didn't ask for as subdomains? (FSM only knows what the Google search ranking consequences of that might be.)