Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On a droid Razr M, I used chrome to log in to Gmail instead of the app. It asked to log in as me on a toast at the bottom of the browser, taking my credentials from somewhere on the phone I assume. When logging out of the mobile Gmail site, a white screen with some text about redirecting appeared briefly, followed by Korean characters. The URL on exiting is

I've censored the end of this URL where some numbers appear. Why a Korean domain? Anyway, my question is: Is my mobile browser being hijacked or would it appear that my account has otherwise been compromised in any way?

share|improve this question
Updating this, the issue isn't specific to any browser or a phone. Clearing caches or using clean devices doesn't seem to have any affect. Language settings have been checked, application specific passwords exist or strange devices / activity outside of the redirect. – Bryan Apr 18 '15 at 1:29

The yellow auto login rectangle is Chrome's integration of the Android Account Manager API. OAuth websites can interact with this API by using the X-Auto-Login HTTP Response Header.

From my anecdotal evidence it is possible to wind up on a different Google TLD. Other people seem to also have that problem:

share|improve this answer

A whois of the domain seems to indicate that it is legitimately Google. Why it was redirecting through there is a bit of a mystery. I do know that there is a feature on a lot of phones that will us the Google account of the phone. It is possible that the vendor that wrote the software was Korean and simply used the Google server from their home country to do the redirect. I'd certainly keep an eye on it, but I don't see how this particular thing could be an attack from what you've described.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.