Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

On a droid Razr M, I used chrome to log in to Gmail instead of the app. It asked to log in as me on a toast at the bottom of the browser, taking my credentials from somewhere on the phone I assume. When logging out of the mobile Gmail site, a white screen with some text about redirecting appeared briefly, followed by Korean characters. The URL on exiting is


I've censored the end of this URL where some numbers appear. Why a Korean domain? Anyway, my question is: Is my mobile browser being hijacked or would it appear that my account has otherwise been compromised in any way?

share|improve this question

2 Answers 2

The yellow auto login rectangle is Chrome's integration of the Android Account Manager API. OAuth websites can interact with this API by using the X-Auto-Login HTTP Response Header.

From my anecdotal evidence it is possible to wind up on a different Google TLD. Other people seem to also have that problem:

share|improve this answer

A whois of the www.google.co.kr domain seems to indicate that it is legitimately Google. Why it was redirecting through there is a bit of a mystery. I do know that there is a feature on a lot of phones that will us the Google account of the phone. It is possible that the vendor that wrote the software was Korean and simply used the Google server from their home country to do the redirect. I'd certainly keep an eye on it, but I don't see how this particular thing could be an attack from what you've described.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.