Your device just told us more than you think.
This page shows what a simple link can reveal about your device, location, and network. Nothing was installed. Nothing was hacked. This is what every website can see when you connect.
This time it is safe. Here is what became visible.
A QR code is just a link. When you open one, a normal website can already see signals about your device, browser, network, and approximate location. That is the lesson.
Awareness training only: this page has not hacked your device. It only shows data that a normal website, browser, and network request can expose.
We can estimate the region of your network or VPN exit from the connection alone. If you allow browser location, we can show how much more precise that becomes.
Coordinates unavailable on this connection Device model
Operating system
Browser signature
Screen resolution
This is not just trivia. It is reusable context.
Tap a card to see how the same signals can be turned into targeting, tracking, or more convincing scams.
Location A rough location already narrows the search. A city or region guess tells a site where you probably live, work, or travel. See how this can be abused
That is enough to localise phishing messages, fake parcel alerts, language choice, and timing so a scam feels familiar instead of random.
Fingerprint Your browser can become recognisable without a login. Screen size, GPU, language, timezone, and canvas output can combine into a repeatable signature. See how this can be abused
Used together, those clues can link visits, distinguish you from other users on the same network, and help ad-tech or attackers follow the same person over time.
Network Your connection says more than “online”. IP version, provider, ASN, and route hints reveal whether you are on mobile data, home broadband, office Wi-Fi, or something protected. See how this can be abused
That helps attackers choose the right lure and helps platforms decide whether to trust, challenge, throttle, or profile your session.
Device Your device model changes which lies will work. Knowing whether you use an iPhone, Windows PC, or another device shapes what a believable fake prompt looks like. See how this can be abused
A convincing attack starts with context: the right device, the right browser, the right language, and a story that matches what you are actually using.
The QR code was safe here, but the link still said more than you saw.
That is why unknown QR codes deserve a pause. First check the domain. If the link has a long tail after the question mark, it may be harmless tracking, but it can also carry clues, redirects, or badly handled sensitive data.