A throwaway macOS VM ran the real wallet; every byte was captured and decrypted from the host, outside the guest. The full request log (flows.jsonl) holds decrypted bodies and stays private — tooling at github.com/austintgriffith/crops-lab.
run_id: 20260924-135055-send-eth-plain action: send-eth-plain guest_ip: 192.168.64.6 host_proxy: 192.168.64.1:8080 base_image: crops-warm-plain action_rc: 0 gold_baked_at: 2026-08-21T02:54:20Z gold_base: ghcr.io/cirruslabs/macos-tahoe-base:latest gold_base_row: OCI ghcr.io/cirruslabs/macos-tahoe-base:latest 50 33 1 hour ago stopped gold_macos: 26.6.2 (25G83) gold_chrome: Google Chrome 151.0.7922.174 gold_node: v26.7.0 gold_playwright: 1.62.1 gold_quic_allowed: 0
[t=1790279511.920] send-eth-plain: extension id difjajjaaelocoiiplpkppfognbohioh -> send 0.0002 ETH to 0x34aa3f359a9d614239015126635ce7732c18fdf3
[t=1790279513.809] fill unlock-pw: input[type=password]
[t=1790279513.863] click unlock: role:Unlock (click)
[t=1790279514.472] unlock: done
[t=1790279520.630] click send: role:Send (click)
[t=1790279522.082] fill recipient: input[placeholder='0x…']
[t=1790279522.148] fill amount: input[placeholder='0.0']
[t=1790279522.294] click review: role:Review (click)
[t=1790279525.010] click confirm: dialog[open] button.primary:text-is("Send") (click)
[t=1790279525.614] submitted: 0x7215ce9ea612e54b952706b821604867ac9a52d9da42bfe1567c5f5456023063
[t=1790279547.135] send-eth-plain: done
# capture 20260924-135055-send-eth-plain action: send-eth-plain · guest 192.168.64.6 · proxy 192.168.64.1:8080 · action_rc 0 ## decrypted: 35 requests · 9 hosts | host | req | methods | secret headers present | |---|---:|---|---| | ethereum.reth.rs | 22 | POST | — | | sas.pcms.apple.com | 4 | GET | — | | www.google.com | 2 | GET | — | | android.clients.google.com | 2 | POST | authorization | | iadsdk.apple.com | 1 | POST | — | | gsp57-ssl-background.ls.apple.com | 1 | POST | — | | example.com | 1 | GET | — | | clients2.google.com | 1 | GET | — | | accounts.google.com | 1 | POST | — | ## opaque: 0 SNIs offered, never decrypted (pinned or handshake failed) - none ## wire: 553 proxied pkts · 0 BYPASS dst · 0 QUIC dst · 51 Apple-OS pkts BYPASS/QUIC below exclude Apple 17.0.0.0/8 (macOS push/OCSP/update — not the browser under test). ### other egress (non-443, non-DNS) - 192.168.64.255:137 (no DNS seen) · 18 pkts - 224.0.0.251:5353 (no DNS seen) · 2 pkts