ADDRESS JOURNAL — NETWORK RECEIPT smartzsyndicate.net/lab/journal/ · published Oct 18, 2026 (ET) by Ledger WHAT THIS SHOWS A real headless Chrome loaded the live page once per chain, pasted a public address, pressed Read it, and recorded every request the page made. The address went only to the one public service for that chain. Nothing went to any Syndicate server except loading the page files themselves (HTML, CSS, fonts, script, icon), and those never carry the address. There is no relay, no analytics, and no key or seed field. Run: Google Chrome 155.0.8059.84 , 1280x900, fresh profile, 2026-10-19 01:44 UTC Page sha256: 3c0e3f12b17c49af79c7218008f27cda24968c0bf33ed552243eedf011402ae9 (lab/journal/index.html) Script sha256: 9684d970950744da8b75e38427d6523e61277e1715dadf6880f06fc0a81f5057 (lab/journal/journal.js) (The trace ran against the page above. The only change published afterwards adds the short receipt summary text to the page; scripts and the Content-Security-Policy are unchanged.) Test addresses: well-known public addresses that aren't ours (the CLAM burn address, a widely cited DOGE cold wallet, a widely cited exchange Solana wallet). They are used here for testing only; the page never prefills an address. BROWSER-ENFORCED LIMIT (Content-Security-Policy on this page): default-src 'none'; script-src 'self' 'sha256-cHWKQQBixkRJR1fqj7k7nuBUBCfPzc3oHqh14o3d51E='; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src https://chainz.cryptoid.info https://sochain.com https://solana-rpc.publicnode.com; base-uri 'none'; form-action 'none'; object-src 'none'; manifest-src 'none'; worker-src 'none' So the browser itself refuses to connect anywhere except those three services. ABOUT THE ONE BLOCKED LINE BELOW Our host's edge (Cloudflare) inserts its Web Analytics script into pages. On this page the policy above blocks it: Chrome refuses to load it (failure: csp), so it never leaves the browser, and its beacon POST never happens. ==================================================================================================== CLAM: pasted xCLAMBURNXXXXXXXXXXXXXXXXXXX1HaxZH -> balance shown: 179551.63935654 CLAM -- page load (before anything is pasted) -- GET 200 document https://smartzsyndicate.net/lab/journal/ GET 200 stylesheet https://smartzsyndicate.net/assets/syndicate.css GET 200 stylesheet https://smartzsyndicate.net/assets/net.css GET 200 script https://smartzsyndicate.net/lab/journal/journal.js GET 200 font https://smartzsyndicate.net/assets/fonts/Inter-latin.woff2 GET 200 font https://smartzsyndicate.net/assets/fonts/SpaceGrotesk-latin.woff2 GET BLOCKED by CSP (never sent) script https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 GET 200 other https://smartzsyndicate.net/assets/favicon.svg -- after pressing Read it (address in the request) -- GET 200 fetch https://chainz.cryptoid.info/clam/api.dws?q=getbalance&a=xCLAMBURNXXXXXXXXXXXXXXXXXXX1HaxZH => hosts contacted after Read it: chainz.cryptoid.info (expected: chainz.cryptoid.info) => requests carrying the address: 1, all to chainz.cryptoid.info: True ==================================================================================================== DOGE: pasted DH5yaieqoZN36fDVciNyRueRGvGLR3mr7L -> balance shown: 62221.11119864 DOGE -- page load (before anything is pasted) -- GET 200 document https://smartzsyndicate.net/lab/journal/ GET 200 stylesheet https://smartzsyndicate.net/assets/syndicate.css GET 200 stylesheet https://smartzsyndicate.net/assets/net.css GET 200 script https://smartzsyndicate.net/lab/journal/journal.js GET 200 font https://smartzsyndicate.net/assets/fonts/Inter-latin.woff2 GET 200 font https://smartzsyndicate.net/assets/fonts/SpaceGrotesk-latin.woff2 GET BLOCKED by CSP (never sent) script https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 GET 200 other https://smartzsyndicate.net/assets/favicon.svg -- after pressing Read it (address in the request) -- GET 200 fetch https://sochain.com/api/v3/balance/DOGE/DH5yaieqoZN36fDVciNyRueRGvGLR3mr7L GET 200 fetch https://sochain.com/api/v3/transactions/DOGE/DH5yaieqoZN36fDVciNyRueRGvGLR3mr7L/1 => hosts contacted after Read it: sochain.com (expected: sochain.com) => requests carrying the address: 2, all to sochain.com: True ==================================================================================================== SOL: pasted 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM -> balance shown: 11175972.109650756 SOL -- page load (before anything is pasted) -- GET 200 document https://smartzsyndicate.net/lab/journal/ GET 200 stylesheet https://smartzsyndicate.net/assets/syndicate.css GET 200 stylesheet https://smartzsyndicate.net/assets/net.css GET 200 script https://smartzsyndicate.net/lab/journal/journal.js GET 200 font https://smartzsyndicate.net/assets/fonts/Inter-latin.woff2 GET 200 font https://smartzsyndicate.net/assets/fonts/SpaceGrotesk-latin.woff2 GET BLOCKED by CSP (never sent) script https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 GET 200 other https://smartzsyndicate.net/assets/favicon.svg -- after pressing Read it (address in the request) -- POST 200 fetch https://solana-rpc.publicnode.com/ body: {"jsonrpc":"2.0","id":1,"method":"getBalance","params":["9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM"]} POST 200 fetch https://solana-rpc.publicnode.com/ body: {"jsonrpc":"2.0","id":1,"method":"getSignaturesForAddress","params":["9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM",{"limit":10}]} => hosts contacted after Read it: solana-rpc.publicnode.com (expected: solana-rpc.publicnode.com) => requests carrying the address: 2, all to solana-rpc.publicnode.com: True ==================================================================================================== INVALID ADDRESS (a DOGE address with one character changed): message: That doesn't check out as a CLAM, DOGE or Solana address. Nothing was sent. Check it, or pick the chain yourself. requests made: 0 ==================================================================================================== INDEPENDENT CROSS-CHECK (run from a separate machine, not the page): Cross-check run 2026-10-19 01:44 UTC DOGE DH5yaieqoZN36fDVciNyRueRGvGLR3mr7L page (SoChain): balance 62221.11119864 DOGE | latest tx 484c94145e97c0b2dd96912c1f056c9e05c8d358ab96ea429c51039d75d0d3c4 BlockCypher: balance 62221.11119864 DOGE | latest tx 484c94145e97c0b2dd96912c1f056c9e05c8d358ab96ea429c51039d75d0d3c4 SOL 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM page (PublicNode): balance 11175972.109650756 SOL | latest sig 4nfUJfSm69UDk3Vvg4p8Weq58M7XJg4xN5fUpMuUwnDpxAaAGcEmKMZopPCfNZkoGfd2EMmnWsEMvMLHLY85tQz5 Solana Foundation api.mainnet-beta: balance 11175972.109650756 SOL | latest sig 4nfUJfSm69UDk3Vvg4p8Weq58M7XJg4xN5fUpMuUwnDpxAaAGcEmKMZopPCfNZkoGfd2EMmnWsEMvMLHLY85tQz5 CLAM xCLAMBURNXXXXXXXXXXXXXXXXXXX1HaxZH page (CryptoID api getbalance): balance 179551.63935654 CLAM CryptoID explorer summary (same operator; no independent live CLAM explorer exists): balance 179551.63935654 | latest tx e9742937df67dc54d128fe5256e5661f46282830806d8b13752215fc6064ac2c 2014-05-28 06:39 UTC GAP: no independent live CLAM explorer exists. Tokenview's CLAM index stops at block 500, presstab.pw sits behind a bot challenge (not bypassed), and the rest are offline. So the CLAM check above uses a second CryptoID endpoint run by the same operator. WHAT THE SERVICES CAN SEE: the address you asked about, your IP address and your browser's Origin header (https://smartzsyndicate.net), as with any website. The page sends no cookies (credentials: omit) and no Referer (no-referrer). WHAT WE CAN SEE: nothing about your address. Your journal stays in this browser's localStorage until you delete it. Links you click yourself (the explorer, or a txid opened in the Tx Reader via the # part of the link) are your own visits and aren't counted above.