Verify this page

Every file of the bridge page is listed with its SHA-256 hash in MANIFEST.sha256.

Check the files

On macOS or Linux, in a new empty folder:

curl -fsSL https://nameswallet.app/bridge/MANIFEST.sha256 -o MANIFEST.sha256
while read -r sum file; do
  mkdir -p "$(dirname "$file")"
  curl -fsSL "https://nameswallet.app/bridge/$file" -o "$file"
done < MANIFEST.sha256
shasum -a 256 -c MANIFEST.sha256

Every line must end in OK.

Check the headers

curl -sI https://nameswallet.app/bridge/ | grep -i content-security-policy

It must equal the page’s own meta tag. Its only outside address is https://ethereum-sepolia-rpc.publicnode.com.

What this proves

The files you were served match the list.
Not that the list is the reviewed one: compare its hash, shasum -a 256 MANIFEST.sha256, with a copy published elsewhere. None is published yet.
Not the site’s shared colours, font, logo and favicon, which are outside the list. They run no code.
Only what you were served, at that moment.