Hot Pixel GroupLet’s talk
VERIFY / DON’T TRUST

Don’t trust.
Verify.

Every file on this site is listed in a public manifest with its SHA-256 fingerprint. This page downloads each file fresh and checks it in your browser, so you can see for yourself that nothing has been changed since we published it.

01 / LIVE CHECK

Checking files…

Fingerprints are computed with your browser’s own cryptography. Nothing is sent to us.

FilePublished SHA-256Result
02 / CHECK IT YOURSELF

Or skip the page
and use a terminal.

Bitcoin taught a generation to verify instead of trusting. The same habit works here.

  1. Download the manifest: curl -s https://hotpixelgroup.com/verify/manifest.json
  2. Download any file and fingerprint it: curl -s https://hotpixelgroup.com/style.css | shasum -a 256
  3. Compare the result with the manifest. For HTML pages, our host adds a small monitoring script after the closing </body> tag. The check on this page removes it first, and you can do the same.