Verifying the Genuine Nexus Market Onion Link

Why clones exist

Attackers register addresses that look almost identical to the real ones, misspelling a character or swapping a number for a letter. These clones load fast because they sit on ordinary web servers instead of the heavier Tor network. The goal is simple: get you to enter a login or a withdrawal PIN on a form that sends your data straight to the attacker.

Visual inspection is unreliable, so the proof has to be cryptographic. Every genuine mirror publishes a PGP-signed statement that lists the valid addresses and a canary token. The canary is a short string embedded in the page. A clone that copies the design but fails to update the canary is identifiable on sight.

Step by step

Export the market's public PGP key from the official repository and import it into a signing tool such as GPG or Kleopatra. Download the latest mirror list from the static distribution point, open the detached signature, and confirm the fingerprint matches the one you recorded at first use.

Then visit each listed address in Tor Browser. Find the canary token in the page footer or the verification section and compare it with the value inside the signed document. If they match, the connection is authentic. If the token differs or is missing, close the tab and do not log in.

The phishing targets

The mnemonic recovery phrase is the most valuable asset. Anyone who knows those words controls the whole account, including coins in the internal wallet. The login page is the second target, and the withdrawal PIN adds friction to outbound transfers. Keep the three apart: the mnemonic on paper, the PIN in a password manager, and never the same login email across markets.

Frequently asked questions

What if the PGP key changes?

A key change comes with a signed announcement. Verify that the old key signed the new one before accepting the switch.

Can I verify links on mobile?

Yes, but Tor Browser on Android lacks some desktop GPG tools. Use a companion app to check signatures before switching back.

Do HTTPS certificates matter here?

No. Onion sites use hidden-service authentication, not standard TLS certificates. A browser padlock means nothing in this context.

How often should I re-check the canary?

Verify whenever you transact or log in from a new device. Daily checks are not needed if your network is stable.