Nexus Market: onion address and mirrors

Opening Nexus Market

Chrome and Firefox cannot resolve a .onion host. Neither can a clearnet gateway, and the gateway reads everything it translates. Use Tor Browser. Get it from torproject.org/download. Security level stays at Standard.

Copy the address from the board above. One click. Do not type 56 characters yourself. One wrong character is a different site. Paste. Enter.

The circuit takes ten to sixty seconds to build. A blank page is the build. A connection reset while the address resolves is normal on v3. Reload once. The storefront loads. You are in.

What to check when you arrive

Nothing is trusted yet. The password and the coin address come after the checks.

• Address in the bar. 56 characters before the .onion. Letters a to z, digits 2 to 7. Zeros and ones do not exist in base32. Wrong length or a 0 or a 1 means you are not on Nexus.
• Branding. Logo, header name, layout. A copycat shifts one letter or one color. The typosquat block above lists those single-character variants. Match against the real addresses, not the look.
• PGP fingerprint. The market publishes its public key, usually in the about section or the footer. Line it up with the fingerprint in the panel above. Match: the page signs with the market's key. Mismatch: a lookalike key.
• Admin release. Rotations arrive in PGP-signed releases, not in comments. A signed release checks out against the fingerprint. An address from anywhere else is a claim.

Logging in

Separate email. Password used nowhere else. A leak then hits one place and stops.

The login page is the market's own page, loaded over the circuit, and it comes after the storefront. A password field before the storefront and its navigation is not the market. Close the tab. Open the address again.

Paying with three coins

Nexus takes three coins, and each one has a job. Bitcoin is the working coin, the one every vendor lists and the one that clears on any market. Monero is the private one, and it is the coin that keeps the amount of a purchase off a public ledger. Litecoin is the cheap-fee option, a smaller coin with a cheaper transfer, the one that makes sense for a small order where a Bitcoin fee would be a bigger share of the total.

Who pays with what depends on what you are holding and what you are protecting. Pay in Monero when the amount is the thing you do not want on a chain. Pay in Litecoin for a small buy where the fee would otherwise hurt. Bitcoin is the default when none of that applies.

Keep a wallet set aside for the market, one that is not your main wallet. Move coins into the market wallet only when you are about to buy, and move the rest back out after. A market holds your coins in escrow, and escrow is held by the market. The less that sits on the market at any one time, the less there is to be slow to leave if the market stops processing withdrawals.

Deposits have a shape too. A deposit address is a new string per payment, and the coins appear in the account after a number of confirmations, which takes time on a busy chain and costs the fee that the network charges at that moment. A fee that is trivial in the morning can eat a small order by evening, so fund the account when the fee is low, not when the cart is full. If a vendor lists a price in one coin and your wallet holds another, the swap happens on your side of the checkout, and the delay is yours, not the market's. The full set of wallet habits is in the safety guide.

If the address does not open

Give the circuit its full minute. Reload once. Still nothing: take a different address from the board. All three open the same market, so the second one is the same place by another door. None of the three open and the fault is the network. Some providers choke Tor traffic, and bridge mode in the Tor Browser settings works around that. The ordered steps are in the access guide.

One more case, rarer. The address opens, but the storefront is missing, replaced by a notice, or the page loads a shell with no products. That is the shape of a rotation in progress: the old key is phasing out, the new one has not finished taking over. The new address comes from a signed release or from the list above, not from a guess. Open the one from the list, run the checks again, and only then treat the page as Nexus.

Three equal addresses, one fingerprint, one login that is yours alone. The address is the building, and the checks are how you confirm the door is the right one before you walk in.