# nexus-tor.online > Hand-kept editor changelog for the Nexus Market mirror set. Verified 2026-07-15. This file is the full site content flattened to markdown for LLM ingestion. Every page on the site is included below. - Site: https://nexus-tor.online - Language: English - License: informational, cite with attribution - Content signals: search=yes, ai-input=yes, ai-train=yes (use=reference) --- # Current mirror set Verified 2026-07-15. Three onion addresses in the current Nexus Market rotation. All resolve to the same storefront. Pick whichever opens fast, they are equivalent. - **Mirror 01:** `http://nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion` - **Mirror 02:** `http://nexusma2iekjhhyenua3u4zlyfsj2ubwxr2nt6gdte5rvwukzze63fyd.onion` - **Mirror 03:** `http://nexusabcdbnjw6or46y3hh6uicsl4xvu5cncfp27hkggznvtxhxlngad.onion` **Before you press enter:** the Nexus login carries the current onion inside the captcha image. Read the small text at the bottom of that picture and compare against your URL bar. If they do not match, the mirror is a phishing clone. Close the tab and open this page again from a bookmark. --- # Open in Tor Browser (3 steps) 1. Copy one address from the list above. Any of the three works. 2. Open Tor Browser and set the security slider to Safest before you paste. If you do not have it yet, download from torproject.org. 3. Paste and press Return. Wait for the anti-DDoS queue to clear (usually under a minute). The Nexus login page comes up next. --- # Verify a Nexus Market onion with PGP Two habits check whether a Nexus Market onion is real. The captcha match is fast and works every session. The PGP verification is the anchor for both, done once per rotation. ## Why the check matters A phishing clone can copy every pixel of the Nexus login page. The only thing it cannot copy is the operator PGP signature that comes with every published rotation. If a signature validates against the operator public key you already have on your keyring, the address inside came from the operator. If it does not, the message is fake and the address inside is worthless. ## The four commands ``` 1. gpg --import nexus.asc 2. save the envelope to rotation.txt 3. gpg --verify rotation.txt 4. compare onion to the current set on the front page ``` Success looks like `Good signature from "Nexus "`. A trust-level warning is normal. It only means you have not personally signed the operator key, which is expected. ## Kleopatra path (Windows) Kleopatra ships with Gpg4win. Import the operator key file the same way (File → Import). Save the signed rotation as `rotation.txt`. Right-click the file, pick More GpgEX options → Verify. Same principle as gpg on the command line, different button. ## Common errors - **BAD signature**: the file has been altered after signing. Do not trust the address inside. - **Can't check signature: No public key**: the operator key is not on your keyring yet. Import it first. - **Signature made by different key ID**: the message is signed by a key other than the operator. Do not import that key. Do not use the address inside. - **Warning: not certified with a trusted signature**: normal. It only means you have not personally signed the key. ## Once per key You import the operator public key one time. Every future rotation validates against the same fingerprint. No forum handle, no chat message, no directory can push a fake address on you once the operator key is on your keyring. --- # Coins accepted at Nexus Market Nexus Market accepts Bitcoin, Litecoin and Monero. | Coin | Confirm time | Privacy | Best for | |------|--------------|---------|----------| | XMR (Monero) | ~2 min | strong by default | most orders | | LTC (Litecoin) | ~2.5 min | public chain | small orders | | BTC (Bitcoin) | ~10 min | public chain | legacy balances, large orders | ## Monero, the recommended default Monero is the coin the market wallet defaults to for new buyers. Monero transactions hide the sender, the receiver and the amount by default. Wallets worth using: Feather Wallet on desktop, Cake Wallet on mobile, Monero GUI for hardened setups with a local node. ## Litecoin, the small-order coin Litecoin confirmations arrive in under three minutes on average, four times faster than Bitcoin. Fees are usually a few cents. Wallet: Electrum-LTC on desktop, or a hardware wallet for cold storage. Downside: public chain. ## Bitcoin, for legacy and large Bitcoin works for every order but leaves the strongest public trace. Fees are volatile and often high. Wallet: Sparrow on desktop. Avoid custodial exchange balances for market deposits. ## Non-KYC funding - **RoboSats** over Lightning: non-KYC peer-to-peer, random robot avatar as identity, fees around 0.2 percent. - **Bisq**: desktop peer-to-peer market, more payment methods, requires a security bond in Bitcoin. - **Cake Wallet built-in swap**: buy Bitcoin any way, swap for Monero inside the wallet, provider sees only the addresses. --- # How to access Nexus Market in Tor Browser ## Download One source: **torproject.org**, or its onion at `2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion`. First time you install, verify the signature on the bundle. ## Settings that matter - **Set the security slider to Safest.** This disables JavaScript on all sites. Every Tor market that matters, including Nexus, works fine on Safest. - **Never resize the browser window.** Tor Browser opens at a fixed size on purpose. Resizing gives you a unique window size. - **Do not install any extension.** Every extension changes the fingerprint. ## Open a mirror Copy any onion from the current mirror set. Paste into the address bar. Press Return. The anti-DDoS wait page appears and holds for 20 to 60 seconds. When the counter finishes, the captcha renders. If the wait page never decrements, try a different mirror. ## Bridges If your network blocks Tor: Settings → Connection → Use a bridge → pick obfs4 from the built-in list. ## Do not - Log into clearnet accounts (Google, bank) in the same browser session. - Stack a VPN underneath Tor. - Open downloaded documents in a normal application. - Paste your Nexus password into a page from a search-result banner or random forum link. --- # Specification ## The mirror set Three onion addresses published in a signed rotation post by the operator. Every mirror resolves to the same storefront. The set rotates roughly every few weeks. ## Escrow Every deposit runs on a **2 of 3 multisig contract**. Three keys: buyer, vendor, platform. Any two release the funds. The platform alone cannot move the coins. ## Coins accepted Bitcoin, Litecoin, Monero. Monero is the default and recommended. Litecoin for smaller orders. Bitcoin works for everything but leaves a public trace. ## Anti-DDoS queue Wait page decrements a counter before the captcha renders. Default wait: 20 to 60 seconds. Shifts up under real pressure. ## Captcha with the address baked in The Nexus login captcha carries the current onion address in the small print inside the image. Compare against your URL bar every session. ## Operator PGP key - Algorithm: RSA 4096 or Ed25519 - Fingerprint: 40 hex chars in 10 groups of 4 - Published on: pinned Dread profile /u/nexus - Cross-check: /pgp on the market login page - First seen: November 2023, unchanged since --- # Security notes ## Standing advice - Fetch the operator PGP key once, from a source you already trust. Never re-fetch. - Verify every rotation before you trust the address inside. - Compare the captcha string against your URL bar before typing the password. Every session. - Refuse addresses copied from anywhere other than a signed rotation or this changelog. - Bookmark this page. Reload it when in doubt. --- # FAQ **Q: What are the current Nexus Market onions?** A: The three addresses at the top of this file. All three resolve to the same storefront. **Q: Which mirror should I pick first?** A: Whichever opens fast. They are equivalent. If one stalls on the queue for more than a couple of minutes, try the next. **Q: What coins does Nexus Market accept?** A: Bitcoin, Litecoin and Monero. Monero is the privacy default. **Q: Does Nexus Market use multisig escrow?** A: Yes. Every deposit runs on a 2 of 3 multisig contract. **Q: How do I verify a rotation?** A: Import the operator PGP key once, run gpg --verify on the signed rotation message. Four commands total. **Q: How often does the mirror set change?** A: A rotation every few weeks on average. Primary rotates every eight to ten months. **Q: Is there a clearnet Nexus Market?** A: No. Anything on the clearnet claiming to be Nexus Market is a phishing operation borrowing the name. **Q: Why does the URL bar not match the captcha?** A: That is a phishing clone. Close the tab and open this page again from a bookmark. --- # Changelog (most recent 40 entries) ## 2026-07-05 [note], Primary held through a coordinated DDoS burst. Queue times ran 40 to 70 seconds most of the day. No rotation needed. Observed from three fresh circuits. ## 2026-06-19 [note], Mirror 02 gap and same-address return. Backup 02 offline for two days, back on the same address. No signed post because the address did not change. Standard descriptor stale-out shape. ## 2026-05-28 [addition], Mirror 03 introduced. Third mirror added to the set. Signed at 22:14 UTC. Fingerprint on the announcement matches the operator key on file since launch. ## 2026-05-11 [note], Captcha style changed, address position moves to top-right. Cosmetic change. The onion address is still baked into the captcha image, only its position moved. Verification behaviour unchanged. ## 2026-04-02 [rotation], Primary rotated. Fourth primary rotation on the current key. Old primary went dark inside the hour. Signed announcement mirrored in the pinned Dread thread. ## 2026-03-16 [rotation], Mirror 01 rotated. Nine weeks on the previous address. New address in the signed rotation. No operator commentary on the cause. ## 2026-02-14 [advisory], Phishing wave using prefix-collision clones. Wave of lookalike onions circulating on unrelated Tor forums. All of them share the first four to eight characters with a real Nexus mirror, then diverge. Full-length letter-for-letter check against the current mirror set is the reliable answer. Editor recommendation: refuse addresses copied from anywhere other than a signed rotation. ## 2025-12-08 [rotation], Primary rotated. Third primary rotation. Nine months on the previous address. ## 2025-09-11 [feature], Captcha now embeds the current onion inside the image. The login captcha image now carries the current mirror address in the small print at the bottom. Buyers compare that string against the URL bar as a phishing check before typing the password. Cheap check, hard for clones to spoof at scale. ## 2025-06-18 [feature], Multisig 2 of 3 becomes the enforced default at checkout. Classic single-key escrow removed from the checkout dropdown. Every new order runs 2 of 3 multisig automatically. Existing single-key orders in flight complete under the old flow, then the option retires. ## 2025-03-04 [rotation], Primary rotated. Second primary rotation. Ten months on the previous address, roughly matching the running average. ## 2025-01-10 [feature], Litecoin added to the wallet panel. Third coin option alongside Bitcoin and Monero. Chosen for smaller-order convenience because confirmations arrive faster than Bitcoin. Vendors opt in per listing. ## 2024-11-22 [feature], Anti-DDoS queue introduced on the login gateway. Login now goes through a wait page that decrements a counter before the captcha renders. Reduces the feedback loop attackers use to time their bursts. Default wait profile is 15 to 40 seconds, shifts up under real pressure. ## 2024-09-16 [addition], Mirror 03 added. Third mirror published. Set count now stands at primary plus three mirrors. Operator note in the announcement said the additional slot was added ahead of expected winter load. ## 2024-05-08 [rotation], Primary rotated. First primary rotation since launch, roughly six months on the initial address. Signed announcement mirrored on the operator Dread profile. Old primary went dark within two hours of the rotation. ## 2024-02-12 [addition], Mirror 02 added. Second mirror published in a signed rotation post at 21:44 UTC. Same operator PGP key. The visible set now shows the primary plus two mirrors. ## 2023-12-14 [note], First month online, no incidents. Six weeks of operation with no queue outages and no rotation events. Vendor onboarding runs steady. Reader inbox is quiet. Nothing to report on the mirror set. ## 2023-11-04 [feature], Initial release. Nexus Market opens. Public launch of the Nexus Market storefront under the operator PGP key that has signed every subsequent rotation. Bitcoin and Monero supported at launch. 2 of 3 multisig escrow enforced by default on every deposit. One primary onion and one backup mirror published in the first signed announcement. --- # About this file Generated at 2026-07-15 from the site data. The file is regenerated on every request and reflects the current mirror set plus every changelog entry whose date has passed. Site: https://nexus-tor.online Full site index (llms.txt): https://nexus-tor.online/llms.txt Sitemap: https://nexus-tor.online/sitemap.xml