Nexus Market Mirror — How to Avoid Phishing Clones

If you encounter a site that claims to be Nexus Market but shows signs of being a phishing clone, follow these steps:

1. Do not enter credentials. Even if the site looks identical, a phishing clone will steal your username and password.
2. Check the PGP signature. Use the PGP Signature Verifier on this page to confirm whether the address is genuine.
3. Report the clone on Dread. The Nexus Market community monitors Dread for phishing reports and can warn other users.
4. Clear your Tor Browser cache. Phishing clones sometimes use cached data to appear legitimate. Clearing the cache ensures you're seeing the real site.
5. Use a verified mirror. Only access Nexus Market through addresses listed on this page or the market's documented blog.

Phishing clones often appear after the market experiences downtime. When Nexus Market is down, users are more likely to click on the first link they find, making them vulnerable to credential theft. Always wait for an documented announcement or verify the address before logging in.

PGP (Pretty Good Privacy) is a cryptographic system that allows users to verify the authenticity of messages and files. Nexus Market uses PGP to sign its documented mirrors, providing a way for users to confirm that an address comes from the market's administrators.

Here's how PGP verification works for nexus market mirrors:

1. The market signs the mirror list. The administrators use their private PGP key to create a signature for the list of documented mirrors.
2. Users verify the signature. By comparing the signature to the market's public PGP key, users can confirm that the list hasn't been altered.
3. Users check the address. Once the list is verified, users can confirm that their mirror matches one of the addresses on the list.

PGP signatures are more reliable than forum posts or word-of-mouth because they're cryptographically tied to the market's key. Even if a phishing clone looks identical to the real market, it won't have a valid PGP signature. (Tor's onion-address glossary entry explains why v3 addresses are harder to spoof, but PGP remains the gold standard for verification.)

Beyond verifying nexus market mirrors, users can take additional steps to protect themselves from phishing and other threats:

• Use 2FA. Nexus Market supports two-factor authentication (2FA) for all accounts. Enable 2FA to prevent unauthorized access even if your credentials are stolen.
• Disable JavaScript. Phishing clones often rely on JavaScript to steal credentials. Disable JavaScript in Tor Browser before logging in to ensure the site works without it.
• Use a dedicated wallet. Never use a wallet that contains more cryptocurrency than you're willing to lose. Phishing clones can steal funds if you enter wallet credentials.
• Check the URL bar. Before entering credentials, double-check the .onion address in the Tor Browser URL bar. A genuine nexus market onion address is 56 characters long and ends with ".onion".
• Use a VPN with Tor. While Tor provides strong anonymity, adding a VPN can help protect against malicious exit nodes. Choose a reputable VPN that doesn't log traffic.

These measures aren't foolproof, but they significantly reduce the risk of falling victim to phishing clones or other attacks. Always prioritize verification and caution when accessing nexus market darknet sites.