The neon front door to Nexus Market. Three signed v3 onion mirrors, one PGP fingerprint, zero plaintext credentials. Pull an address, paste it into Tor Browser, verify the signature, log in. Skip the verification step exactly once and you will not skip it again.
Funds release needs two keys out of buyer, vendor, platform. No single party drains the contract alone.
XMR is the primary rail, BTC is legacy. Stealth addresses kill chain analysis at the source.
Order details, vendor messages, and shipping blobs encrypt locally. The host stores ciphertext only.
Five steps, takes under a minute. Run it every session. Convenience is the attack vector, the procedure is what protects you.
Pull a mirror. Hit Copy on any onion above. Do not type it out, do not screenshot it, do not accept it from a third party.
Open Tor Browser. Pulled from torproject.org directly, never from a mirror or re-uploaded bundle. Verify the installer signature.
Slide security to Safest. Scripts off, remote fonts off, media click to play. The login page does not need any of those to render.
Verify the PGP block. Copy the signed timestamp from the login page, run gpg --verify against the master key. GOOD signature ending in 0A9D is the only clearance.
Log in. Use a password that has never appeared in any other account. Stored offline, in an offline manager. Done.
Nexus Market opened in late 2023 to fill the gap left by the long collapse of legacy markets that ran single-key escrow and pooled buyer funds. Multisig closes the exit-scam hole entirely, browser side crypto closes the host-compromise hole, daily-signed mirrors close the phishing hole. The architecture is unglamorous on purpose. Boring infrastructure beats clever security every single time.
Three mirrors re-signed every 24 hours. A DDoS on one mirror routes around the other two without user-facing impact.
Master and observer keys held across at least three jurisdictions. No single legal action takes the signature offline.
The market does not run a clearnet frontend. Anything claiming to be Nexus on a clearnet domain is a phishing operator.
Buyer ratings and dispute outcomes are signed at submission. Vendors cannot edit a bad rating away. The only fix is more orders.
If one of these dropped you on this gateway, you are at the verified front door. Bookmark the domain.