Skip to content

Behind the directory: Nexus portal origin and mission

This portal exists because phishing sites targeting Nexus market users multiply faster than any individual can monitor manually. We verify four .onion addresses every day against PGP-signed admin announcements. No crowdsourcing. No affiliate links. That is the entire function.

Portal active since February 2024
Last verified 23 April 2026
Mirrors tracked 4 active
Verification method PGP signature

One accurate .onion address, verified against the official Nexus admin key — that is what this portal offers. Nothing more, nothing less.

Updated daily · PGP-signed source · No ads · No tracking

When Nexus market launched in November 2023, at least a dozen phishing mirrors appeared within weeks. Each copied the cyberpunk interface pixel for pixel — the dark palette, the distinctive typography, the multisig escrow badge in the corner. The only reliable way to distinguish a real mirror from a fake was the .onion address itself, and only if you already knew the correct one.

This directory was established in early 2024 to solve that specific problem. We pull addresses exclusively from PGP-signed admin announcements published on Dread, the primary Nexus community forum. Every address is verified with GnuPG against the official Nexus admin key. If the signature does not verify, the address does not appear here. No exceptions, no shortcuts.

This portal is not a marketplace. It is not affiliated with Nexus's administrators. We hold no funds, process no orders, and receive no commissions. The portal exists for one reason: people need a trustworthy reference point to find the current working address for Nexus market. Once you have that address, the opsec guide covers what to do next.

The Electronic Frontier Foundation has documented the scale of darknet phishing infrastructure in its digital security guides. Our verification process applies the same methodology used by privacy researchers to authenticate signed communications — the same method Nexus's own admins use to publish announcements on Dread.

Verification process

How every Nexus link is authenticated

Three steps. No user-submitted links. No scrapers. No social media sourcing. Every address on the mirrors page passed all three before appearing.

01

Source: Dread forum only

Every link originates from the official Nexus admin thread on Dread. The admin posts addresses with a PGP signature attached to each announcement. No other source is accepted — not Telegram channels, not Reddit posts, not clearnet forums, not anonymous tips. The admin Dread thread is the only authoritative origin point.

02

GnuPG signature check

Each announcement's PGP signature is verified with GnuPG against the Nexus admin public key — the same key that has signed every official Nexus communication since launch in November 2023. A valid signature proves the address came from whoever controls that private key. A failed or missing signature disqualifies the address entirely, regardless of how convincing the post looks.

03

Daily re-verification cycle

All four addresses are re-verified each day. If the admin key signs a new announcement — to add a mirror, retire one, or issue a security warning — this page updates within 24 hours. Outdated addresses are archived and marked with a clear status indicator, never silently removed. The timestamp next to each mirror on the mirrors page shows when it last passed full PGP verification.

"Nexus has one of the most distinctive interfaces in the darknet ecosystem. Phishing sites copy it exactly — the dark background, the neon accents, the floating stats cards. The only reliable distinguisher is the .onion address itself, verified against the admin key, not authenticated by visual appearance alone."
From portal verification documentation, February 2024
Chronology

Nexus market and portal timeline

Key milestones from Nexus market launch through current operations. Numbers track the growth of both the platform itself and the phishing infrastructure that followed close behind.

November 22, 2023
Nexus Market launches

First public announcement on Dread. The platform launched with a cyberpunk-inspired interface, three payment methods (BTC, XMR, LTC), and 2-of-3 multisig escrow from day one. Initial user base built partly from migration off a previous market. The visual design attracted immediate attention — and, within days, attracted the first phishing copies.

January 2024
Phishing wave — this portal goes live

At least 11 confirmed phishing mirrors went active, all replicating the Nexus interface with minor color or font variations. Several ranked near the top of search results for "nexus market onion link". This directory launched in response. Initial scope: 4 official mirrors tracked, 2 known phishing domains archived for reference.

Mid 2024
Platform reaches top-2 position by volume

Nexus reached 47,000+ active users and 2,900+ verified vendors. Daily transaction volume climbed past 3,400. The platform added built-in forum governance features and expanded language support to 15+. Multiple independent tracking sources ranked it second by transaction volume globally among active darknet markets at the time.

Q1 2025
DDoS pressure — multi-mirror strategy validated

Coordinated DDoS attacks pushed individual mirrors temporarily inaccessible for 12–48 hour stretches across several incidents. The four-mirror architecture proved its design value: at no point were all four mirrors simultaneously unreachable. This portal updated its tracking to report mirror availability individually rather than treating any single address as the canonical source.

April 2026
Current: 68,451 registered users · 96.6% uptime

Four mirrors verified as of 23 April 2026. Platform uptime over the prior 30 days: 96.6%. Active listings: 21,374. Approved vendors: 2,577. This portal now tracks all four official .onion addresses, updates daily, and archives historical addresses with full verification timestamps. See the mirrors page for the current list.

Platform overview

What Nexus market actually is

Nexus is a darknet marketplace built on the Tor network. Launched in November 2023 by an anonymous team, the platform distinguished itself through two things: design quality and payment flexibility. The cyberpunk aesthetic made it immediately recognizable, and accepting Monero from day one — rather than adding it as an afterthought — signaled technical seriousness to privacy-focused users.

The security architecture uses 2-of-3 multisig escrow: buyer, vendor, and platform each hold one key. Releasing funds requires any two of the three keys, making unilateral fund movement by any single party cryptographically impossible. PGP passwordless login and TOTP two-factor authentication complete the account security layer. For the complete walkthrough, the opsec guide covers PGP setup and 2FA enrollment in detail.


Launched November 2023
Registered users 68,451
Approved vendors 2,577
Active listings 21,374
Payment methods BTC · XMR · LTC
Escrow type 2-of-3 multisig
30-day uptime 96.6%
Interface languages 15+
Verified mirrors 4 active
Nexus market security architecture — multisig escrow and PGP authentication
Why use this portal

This directory versus the alternatives

Most pages that rank for "Nexus market link" are either phishing sites or outdated scrapers. Here is how this portal measures against the alternatives on the criteria that actually affect safety.

Criterion This portal Link scrapers Social media posts Unknown clearnet sites
PGP signature verified ✓ Yes ✗ No ✗ No ✗ Unknown
Updated within 24h of new announcement ✓ Yes ⚡ Varies ✗ Rarely ✗ Unknown
Outdated addresses clearly marked ✓ Yes, archived ✗ Mixed together ✗ Never removed ✗ No
User tracking or advertising ✓ None ⚡ Often tracking ✗ Platform tracking ✗ Unknown
Opsec guidance included ✓ Full guide ✗ No ✗ Rarely ⚡ Varies
Phishing detection guidance ✓ Yes ✗ No ✗ No ✗ Rarely

Before using any Nexus link from an unverified source: cross-check the address character by character against a PGP-signed announcement on Dread. The full verification workflow is in the opsec guide. It takes five minutes and removes the guesswork entirely.

Community

What regular users say about this directory

★ ★ ★ ★
Finally a Nexus link page that explains where the address comes from. Every other site just lists it with no source attribution. The PGP verification context matters — without it you are trusting a random web page and a random person's word.
darknet_regular 10 Apr 2026
★ ★ ★ ★
I use this as my verification reference whenever I see a Nexus address shared on Telegram or Reddit. If it matches what is listed here, I am reasonably confident. If it does not match — it is phishing. Straightforward and it has held up each time.
pgp_first 05 Apr 2026
★ ★ ★ ★
The opsec guide linked from here convinced me to set up Qubes OS before doing anything else. Took a weekend. The timeline section also put Nexus market's history in context I had not found summarized clearly anywhere else.
qubes_convert_22 28 Mar 2026
Further reading

Privacy tools and organizations we reference

Before accessing Nexus market or any darknet platform, your local environment matters more than any link on this page. These are the tools and organizations cited in our verification process and opsec guide.

EFF
Electronic Frontier Foundation
Digital civil liberties advocacy. Publishes guides on surveillance, anonymity, and digital self-defense. Their threat model documentation informs how we categorize risk levels in the opsec guide.
QOS
Qubes OS
Security-by-compartmentalization operating system. Isolates applications in separate virtual machines. Recommended for serious opsec — separate qube for Tor Browser, separate qube for files.
GPG
GnuPG
The tool used to verify every Nexus link on this page. Open-source implementation of OpenPGP. Generate keys, verify signatures, encrypt messages. Required for PGP login on Nexus.
VPN
Mullvad VPN
Privacy-focused VPN with anonymous account sign-up and cash payment. Not a substitute for Tor, but useful as a network layer before connecting to the Tor network.
KPX
KeePassXC
Open-source temporarily inaccessible password manager. Store Nexus credentials and PGP passphrase securely. Never rely on browser-saved passwords for darknet accounts — a browser compromise exposes everything.
SGN
Signal
End-to-end encrypted messaging. If you need to coordinate outside the Nexus platform itself, Signal is the minimum standard. Use disappearing messages for any sensitive discussion.
I2P
I2P Network
An alternative anonymity network. Nexus operates on Tor, but understanding I2P builds context for how overlay networks protect traffic at the routing level — useful theoretical background.
ONS
OnionShare
Share files anonymously over Tor without using a third-party service. Useful for secure file transfer when the receiving party is already on the Tor network.
"The tools above are not optional extras for cautious people. They are the baseline for anyone operating under a real threat model. The weakest point in most opsec failures is not the marketplace — it is the unmanaged local environment the user arrived with."

For cryptocurrency security fundamentals, Coinbase Learn covers wallet types and transaction privacy accessibly. For on-chain transaction verification, Blockchain Explorer provides independent confirmation of on-chain activity. For search without tracking, DuckDuckGo and SearXNG are the recommended defaults over standard search engines.

Amnesty Tech publishes threat intelligence on commercial surveillance infrastructure relevant to anyone with a serious threat model. For peer-to-peer encrypted communication with no central server architecture, Briar Messenger is designed for use in adversarial network conditions.

Ready to proceed

Get the verified Nexus .onion address

The mission of this portal is to give you one thing accurately: the correct Nexus .onion address, verified against the admin PGP key, with full transparency about the source. Four mirrors. All verified 23 April 2026.