Nexus market mirrors, as published on this site
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionPublished as supplied. This site does not probe an onion, so nothing here is a claim that a given address opens for you right now.
A typo in a nexus market url takes about a second to happen and lives on the page that opens. The next few actions decide whether it stays a typo or turns into something worse.
What it is
A typo is a single wrong character in a 56 character run followed by .onion. One letter, one digit, one dropped block or one repeated block. The v3 format does not correct itself. Either the string checksum works out to a real onion service and a page opens, or the string fails at the client and the browser reports no such address.
The state this card is about is the first one: a wrong string has resolved and a page has opened. The reader is looking at the page. The page is not the site.
Lifeline
- Right string in the source
- Wrong page open
- Typo caught, or paste made worse
What the returned page cannot ask for
- A password for the market. If the reader had not intended to log in on the wrong string, the login page in front of them is not the market.
- A deposit address to top up a balance. A wrong page that shows a deposit prompt is the standard shape of a lookalike.
- A shipping address. The signal card for order status vocabulary covers the tells here.
- A second factor token. If the field is on the wrong page, the token is going somewhere the reader does not know.
How to read the address bar in the next twenty seconds
- Length
- The visible run before
.onionshould be 56 characters. Fewer or more means the string is not a v3 onion at all. - Character set
- Every character should be a lowercase letter from
atozor a digit from2to7. A number one, a zero or an eight is a signal the paste picked something up. - Vanity head
- The first characters should spell nexus and a short readable tail. A typo often lands there, because that is the block a reader remembers.
- Body of the address
- The middle of the run is where a lookalike carries a swapped block. Cross a block against the panel above.
A small next check
- Do not paste any secret onto the returned page.
- Copy the string in the address bar. Read it against one line on the panel above, block by block.
- When the wrong character is found, close the tab. Do not fix the string in the address bar and press enter, because the returned page has already seen the attempt.
- On the surface the typo came from, cross the wrong character out and write the right one in the same hand.
The three windows a typo can be caught in
- Before enter
- The address bar holds a string that has not resolved yet. A count and a compare is enough. The cost of a catch here is nothing.
- After enter but before any input
- The wrong page is on screen. The reader has not typed anything into it. The cost of a catch here is a closed tab.
- After a first input
- A password, a token or a form field has been submitted to the wrong page. The catch is late and the follow up is on the failed login card or on the trap card for a fake login domain.
How to reread a string on the address bar
- Click into the address bar to select the string.
- Read the first four characters out loud, or in a whisper.
- Read the last four characters the same way.
- Compare each of those two blocks against the same blocks on a trusted line on the panel above.
- If the two ends agree, walk through the middle in blocks of four or five. Most typos live in the middle if they are not in the vanity head.
What a fresh reload does and does not do
- A reload of the wrong page returns the same wrong page. The typo is on the string, not on the response.
- A reload does not clear the fact that the request has been made against the wrong service. Every request has already gone out.
- A reload on the corrected string is a fresh request against the right service.
- Do not correct the string in the address bar and reload from the wrong page. Close the tab and open a fresh one from a trusted source.
Engagement
56characters in the run before .onion
4checks against the address bar
3windows a typo can be caught in
4related dossiers linked below
What this card does not say
- It does not say the wrong page is a scam. Many wrong onions are just other services that happen to have valid checksums.
- It does not name the domains that host known fakes.
- It does not put a date on when a specific typo pattern was first seen.
- It does not offer an autocorrect for onion strings.
Discover more
TrapsLowercase l against I in a nexus market addressThe letter l next to a capital I. One letter apart, one shape apart, one costly paste apart.TrapsA lookalike nexus market address with one swapped blockThe head reads familiar, the tail reads familiar, and one block in the middle has been swapped.AfterAfter a failed nexus market login attemptThe submit came back. The account may be fine, the string may be wrong, the captcha may have timed out.PathsTyping a nexus market url from memoryA path with no medium in the middle. The muscle memory is the whole record and the whole risk.