Nexus market mirrors, as published on this site
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionPublished as supplied. This site does not probe an onion, so nothing here is a claim that a given address opens for you right now.
This is the dossier for the nexus market url trap that has nothing to do with a wrong letter and everything to do with how many letters the reader looks at. A vanity prefix recognised in two or three letters passes the check that a full check would fail.
What it is
A nexus market url begins with a short readable prefix in the v3 onion. The prefix spells the word nexus and then a couple of characters after it. A reader who has typed the address before glances at the prefix, recognises the first two or three letters, and accepts the rest on faith. A lookalike address whose prefix also begins with the same two or three letters passes that glance, even if the fifth or sixth character in the prefix is not the same.
The trap is a reading habit, not a font quirk. The habit is efficient in everyday life. It fails on a nexus market url because the identity of the address is in the whole string, not in the prefix. A prefix that reads familiar for the first three characters and drifts on the fourth is a prefix a habit will pass every time.
Where the habit comes from
The habit comes from every other address the reader ever reads. Domains on the clearweb are usually short. The first two or three letters of a familiar domain are often enough to identify it. Onion addresses do not work that way. The vanity prefix on an onion is a courtesy to the eye. The identity of the address is in the whole run of fifty six characters.
A page that publishes the vanity prefix on its own, with the rest of the address in a smaller font next to it, teaches the habit. A page that publishes the whole address in one uniform monospace face, with no visual weight put on the prefix, teaches the check.
Lifeline
- A prefix on a clearnet domain
- The same habit read into an onion
- The whole string read every time
How to catch it
The catch is a discipline. The reader either checks the whole vanity prefix or reads the last five characters of the string before the .onion label. Either check is small. Both together take a couple of seconds. Neither check is possible on a copy that has cut the middle of the address. The catch works on the paste, not on the source, because the paste is the moment before the address is opened.
- A three letter check
- Read only the first three characters. A lookalike wins here about as often as not, so this check is not a check.
- A five letter check
- Read the first five characters and the last five characters, with the middle skipped. A lookalike loses on the tail more often than on the head.
- A full check
- Copy the address into a monospace field and compare it to the source line by column. The tor browser address bar does this by displaying the string in monospace.
What this card does not claim
- It does not print a lookalike nexus market url in full. The trap is the reading habit, and the card describes the habit.
- It does not say any one vanity variant is more legitimate than another. This site publishes three, in the order supplied.
- It does not say a longer prefix is a safer prefix. Longer prefixes are more expensive to generate, not more meaningful to check.
A reader who checks the tail
A reader who checks the last five characters of the visible run before the .onion label finds a lookalike faster than a reader who checks only the head. The tail carries the checksum body of the onion and is where a lookalike is least likely to match. Every nexus market url on the panel above has a tail the reader can see and remember.
How much of the tail is worth reading
The tail of a v3 onion is not one number the reader should memorise. It is a stretch of characters that can be sampled from either end. A reader who reads the last three characters catches some lookalikes. A reader who reads the last five catches more. A reader who reads the last eight catches most. The point of the tail check is not to prove the address, but to make a lookalike work harder to pass.
The head is the same idea from the other end. The vanity prefix is not a check on its own, but the first eight characters read together carry more information than the first three read alone. The reader who reads eight and eight has covered sixteen characters out of fifty six, and has to trust the middle forty. That is not a proof, but it is more than a habit.
A reading practice, not a lookup
The check for this trap is a reading practice. It does not need a tool, a lookup, a probe or a script. A monospace field and a source line are enough. A reader who runs the practice once on the panel above can run it any time the same reader sees an address in the wild. The practice belongs to the reader, and travels with them across surfaces.
A reading practice is easier to keep than a tool because the reader always carries it. A tool needs to be installed on the machine at hand. A script needs to be run. A reading practice runs in the eye and takes as long as the reader is willing to spend on the tail of the string. On a nexus market url that time is a few seconds each way, or the fifteen seconds it takes to read the whole string once end to end.