The Nexus Market URL question
Why the question as usually asked has no good answer, and what to do instead of looking for one.
People arrive here having searched for the current address and expecting a single string to write down. The useful answer is that no such string exists, and understanding why saves a lot of trouble later.
Why a permanent address would be worse
A stable address sounds like the convenient option. In practice it is the thing every attacker wants you to have, because a stable address is a stable target. It can be flooded indefinitely. It can be built into phishing kits that never need updating. It accumulates every scraped list and abandoned bookmark on the internet until most of what reaches it is not a person.
More to the point, a permanent address teaches a habit that gets people caught. Somebody who has typed the same string for two years stops checking, and the whole attack against them is a string that differs somewhere in the middle where nobody looks. Familiarity feels like verification and is not.
What to bookmark instead
Bookmark a place that resolves to the current answer rather than an answer that will expire. That is the function this newsroom serves. The addresses on the masthead are current as of the timestamp shown beside them, and when they change the page changes with them.
The trade is explicit. You are choosing to trust one clearnet page to tell you the truth about which onions are current, instead of trusting a saved string to still be correct. That is a better trade because the page is checkable and the saved string is not, but it is a trade and you should make it knowingly.
The check that makes it safe
Whatever route you take, the arrival check is the same and it is not optional.
- Open the address in Tor Browser. Not a proxy, not a clearnet gateway, not an app that promises to make onions easier.
- Set the security level to Safest before you go anywhere that matters.
- Read the signed timestamp on the login screen and verify it against the fingerprint you pinned, not against a key the page offers you.
- Check the date inside the signed block. A valid signature over an old statement is still valid, and replaying old statements is a known trick.
If verification fails, leave without typing anything. There is no situation in which a failed signature is worth working around, and the excuses offered for one, key rotated, signature stripped by the forum, will sign it later, are all the same lie in different clothes.
The version of the question worth asking
Not what is the address, but how do I know the address I have is current and genuine. The first question has an answer that expires. The second has an answer that keeps working, which is why this page spends its length on the second one.
Verified working Nexus Market mirrors
Three v3 onion addresses currently serving the production market, signed under PGP fingerprint 0x7F2A0A9D. Use the Copy buttons.