Nexus Market currently publishes three v3 hidden-service endpoints. All three resolve to the same back-end and any of them is the right one to use — the operator keeps several running concurrently so that pressure on a single onion does not take the site off the network.
- 01 nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion
- 02 nexuspokkxp4ayqqec3c3lkekwhnjdqur5bqiocemx4t6sy3werqihad.onion
- 03 nexusaskv3n5lse2zs3gg2lvxdisi4xroq45t3gtjsien3lzun5tb7qd.onion
Each of those is a 56-character v3 fingerprint. Before submitting credentials, verify the full string against the operator’s PGP-signed announcement pinned in their Dread account. The first eight characters are an operator-chosen vanity prefix; phishers can and do generate strings that match the prefix and randomise the rest, so a partial-prefix match is not a verification.
Why three onions?
A single hidden service is cheap to denial-of-service against. Publishing several lets traffic move between them without any client-side reconfiguration; if one address starts misbehaving, paste another from the list above into Tor Browser and continue.