NEXUS SAFETY GUIDE
Independent harm-reduction information to help you stay safe, verify sources, and avoid common traps. [ VERIFY • PROTECT • STAY AWARE ]
ABOUT THIS RESOURCE
This temporary page exists to provide harm-reduction guidance for people who may interact with privacy-focused marketplaces. It does not publish access addresses or facilitate entry to any platform.
The most common risks—phishing clones, credential theft, and unverified mirrors—are preventable with basic operational security. This guide focuses on practical steps you can take before, during, and after any session.
Always treat unofficial directories, search results, and social media posts as untrusted. Obtain addresses only through channels you can independently verify, and never share passwords or recovery details with anyone.
PHISHING AWARENESS
Fake login pages are the leading cause of account compromise. Learn to spot impersonators before you enter credentials.
PGP VERIFICATION
Cryptographic signatures let you confirm announcements and links came from a trusted source—not a copycat site.
ESCROW HYGIENE
Understand how escrow protects both parties, when disputes arise, and how to document transactions properly.
ESSENTIAL SAFETY PRACTICES
1. USE THE OFFICIAL TOR BROWSER
Download Tor Browser only from torproject.org. Verify the download signature. Never use VPN-only setups or modified browsers when anonymity matters.
2. NEVER TRUST SEARCH ENGINES OR WIKIS
Indexed results and community wikis are routinely poisoned with phishing links. Bookmark only addresses you have personally verified through signed announcements.
3. VERIFY EVERY ANNOUNCEMENT
Before acting on any link or policy change, check the PGP signature against a key you obtained from a trusted, prior-verified source. Unsigned or invalid signatures are a hard stop.
4. SEPARATE YOUR IDENTITIES
Use a dedicated device or isolated environment. Do not reuse passwords, usernames, or payment patterns from clearnet accounts. Disable browser extensions that can fingerprint or leak data.
5. START SMALL & DOCUMENT
For first transactions, use minimum amounts. Save encrypted message logs, order IDs, and timestamps. Good records are essential if a dispute arises.
REMEMBER
Legitimate platforms will never ask for your password via chat, email, or support tickets. Anyone requesting credentials or remote access is attempting to compromise you.
SECURITY PROTOCOLS
Strong security is a shared responsibility. Platforms may offer encryption and escrow, but your choices—browser hygiene, address verification, and message encryption—determine whether you stay protected.
ZERO-KNOWLEDGE PRINCIPLE
Prefer services that collect minimal personal data. Assume any stored information could be exposed. Provide only what is strictly required.
AUTOMATIC THREAT RESPONSE
Be alert to unusual login prompts, captcha loops, or unexpected downtime. These can signal a man-in-the-middle attack or a compromised mirror. When in doubt, stop and re-verify.
CRYPTOCURRENCY SAFETY
Privacy-focused coins reduce traceability, but wallet mistakes are irreversible. Double-check addresses character by character. Never send funds to addresses received in unencrypted messages.
PGP VERIFICATION BASICS
PGP (Pretty Good Privacy) lets you confirm that signed messages were created by the holder of a private key—and that the content was not altered in transit. This is your primary defense against forged link lists and fake announcements.
Import the official public key
Obtain the key from a source you already trust—never from the same page you are trying to verify.
Check the fingerprint
Compare the key fingerprint against values published through independent, previously verified channels.
Verify every signed message
Use GnuPG, Kleopatra, or your preferred client. A valid signature from the correct key is required before you act on any address or policy update.
Encrypt your own communications
Use your own PGP key for sensitive messages. Never share order details, addresses, or personal information in plaintext.
FREQUENTLY ASKED QUESTIONS
WHY DOESN'T THIS PAGE LIST ACCESS LINKS?
This is a temporary harm-reduction resource. Publishing addresses on clearnet pages increases phishing risk and helps scammers SEO their clones. Obtain links only through signed, independently verified announcements.
HOW DO I SPOT A PHISHING SITE?
Warning signs include: missing or invalid PGP signatures, unfamiliar captcha styles, login pages that appear before you expect them, subtle spelling differences in addresses, and pressure to act quickly. Always verify before entering credentials.
WHAT CRYPTOCURRENCIES ARE SAFEST?
Privacy-oriented coins like Monero (XMR) offer stronger default anonymity than transparent ledgers. If you must use Bitcoin, understand that on-chain activity is publicly traceable and plan accordingly.
HOW DOES ESCROW PROTECT ME?
Escrow holds payment until both parties confirm the transaction is complete. If something goes wrong, documented evidence allows moderators to review the case. Never agree to finalize early or pay outside escrow.
IS PGP REALLY NECESSARY?
Yes. PGP is used for account security, encrypted messaging, and verifying official communications. Operating without it exposes you to interception and makes phishing far harder to detect.