Verify before you sign in
A fake login page is the one real danger here. These steps take a minute and remove it.
Install Tor Browser from the source
Download Tor Browser only from the Tor Project website, verify it the first time, and set the security level to Safest. A normal browser cannot open an onion address.
Copy a verified address
Take an address from the mirror list, never type one from memory. A single wrong character can land you on a lookalike registered to catch that mistake.
Check the login screen
Nexus prints its onion inside the anti-phishing image and again in the header. Compare it against your address bar before your password. If the two do not match, close the tab.
If a mirror is down
Request a new Tor circuit and retry, or switch to another address on the list. They all reach the same market, so nothing is lost by moving.
Keep the account safe
Use a username you have never used elsewhere, a long unique password, and turn on PGP two-factor. No real login ever asks for your recovery phrase.
nexusb2l7jnnbmofyik5fqdemwg6inbg4e3i2pi75uewuw34zwvx2ryd.onionnexusma2iekjhhyenua3u4zlyfsj2ubwxr2nt6gdte5rvwukzze63fyd.onionnexusabcdrstn74osnr67fsbzbo44kjpxqbbz5ymcwhlxjg6dloyhoyd.onion