// pgp_verify.shNexus Market PGP Verification

Cryptographic verification protocol for Nexus Market onion addresses. PGP verification is the only reliable method to distinguish legitimate mirrors from phishing clones.

threat_model

Why Verification Is Critical

THREAT_01

phishing_clone.attack

Phishing sites replicate Nexus Market interface exactly. They capture credentials and redirect Monero deposits to attacker wallets. Visually indistinguishable without address verification. PGP is the only protection.

THREAT_02

pgp_signature.defense

PGP signatures provide mathematical proof of authenticity. An attacker cannot forge a valid signature for a fake address without the admin private key. Verified addresses are safe to use.

Verification Protocol

Step 1 — Install GPG

Linux: sudo apt install gnupg — Windows: gpg4win.org — macOS: gpgtools.org. GPG is the standard open-source implementation of the PGP standard.

Step 2 — Import Nexus Market Admin Key

Navigate to the official Nexus Market Dread subdread (d/NexusMarket). Locate the pinned post containing the admin PGP public key. Copy the key block including BEGIN and END markers. Run: gpg --import nexus_admin.asc. Verify the key fingerprint against multiple independent sources.

Step 3 — Find Signed Mirror Announcement

The Nexus Market admin posts PGP-signed mirror announcements on Dread whenever onion addresses change or new mirrors are added. Find the most recent signed post. Copy the entire PGP-signed block.

Step 4 — Verify Signature

Save the signed block as a text file. Run: gpg --verify nexus_mirrors.txt. A valid result shows "Good signature from" followed by the admin key details. Any other result means the signature is invalid — do not use the addresses.

Step 5 — Compare Addresses

After successful verification, compare the onion addresses in the signed text against the addresses shown at the top of this page. Compare every single character of the 56-character v3 address. A single character difference indicates a phishing clone.

Red Flag Reference

Signal	Risk Level	Action
Address not in PGP-signed post	[HIGH]	Do not use — likely phishing
GPG shows invalid signature	[CRITICAL]	Abort — tampered data
Address shared only via chat	[HIGH]	Verify before use
Login page layout different	[MEDIUM]	Recheck address
Requests unusual information	[CRITICAL]	Exit immediately