DANGEROUS

Critical risk detected

nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion is a look-alike (homoglyph) of a well-known domain. Our security stack flagged multiple threat indicators on this website. Don't enter personal information, deposit money, or download files.

Security Review

Is nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion legit or a scam?

Our verdict:Dangerous· 25/100

Listed secondary mirror for Nexus darknet marketplace showing clean blocklist status and positive mirror-site reviews but no verifiable business presence.

nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onionScanned 4d ago
0
Trust score
DANGEROUS
Heuristics 75·MT 25
Category tags
darknet marketplace75% MT confidence
Technical red flags (1)
Lookalike domain suspected
Positive signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
Data unavailable
Domain Age
Registration date unknown
MT Intelligence
Suspicious
Moderate likelihood · 75% confidence

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust25/100
MT AgentLive web researchVisual inspection
0%
Confidence
The URL resolves to a .onion address explicitly listed across multiple aggregator sites as an official backup mirror for Nexus Market. No scam reports, complaints, or clone indicators appear in our research, and browser blocklists returned clean. Positive user comments on mirror directories highlight escrow and PGP features, yet the domain carries no public business registration and sits outside normal web indexing. Darknet marketplaces inherently carry elevated transaction and legal risks even when the specific mirror is not itself flagged as fraudulent.
Full dossier
Analysis complete

Page Content

The page functions as a darknet marketplace entry point with references to multi-sig escrow, XMR/BTC payments, and vendor verification systems typical of such platforms.

Infrastructure

Hosted exclusively as a Tor .onion service with zero redirects and a long random subdomain string; no SSL or WHOIS data available due to the protocol.

Domain History

Appears only as a secondary mirror in aggregator listings alongside other verified .onion addresses; no independent registration records located.

Web Reputation

Zero scam reports or complaints found; three positive reviews on mirror directories praise security and reliability, with the domain presented as PGP-verified.

Risk Factors
3
  • Operates solely on the dark web with no public business registration or mainstream presence.
  • Global traffic index shows the domain is not indexed by standard search engines.
  • Typical of marketplaces handling potentially restricted goods and services.
Positive Signals
4
  • Browser blocklist feeds returned clean with no detections.
  • Listed as an official secondary mirror on multiple aggregator sites with current canary.
  • Zero scam reports or complaints located for this exact domain.
  • Positive user feedback on escrow and security features appears on mirror directories.
AI Recommendation
Avoid accessing darknet marketplaces unless you fully understand the legal and security risks involved; never share personal information or send funds without independent verification.
Next-gen fraud intelligence
Evidence-backedCross-checked

Website Preview

Screenshot of nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion
LIVE RENDER
nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 positive
Key findings
6 headline facts from open-web research
  • Domain appears exclusively as a listed secondary/backup mirror for Nexus darknet marketplace (e.g., nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion)
  • Multiple mirror aggregator sites (nexuswatchlink.org, nexusmarket-mirror.info, nexus-link.store, nexus-market.nexus) describe it as PGP-verified with current canary as of May 2026
  • No scam reports, complaints, or negative mentions found in web searches for the exact domain
  • Sites promote it alongside primary mirrors like nexuseuszbyooiqnpmstgtzssbcftr43yoj6e3yuo3nrqk7gsipdfead.onion and nexusc4fexvg56avvkne2qgmgseaq3inndfwrtdtoz3jwl7hdfqx5dad.onion
  • Associated with claims of multi-sig escrow, XMR/BTC payments, and vendor verification on Nexus Market
  • No evidence of it being a clone or typosquat; presented as official mirror in verification registries
Positive reviews (3)
Quotes indicating the site is legitimate.
  • nexusmarket-mirror.infoopen

    "I've been using Nexus Market for several months now and I'm impressed by the level of security and the quality of vendors. The **PGP 2FA** and robust **escrow system** make transactions safe and reliable."

  • nexus-link.storeopen

    "Best **Nexus darknet** marketplace with reliable payment system. **Nexus market** escrow works perfectly."

  • nexusofficial-darknet.comopen

    "The quality is amazing and delivery was super discreet. Been a customer for over a year now and never had any issues. The vendor verification system really works!"

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research located three positive reviews on mirror aggregator sites praising escrow, PGP 2FA, and vendor verification. No scam reports, complaints, or negative mentions were found for this specific .onion address. The domain is consistently presented as a verified secondary mirror for Nexus Market alongside other listed .onion addresses.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

  • Our automated security review flags nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

0
Trust / 100
Final Verdict·nexusck4c5hrdikdhoyh5jxuxzrcm2cfqlk5saqwdkdosu7irbraqgyd.onion
DANGEROUS

This is a listed mirror for the Nexus darknet marketplace. Our analysis found no scam reports or complaints and several positive mentions on mirror sites, but the site operates on the dark web with no public business records.

Avoid accessing darknet marketplaces unless you fully understand the legal and security risks involved; never share personal information or send funds without independent verification.

AV engines
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.