// FAQ · networks

Clearnet, browsing, Tor.

Three labels you will see on this site. Two of them name the same public internet; one is an overlay built for anonymity. Plain definitions — plus the free and open-source tools we point people at for PGP, mail, VPN, acquire and custody.

// Short versionNormal browsing = using the public internet the usual way.Clearnet = that same public internet, named in contrast to Tor/I2P.Tor = relayed overlay + optional .onion services. This page is educational hygiene, not legal advice.

Three labels

01

Normal browsing

Everyday use of the public internet: Chrome, Firefox, Safari over your ISP or mobile data. Sites resolve via DNS (example.com). Your ISP sees destinations; sites usually see your IP.

02

Clearnet

The same public internet — the term used when contrasting it with anonymity networks. s3ct0rz3r0.io is a clearnet surface. Not a second network; a name for the ordinary one. A VPN on clearnet is recommended so your ISP does not see every destination.

03

Tor network

An overlay on top of the internet. Traffic is relayed through volunteer nodes so no single hop sees both who you are and what you fetch. Can reach clearnet sites via exits, or .onion services that never leave Tor.

// PATH · WHAT EACH HOP SEES
CLEARYou → ISP → site. ISP sees destination. Site sees your IP.
TOR→WEBYou → Tor relays → exit → clearnet site. Site sees exit IP, not yours.
ONIONYou → Tor relays → .onion service. No exit. No public A record for the service.
$ https hides content · tor weakens IP linkability · accounts still identify_

Recommended software

Freely available tools — open source where possible — that show up repeatedly in privacy-friendly forums and chat. Aligns with the PGP and pay guides. Download only from the official links. Verify signatures or hashes when published. We are not affiliated; URLs and packaging change.

// NoteVPN services below are paid (clients are FOSS). Skip “free VPN” apps that monetise traffic or require a real identity. A VPN helps on clearnet; it does not replace Tor or OpenPGP.
// Encrypt · sign

PGP

  • KleopatraFOSS · Windows

    GUI over GnuPG (ships in Gpg4win). Generate keys, import ours, encrypt/decrypt — Path A and Path B on the PGP guide.

    gpg4win.org →
  • GnuPGFOSS · CLI

    Reference OpenPGP implementation. Default on most Linux installs; Path D on the PGP guide.

    gnupg.org →
// Mail client

Email

  • BetterbirdFOSS · desktop

    Thunderbird fork with upstream fixes retained. Built-in OpenPGP for encrypt/sign on send and receive, or import keys from Kleopatra (Paths B and C).

    betterbird.eu →
// Clearnet tunnel

VPN

  • MullvadPaid · FOSS apps

    Account number only — no email required. Cash and XMR accepted. Open-source clients. Common pick in privacy forums for ISP blinding on clearnet.

    mullvad.net →
  • IVPNPaid · FOSS apps

    Privacy-focused provider with open-source apps, anonymous signup options, and a clear no-logs stance. Solid Mullvad alternative.

    ivpn.net →
// Overlay

Tor

  • Tor BrowserFOSS

    Official client for the Tor network and .onion sites. Verify the signature from torproject.org when you can.

    torproject.org →
// Acquire · P2P

Crypto procurement

  • RetoSwapFOSS · Haveno network

    Live Haveno-based P2P client for AUD↔XMR over Tor with multisig escrow. Preferred XMR on-ramp in the pay guide.

    retoswap.com →
  • BisqFOSS · desktop

    P2P BTC (and more) over Tor. Classic trades need a small BTC security deposit. Strong when you already think in Bitcoin.

    bisq.network →
  • PeachFOSS · mobile

    Mobile P2P Bitcoin. Easier first BTC buy than Bisq; your bank still sees a PayID to a person.

    peachbitcoin.com →
// Self-custody

Crypto storage

  • FeatherFOSS · desktop XMR

    Lightweight Monero wallet for Linux, Windows, macOS and Tails. Primary desktop XMR wallet in the pay guide.

    featherwallet.org →
  • Cake WalletFOSS · mobile

    Non-custodial mobile wallet with strong Monero support (plus other assets). Seed offline; never in cloud notes.

    cakewallet.com →
  • SparrowFOSS · desktop BTC

    Bitcoin desktop wallet with hardware-wallet support. Use for BTC you acquire via Bisq or Peach before convert or CoinJoin.

    sparrowwallet.com →
  • WasabiFOSS · CoinJoin

    Bitcoin wallet with built-in non-custodial CoinJoin (Wasabi 2.x). Path C when paying a BTC invoice.

    wasabiwallet.io →
// FAQ
Are “clearnet” and “normal browsing” different networks?

No. Clearnet is the privacy community’s word for the ordinary public internet — the same network you use when you open a normal browser. “Normal browsing” is how most people use that clearnet: ISP connection, standard browser, public DNS, public IP. Tor is the overlay that sits on top of the internet; it is not a replacement for the physical wires, only for how packets are routed and who can see them.

How does normal / clearnet browsing work?

Your device asks DNS for an IP, opens a TCP (usually TLS) connection to that host, and fetches a page. Your ISP and any on-path observer can see that you talked to that IP (and often the SNI hostname). The site operator sees your IP, timing, and whatever the browser sends. Encryption (HTTPS) hides page content from the ISP; it does not hide that you visited the host.

How does Tor work?

Tor Browser (or another Tor client) builds a circuit through three relays: guard, middle, exit (for clearnet destinations). Each hop only knows the previous and next address. For onion services (.onion), traffic stays inside Tor — there is no exit node and the service’s real IP is not published in DNS. Latency is higher; that is the cost of the relay path.

Why does clearnet exist?

It is the default global network: commerce, mail, APIs, search, banking, government services. It exists for reachability and convenience. Operators publish under normal domains so anyone with an ISP connection can find them. Privacy is optional and uneven — HTTPS helps content, not metadata.

Why does Tor exist?

To reduce linkability between identity and activity. Researchers, journalists, activists, people under surveillance, and operators who want visitors without logging client IPs use it. Onion services also resist simple hosting takedowns tied to a public A record. Tor does not make you “invisible”; it changes who can correlate endpoints. Browser fingerprints, login accounts, and payment trails can still identify you.

How do I access the clearnet?

Any ordinary browser and internet connection. You are already on clearnet when you load https://s3ct0rz3r0.io/. No special client required. Using a VPN on clearnet is recommended — it hides destinations from your ISP and swaps the IP the site sees for the VPN egress. Pick a provider you trust; a bad VPN is a single logging point. A VPN is not Tor and does not replace OpenPGP for message content.

How do I access Tor?

Download Tor Browser from the official Tor Project site (torproject.org). Verify the signature when you can. Open it; it boots a Tor circuit and a hardened Firefox-based browser. To visit an onion site, paste a .onion address into that browser — Chrome and Safari will not resolve .onion without Tor. Some apps (Haveno, Bisq, Wasabi) use Tor as a socks proxy without using Tor Browser for every click.

Who uses clearnet, and for what?

Everyone who needs reach and familiarity: customers, search engines, payment callbacks, mail delivery, status pages. We publish this marketing surface on clearnet so you can find us without installing Tor first. Sensitive order detail still moves over PGP (and later, onion mirrors where offered).

Who uses Tor, and for what?

People who want weaker ISP/site IP linkage; readers in censored networks; operators offering .onion mirrors so clients never hit a public exit. Legitimate uses dominate Tor traffic by design of the network. Criminal misuse exists on every network — that does not redefine Tor any more than it redefines HTTPS. For our stack: a live marketing .onion mirror; Presence + and Dark Store + client builds ship .onion by default (base Presence / Dark Store are clearnet-only); Tor-first P2P acquire paths in the pay guide; privacy-minded ops.

If I open this site in Tor Browser, am I on clearnet or Tor?

Both, in different senses. The destination is still a clearnet hostname (DNS + public hosting). Your path to it went through Tor exits, so the origin sees a Tor exit IP, not your home IP. A true onion mirror is .onion-only and does not use a public A record for that hostname. Ours is published on Trust and Contact, and advertised from clearnet via Onion-Location.

Is Tor a VPN?

No. A VPN is one encrypted tunnel to a single provider who can see your full session and often knows who you are as a customer. Tor distributes trust across relays; no single relay should see both ends. On clearnet we still recommend a VPN against your local ISP and network; it does not replace Tor’s threat model, and a bad VPN is a single point of logging.

What should I use with S3CT0R?

Find us on this clearnet site — preferably over a VPN. Encrypt briefs with OpenPGP before they leave your machine. Prefer XMR and the pay guide’s private acquire paths (many of those clients already force Tor). This site has a live .onion mirror — open it in Tor Browser when clearnet is blocked or you prefer not to hit apex. Clearnet (+ VPN) for discovery; Tor and PGP for the parts that need a stronger barrier. Concrete downloads are in Recommended software.

Can I try a small payment before booking work?

Yes. Tips on Donate use the same self-hosted BTCPay rails as package invoices (not engagement fees). For Dark Store evaluation, walk a full cart → checkout → refund-request path on the Umbra Supply sandbox (tiny mainnet amounts; no fulfilment). Presence / Presence+ are demonstrated by this live site and its .onion — not the shop. Acquire and custody steps stay on How to pay.

Do you sell phones with GrapheneOS?

Yes — GrapheneOS Ready on the current Pixel 10 series only. Bare GrapheneOS (install, verified-boot relock, Auditor check, hardening checklist, setup guide). Condition: new, grade A, or grade B; all official storage tiers; primary and secondary colour preference. Stock SKUs: fixed XMR cart at shop.s3ct0rz3r0.io; express postage within Australia included; tracking when shipped. Made to order (typically 5–10 business days after payment). Client ship-in is not offered. Custom OS presets use the quote checklist via Contact — BTCPay invoice link after quote, not the cart. Payment paths: How to pay. GrapheneOS reduces OS and app telemetry; it does not make you invisible to a mobile network. We are not affiliated with the GrapheneOS project.