Normal browsing
Everyday use of the public internet: Chrome, Firefox, Safari over your ISP or mobile data. Sites resolve via DNS (example.com). Your ISP sees destinations; sites usually see your IP.
Three labels you will see on this site. Two of them name the same public internet; one is an overlay built for anonymity. Plain definitions — plus the free and open-source tools we point people at for PGP, mail, VPN, acquire and custody.
Everyday use of the public internet: Chrome, Firefox, Safari over your ISP or mobile data. Sites resolve via DNS (example.com). Your ISP sees destinations; sites usually see your IP.
The same public internet — the term used when contrasting it with anonymity networks. s3ct0rz3r0.io is a clearnet surface. Not a second network; a name for the ordinary one. A VPN on clearnet is recommended so your ISP does not see every destination.
An overlay on top of the internet. Traffic is relayed through volunteer nodes so no single hop sees both who you are and what you fetch. Can reach clearnet sites via exits, or .onion services that never leave Tor.
Freely available tools — open source where possible — that show up repeatedly in privacy-friendly forums and chat. Aligns with the PGP and pay guides. Download only from the official links. Verify signatures or hashes when published. We are not affiliated; URLs and packaging change.
GUI over GnuPG (ships in Gpg4win). Generate keys, import ours, encrypt/decrypt — Path A and Path B on the PGP guide.
gpg4win.org →Reference OpenPGP implementation. Default on most Linux installs; Path D on the PGP guide.
gnupg.org →Thunderbird fork with upstream fixes retained. Built-in OpenPGP for encrypt/sign on send and receive, or import keys from Kleopatra (Paths B and C).
betterbird.eu →Account number only — no email required. Cash and XMR accepted. Open-source clients. Common pick in privacy forums for ISP blinding on clearnet.
mullvad.net →Privacy-focused provider with open-source apps, anonymous signup options, and a clear no-logs stance. Solid Mullvad alternative.
ivpn.net →Official client for the Tor network and .onion sites. Verify the signature from torproject.org when you can.
torproject.org →Live Haveno-based P2P client for AUD↔XMR over Tor with multisig escrow. Preferred XMR on-ramp in the pay guide.
retoswap.com →P2P BTC (and more) over Tor. Classic trades need a small BTC security deposit. Strong when you already think in Bitcoin.
bisq.network →Mobile P2P Bitcoin. Easier first BTC buy than Bisq; your bank still sees a PayID to a person.
peachbitcoin.com →Lightweight Monero wallet for Linux, Windows, macOS and Tails. Primary desktop XMR wallet in the pay guide.
featherwallet.org →Non-custodial mobile wallet with strong Monero support (plus other assets). Seed offline; never in cloud notes.
cakewallet.com →Bitcoin desktop wallet with hardware-wallet support. Use for BTC you acquire via Bisq or Peach before convert or CoinJoin.
sparrowwallet.com →Bitcoin wallet with built-in non-custodial CoinJoin (Wasabi 2.x). Path C when paying a BTC invoice.
wasabiwallet.io →No. Clearnet is the privacy community’s word for the ordinary public internet — the same network you use when you open a normal browser. “Normal browsing” is how most people use that clearnet: ISP connection, standard browser, public DNS, public IP. Tor is the overlay that sits on top of the internet; it is not a replacement for the physical wires, only for how packets are routed and who can see them.
Your device asks DNS for an IP, opens a TCP (usually TLS) connection to that host, and fetches a page. Your ISP and any on-path observer can see that you talked to that IP (and often the SNI hostname). The site operator sees your IP, timing, and whatever the browser sends. Encryption (HTTPS) hides page content from the ISP; it does not hide that you visited the host.
Tor Browser (or another Tor client) builds a circuit through three relays: guard, middle, exit (for clearnet destinations). Each hop only knows the previous and next address. For onion services (.onion), traffic stays inside Tor — there is no exit node and the service’s real IP is not published in DNS. Latency is higher; that is the cost of the relay path.
It is the default global network: commerce, mail, APIs, search, banking, government services. It exists for reachability and convenience. Operators publish under normal domains so anyone with an ISP connection can find them. Privacy is optional and uneven — HTTPS helps content, not metadata.
To reduce linkability between identity and activity. Researchers, journalists, activists, people under surveillance, and operators who want visitors without logging client IPs use it. Onion services also resist simple hosting takedowns tied to a public A record. Tor does not make you “invisible”; it changes who can correlate endpoints. Browser fingerprints, login accounts, and payment trails can still identify you.
Any ordinary browser and internet connection. You are already on clearnet when you load https://s3ct0rz3r0.io/. No special client required. Using a VPN on clearnet is recommended — it hides destinations from your ISP and swaps the IP the site sees for the VPN egress. Pick a provider you trust; a bad VPN is a single logging point. A VPN is not Tor and does not replace OpenPGP for message content.
Download Tor Browser from the official Tor Project site (torproject.org). Verify the signature when you can. Open it; it boots a Tor circuit and a hardened Firefox-based browser. To visit an onion site, paste a .onion address into that browser — Chrome and Safari will not resolve .onion without Tor. Some apps (Haveno, Bisq, Wasabi) use Tor as a socks proxy without using Tor Browser for every click.
Everyone who needs reach and familiarity: customers, search engines, payment callbacks, mail delivery, status pages. We publish this marketing surface on clearnet so you can find us without installing Tor first. Sensitive order detail still moves over PGP (and later, onion mirrors where offered).
People who want weaker ISP/site IP linkage; readers in censored networks; operators offering .onion mirrors so clients never hit a public exit. Legitimate uses dominate Tor traffic by design of the network. Criminal misuse exists on every network — that does not redefine Tor any more than it redefines HTTPS. For our stack: a live marketing .onion mirror; Presence + and Dark Store + client builds ship .onion by default (base Presence / Dark Store are clearnet-only); Tor-first P2P acquire paths in the pay guide; privacy-minded ops.
Both, in different senses. The destination is still a clearnet hostname (DNS + public hosting). Your path to it went through Tor exits, so the origin sees a Tor exit IP, not your home IP. A true onion mirror is .onion-only and does not use a public A record for that hostname. Ours is published on Trust and Contact, and advertised from clearnet via Onion-Location.
No. A VPN is one encrypted tunnel to a single provider who can see your full session and often knows who you are as a customer. Tor distributes trust across relays; no single relay should see both ends. On clearnet we still recommend a VPN against your local ISP and network; it does not replace Tor’s threat model, and a bad VPN is a single point of logging.
Find us on this clearnet site — preferably over a VPN. Encrypt briefs with OpenPGP before they leave your machine. Prefer XMR and the pay guide’s private acquire paths (many of those clients already force Tor). This site has a live .onion mirror — open it in Tor Browser when clearnet is blocked or you prefer not to hit apex. Clearnet (+ VPN) for discovery; Tor and PGP for the parts that need a stronger barrier. Concrete downloads are in Recommended software.
Yes. Tips on Donate use the same self-hosted BTCPay rails as package invoices (not engagement fees). For Dark Store evaluation, walk a full cart → checkout → refund-request path on the Umbra Supply sandbox (tiny mainnet amounts; no fulfilment). Presence / Presence+ are demonstrated by this live site and its .onion — not the shop. Acquire and custody steps stay on How to pay.
Yes — GrapheneOS Ready on the current Pixel 10 series only. Bare GrapheneOS (install, verified-boot relock, Auditor check, hardening checklist, setup guide). Condition: new, grade A, or grade B; all official storage tiers; primary and secondary colour preference. Stock SKUs: fixed XMR cart at shop.s3ct0rz3r0.io; express postage within Australia included; tracking when shipped. Made to order (typically 5–10 business days after payment). Client ship-in is not offered. Custom OS presets use the quote checklist via Contact — BTCPay invoice link after quote, not the cart. Payment paths: How to pay. GrapheneOS reduces OS and app telemetry; it does not make you invisible to a mobile network. We are not affiliated with the GrapheneOS project.