English Wikipedia deprecates archive.today after DDoS against blog, altered content
- For further Signpost content on this topic, see previous Signpost coverage, and coverage in this issue's In the media and News and notes sections.
After the website archive.today launched a DDoS campaign against a small blog in January 2026, a request for comment was started. After the discovery of tampered archives, consensus was reached to deprecate the site used almost 700 thousand times on the English Wikipedia.[1]
Note: archive.today is not to be confused with archive.org, which is the domain of the unaffiliated Internet Archive.
DDoS attack discovered, discussion begins
On February 5, a suspicious script, added to archive.today's CAPTCHA page, was mentioned at Village Pump (Technical) by a Wikipedian, after it had been previously reported on Hacker News in January. This developed into a request for comment on February 7 over what to do about the site, as addressing the widespread use of the site could lead to significant disruption. With archived web pages being used to verify information across the wiki, concerns were raised about the impact of deprecation or blacklisting. Other Wikipedians raised safety concerns over linking to a website which is running malicious code in user browsers, and some argued that it was a breach of trust, and brought up previous discussions over the sites practices.
archive.today has been cited almost 690 thousand times on Wikipedia, and the main objection to deprecation was on the grounds of losing access to many sources exclusively archived there. While the RFC was still ongoing, several editors began discussing ways to "deprecate without losing verifiability" by creating archives on the Wikipedia platform, using a tool that would fetch content from the archive.today site and remove Javascript.[2]
The process was monitored by the Wikimedia Product Safety and Integrity team, who left a note explaining their approach and their view, and encouraged the community to "carefully weigh the situation before making a decision on this unusual case."
Evidence of tampering leads to RFC closure
On February 18, evidence emerged that some archived pages had been modified by the webmaster, where an alias of the webmaster was replaced with the name of the owner of the blog.[4] This led to the RFC being closed February 20 with a consensus to deprecate the source, remove links to the site, and eventually add it to the Spam blacklist.
| “ | There is consensus to immediately deprecate archive.today, and, as soon as practicable, add it to the spam blacklist (or create an edit filter that blocks adding new links), and to forthwith remove all links to it. There is a strong consensus that Wikipedia should not direct its readers towards a website that hijacks users' computers to run a DDoS attack (see WP:ELNO#3). Additionally, evidence has been presented that archive.today's operators have altered the content of archived pages, rendering it unreliable. Those in favor of maintaining the status quo rested their arguments primarily on the utility of archive.today for verifiability. However, an analysis of existing links has shown that most of its uses can be replaced. Several editors started to work out implementation details during this RfC and the community should figure out how to efficiently remove links to archive.today. | ” |
Community members develop guidance
Several members of the community have created guidance to editors on how to proceed with the removal of links to the archive, and have provided resources to aid and direct the process, such as a list of high traffic articles linking to the archive, instructions for users who need to visit the site, and a CSS script which highlights references linking to the domain or any of its mirror sites.
Discussions are ongoing on other Wikimedia projects, and an index has been created on Meta-Wiki. The French Wikipedia followed the English language edition, with the service added to their spam blacklist.[5] Over on Meta-Wiki, an administrator declined a request to globally blacklist the archive, as "There are too many usages on too many wikis. [English Wikipedia's] consensus alone isn't going to be sufficient to blacklist this domain globally." They added that "the next step would be to open a global RfC."
The incident has drawn widespread attention, with the RFC having over 200 participating editors, 30 thousand pageviews, and more than one thousand total edits. Additionally, the guidance page has had over 13 thousand views, and the archive.today article peaking at 9093 views on February 21, a day after the site was deprecated. Several media outlets including Ars Technica and The Times of India also produced news coverage of the decision; see this issue's In the media for further information.
Footnotes
- ^ Brodkin, Jon (2026-02-21). "Wikipedia blacklists Archive.today, starts removing 695,000 archive links". Ars Technica.
- ^ See WP:NOMOREARCHIVETODAY#Migrating or cloning archives and #Sanitized proxy.
- ^ Previous RFC's: 1, 2, 3 and 4
- ^ see Wikipedia:Requests for comment/Archive.is RFC 5#Evidence of altering snapshots
- ^ see the blacklist request and relevant discussion
Discuss this story
I'm not sure why we were using an archiver so many times in articles as sources, but I'm not surprised, especially when it's being run by one person. TheTechie[she/they] | talk? 05:12, 10 March 2026 (UTC)[reply]
- How about internet pages that are only saved on this archiver (example)?
- Why should we care about the personal life and beef of a blogger? Where do we stop, should we stop using web pages that are used to mine cryptocurrencies, or are linked to whatever political opinions?
- I see multiple discourses in favour of "internet preservation" and whatnot all the time online (see also 2025 United States government online resource removals), I believe blacklisting Archive.fo/Archive.toda*y is a terrible idea as well as a form of WP:CENSORSHIP and textbook WP:RIGHTGREATWRONGS. This would not be the first time the woes of specific individuals are used (weaponized?) to censor WP (see Kiwi Farms and its 'Frequently asked questions' on the talk page, and also the fact it was decided by RFC the WP article would not display the website's URL while for example the WP articles of the Islamic Revolutionary Guard Corps and those of its branches, or of 4chan.org/pol/, have their URLs displayed). Despite being from 2009, Wikipedia:Censorship issue is still very relevant. Veverve (talk) 22:51, 10 March 2026 (UTC)[reply]
- Trust is a major concern raised by the actions of the webmaster of archive.today, as if they are willing to modify archives and launch an attack against a small blog they are in a dispute with, then how are we to trust them not to attack more sources or modify large swathes of their archive (through the use of an automated tool)? Verifiability ultimately relies on the trust we have in that source that the information on it is correct, and this is especially true when relying on a single source for that information; when trust is void, so is any reason reliant on that trust.WP:RIGHTGREATWRONGS also is for the article content, not links from the article content, the relevant bit of community guidelines here is WP:ELNO, which states that: Except for a link to an official page of the article's subject, one should generally avoid providing external links to: [...] 3. Sites containing malware, malicious scripts, trojan exploits, or content that is illegal to access in the United States.
- As for why the 4chan and IRGC links are still there while Kiwi Farms had its link removed is because Kiwi Farms has community consensus to remove the links, but nobody has challenged the links challenged.
- Mitchsavl (talk) 05:42, 11 March 2026 (UTC)[reply]
Has anyone actually opened a Global RFC, to get the archive site blocked on Meta (and beyond) ? — OwenBlacker (he/him; Talk) 08:03, 27 April 2026 (UTC)[reply]