02 / History and provenance
The Hidden Wiki: history, mirrors & continuation
Trace the Hidden Wiki through dated onion addresses, early references, and the published connection to the zqktl wiki.
The zqktl… Hidden Wiki onion address is associated with the original wiki in published guides. Proton’s Hidden Wiki section identifies this hostname as the original version. That makes it a useful reference for readers looking for the original wiki or its continuation, while leaving the operator lineage to be established separately.
Follow the record
The original Hidden Wiki.
The continuation question.
The zqktl address has a published association with the original wiki. Explore what supports that description, and what an official continuation would require.
2007 The wiki appears in a contemporary record
A Tor mailing-list message dated 1 June 2007 mentions the Hidden Wiki. It establishes an early reference, not a founding date or a link to today’s administrators.
Read the dated message ↗2021 Tor retires the early address format
The v2-to-v3 transition changed onion hostnames. A modern address can carry older content, but that relationship needs its own evidence.
Read Tor Project’s announcement ↗2022 Proton identifies the original-version link
Proton’s article, published 25 November 2022, points to the zqktl hostname as the original version. This is a named publisher’s attribution; it is not a documented transfer of control.
Read Proton’s Hidden Wiki section ↗Today What “official continuation” would mean
A documented migration or handover, authenticated by the earlier operators, would strengthen that claim. The 2006 founding date and uninterrupted operator continuity remain unverified here.
Explore the history and sources →Historical address register
The names in the record
These entries record exact hostnames found in the cited sources. The dates refer to those records or the events they describe, not proven launch dates or continuous operating periods.
1 June 2007 / contemporary reference
http://6sxoyfb3h2nvok2d.onion/The Tor mailing-list message reproduces this address as the Hidden Wiki. It is a retired v2 hostname. Read the original message ↗
2014 / a documented wiki iteration
http://kpvz7ki2v5agwt35.onion/Wikipedia’s historical account identifies this hostname in its discussion of March 2014. It is another retired v2 address. This is a record of an iteration, not proof of an uninterrupted operator lineage. Read the referenced Wikipedia revision ↗
The earlier zqktl address / retired v2
http://zqktlwi4fecvo6ri.onion/Toddington International’s Tor reference sheet lists this short address as the Hidden Wiki. It fills the missing zqktl entry in this historical register. The document establishes a published reference, not the first day the service existed. Read the independent address reference ↗
The v2 and modern v3 hostnames share a readable prefix, but the shorter hostname is not a shortened version of the current address. The connection between their publications and operators must be evaluated separately.
2022 article / modern v3 reference
https://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_PageThis is the URL in Proton’s article published in November 2022, as reviewed here. An article’s publication date does not establish when its current URL was first inserted. Inspect Proton’s entry ↗
The three 16-character hostnames use Tor’s retired v2 format. They are displayed as historical text. The modern reference uses v3. These four records do not claim a complete migration chain.
2006: a date that needs a source
A founding year should be supported by a contemporary record, a preserved page history, or another source that actually dates the launch. We have not established such a source for 2006. Repeating the same year on many websites would not turn those repetitions into independent evidence.
2007: a contemporary reference we can identify
On 1 June 2007, Tor developer Karsten Loesing discussed onion-address length on a public mailing list. His message explicitly uses the Hidden Wiki as an example. This is a dated, contemporary reference to a wiki already in use.
The narrow conclusion matters: the Hidden Wiki was mentioned by that date. The post does not identify its founding day, prove it began in 2007, or connect the modern zqktl hostname to its early operators.
Read the original 1 June 2007 mailing-list message.
2021: why the earliest URL cannot be today’s v3 URL
The Tor Project’s July 2021 release announcement explained that v2 services would become unreachable in the October transition. Early v2 hostnames and modern v3 hostnames use different formats. A current address therefore cannot be treated as the literal same hostname used in the wiki’s earliest period.
This does not rule out a genuine content migration. It means migration requires evidence: for example, a dated announcement from the older service together with preserved history or an authenticated statement. Address length alone cannot establish a successor.
Read the Tor Project’s 2021 announcement.
Mirror, archive, fork, continuation
| Term | What the claim should mean | What would help support it |
|---|---|---|
| Mirror | A copy of another site’s content at a stated point or on an ongoing basis. | Comparable content, named source, copy date, and a clear update relationship. |
| Archive | A preserved historical state. | A capture date and preservation record. It need not be operated by the original publisher. |
| Fork | A copy that develops independently. | An identified starting point and a record of later changes. |
| Continuation | A later service carrying forward an earlier project. | A documented handover or migration and a traceable editorial history. |
What “as it was at the beginning” would require
A wiki is a changing collection of pages. A familiar front page does not tell us which revisions were retained, removed, or rewritten. To describe a present wiki as the original early version, we would want a dated source snapshot and a comparison with the present content. We would also separate content continuity from operator continuity: one can exist without the other.
Until that work is supported by records, the accurate description here is an onion wiki identified by Proton as the original version, with its precise historical continuity still unconfirmed. The homepage provides the selected link without converting that claim into a certification.
2013–2014: the wiki enters the press record
In April 2013, Adrian Chen’s WIRED report described a crowdsourced Hidden Wiki directory affected by outages and address changes. This is a contemporary description of the directory’s role, not a modern address-verification record.
A June 2014 WIRED opinion piece by Joseph Cox reported a March takeover of a Hidden Wiki page and removal of abusive links. This account concerns a page takeover; it should not be recast as an official police seizure.
These two records help explain why a single linear timeline can mislead. A wiki is simultaneously a set of pages, an editorial community, an address, and a recognizable name. An event may affect only one of those things. A renamed page may keep its editors; copied content may acquire different editors; a new address may serve familiar content. A careful account states which element changed.
The wiki’s disputed history
Doxbin and the key
A March 2014 VICE interview records Intangir of Doxbin saying he withheld the wiki’s private key.
This guide has not examined that key or authenticated a later key dump. The claim that it was subsequently published remains unverified here. Readers should distinguish a participant’s account, a journalist’s observations, and an independently authenticated technical record.
Why a key story matters to a wiki history
A wiki’s articles, an onion address and the people operating the publication are three different things to trace. Copying an article can preserve part of its history without establishing control of the address where it first appeared. A historical dispute over an address also cannot, on its own, identify the operators behind every later mirror.
Our interpretation is that the continuity question needs several kinds of evidence: dated content, explicit migration statements and evidence connecting the relevant operators. An unchanged title or familiar prefix is too little to establish that whole story.
How the v2-to-v3 transition fits
Tor Project’s migration announcement explains that v3 uses a new address and that the transition offered no mechanism to cross-certify the two addresses. That makes the three retired v2 records above useful historical context, without turning them into a cryptographic ownership certificate for today’s v3 service.
The earlier zqktl address appears beside the Time Machine’s 2017 chapter and again in the 2021 retirement chapter. Its placement is a historical comparison; it does not establish a 2017 launch date for the wiki address. That placement describes the end of the address format, not a claim that this particular wiki began in 2021. The law-enforcement guide separately covers named public cases and the evidence needed to report a seizure.
Two histories running beside each other
The wiki record
References, revisions, and claims
The early mailing-list mention, later press descriptions, and modern address attribution are separate kinds of evidence. Their dates are points at which a statement was recorded. They do not automatically fill the years between them.
The wider Tor record
Software, publishers, and investigations
Browser changes and actions against other services form the surrounding context. The protocol transition explains why old addresses stop working. A newspaper’s service launch explains a public-interest use. Neither supplies a missing wiki handover.
This separation is useful when reading retrospective accounts. If a paragraph starts with a wiki, moves to a marketplace prosecution, and ends by saying “the site,” ask which site the writer means. A shared network is a relationship, but it is not shared ownership or a shared legal case. The law-enforcement guide follows that distinction through dated official records.
An archive is a record with edges
Historical screenshots can be valuable because they preserve visible wording, layout, or an address. Their limits are equally important. A screenshot can omit the browser bar or capture date. A saved front page may leave out linked pages, edit histories, and discussion. A retrospective copy may have been assembled from more than one period.
When examining an archive claim, ask four practical questions. Who captured it? When was it captured? What did the capture include? Can another reader inspect the same record? These questions make the evidence reproducible. They also allow a modest but useful conclusion—such as “this wording appears in this dated capture”—without inventing an entire operator history.
Old visual styling has almost no value on its own for dating a website. A current editor can recreate an early wiki appearance, just as a genuine successor can adopt a completely new design. The source record deserves more weight than the typeface, color scheme, or nostalgic label.
The open questions are part of the story
The founding date, the chain of administrators, the relationship between historical branches, and the extent of retained early content remain separate research questions. A newly found migration announcement might resolve one without resolving the others. That is why this guide avoids a single “authentic” badge covering everything at once.
A useful contribution would identify a particular claim and provide a public record that bears directly on it. For example, a dated announcement linking an old and new address is relevant to migration; a preserved revision export is relevant to content lineage. Neither should be treated as a reason to publish personal details about editors. Public project history can be researched without speculating about private identities.
For additional context, the press reading room labels articles as reporting, opinion, or first-party announcements. On the homepage, the Hidden Wiki Time Machine lets you travel through selected moments in the wiki and wider Tor story.
A record that can be improved
If you have a dated migration announcement, a verifiable archive, or a documented handover, send its public source through Contact & corrections. Explain what the source proves and what it leaves open. Do not send private credentials, personal data, or illegal material.
Core historical sources reviewed 5 September 2026; historical-address and publisher-reference additions reviewed 6 September 2026. These are editorial source review dates, not an uptime check or a claim that the linked wiki was inspected through Tor.