Wikipedia:Sockpuppet investigations/Euclidthalis/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The two accounts have similar/identical English phrases in edit summaries as below:
 * "Included more sources and expanded article" B: E:
 * "Included more sources and refined article" B: E:
 * "New References…" (exact caps) B: E:
 * "please ...!" B: E:

The two accounts have common edits on many Cyprus business articles: etc.
 * Larnaca International Airport B: E:
 * Russians in Cyprus B: E:
 * Cyprus Securities and Exchange Commission B: E: - note also that both editors are interested in binary options
 * FirePro Systems (Europe) B: E: (created)

Bremain007's first edit June 2016 follows E's block April 2016 by ~60 days

Bremain007's 13 userboxes exactly match E's in content and order (with some deleted, i.e. B's userboxes are a subset), and userpage even includes a commented-out userbox and comment in the same order. It has clearly been created by cut and paste from Euclidthalis' userpage.

I suspect there are other Cyprus editors involved in this but am out of time to file this case at the moment. Please note the static IP talkpages that I have tagged in the last 48 hours in particular 62.12.xx.xx, 93.109.xx.xx (hostname xxxx.netrun.cytanet.com.cy) and 212.50.xx.xx (hostname bcable.lim.cablenet-as.net). - Brianhe (talk) 05:20, 21 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * please block . The new user has 57 edits, 25 of them on 13 pages which Euclidthalis also edited, across diverse subjects. In addition to the identical and unusual edit summary style, this is too many coincidences. Ivanvector (Talk/Edits) 12:00, 23 September 2016 (UTC)
 * per Ivanvector. I agree the behavioural evidence is strong enough especially with the edit summary style to link the two accounts under WP:DUCK. Marking as closed. Mkdw talk 20:09, 23 September 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Adding another apparently connected account. WP:DUCK common editing in articles related to Cyprus financial entities, businesses, tourism, and Limassol, Cyprus in particular. Their editing style is a bit different and Cyprianio is prone to editing logged out, whereas the master is not, so I wouldn't be surprised if these turned out to be meatpuppets.

Common edited articles where 'C'=Cyprianio, 'B'=Bremain007 (sock), 'E'=Euclidthalis (master):
 * Cyprus Securities and Exchange Commission: C, B , E
 * Cyprus International Institute of Management: C, B , E
 * Banc De Binary (headquartered in Limassol), C, E (referenced Cyprus Securities and Exchange Commission in edit summary)
 * Tourism in Cyprus: C, B
 * Medochemie (headquartered in Limassol): C, E (created)
 * Limassol: C, B
 * Limassol Marathon: C, E
 * IKOS Asset Management (headquartered in Limassol): C (and obvious logged out edits, ), E  (created)

IKOS Asset Management is especially noteworthy as it is a Limassol-based company, was an article created by Euclidthalis on 13 June 2012 as one of his first edits, and contains C's first edit on Wikipedia  on 13 September 2013. It also happens to contain a bunch of Limassol IP edits in close proximity to Cyprianio's like this.

Cyprianio's obvious logged-out edits include a number of Limassol IPs too numerous to list all of them here but here is a sample:
 * at Yumbles.com created by Cyprianio
 * at XM.com a Limassol-based firm
 * at Tradepedia association with XM.com
 * at Social Airways a Limassol-based firm
 * at Tourism in Cyprus promoting Heart Cyprus a Limassol firm added to Wikipedia by Cyprianio here

One more diff that may help establish a link. Special:Contributions/212.50.116.140 shows a single edit immediately following one by Euclidthalis at Cypriot wine. It's clear from the links I provided above that 212.50.*.* is commonly used by Cyprianio.

Regardless of the connection to Euclid, I would like de-prodding like this by Cyprianio IP socks to be considered as blockable in itself. Compare timing and absent edit summary to this de-prodding by C.

End of filing. Brianhe (talk) 16:21, 23 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Cyprianio as a sock under WP:DUCK. The similarities on Cyprus and financial institutions overlap with Bremain007 and Euclidthalis to a degree that cannot be ignored. As for the IPs, they're all stale. Some dating back to edits only in 2013. There was only one that had an edit in January 2016 but it wasn't obvious vandalism and there's a lot of that could be explained between that edit and the other groupings. Marking as closed. Mkdw talk 20:22, 23 September 2016 (UTC)
 * Side note:, nicely laid out evidence for Cyprianio. The IP evidence was helpful but could be less extensive since they were all stale and dated back several years. Rarely would we take an action against those accounts. Mkdw talk 20:24, 23 September 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

One of the master's socks, Cyprianio was last active last month, requesting an unblock (subsequently declined) and yet a month later a new account, Sofiapapad123, comes and starts an article Cyprianio started not once but twice, Sani Resort. Too suspicious of a simple coincidence especially considering a new account starting immediately and the master was a paid article user. SwisterTwister  talk  21:27, 29 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
. CU declined.--Bbb23 (talk) 18:17, 30 May 2017 (UTC)
 * Neither nor  are stale.  Vanjagenije   (talk)  20:57, 30 May 2017 (UTC)
 * I've reinstated the request. Please decide whether it should be endorsed. Thanks.--Bbb23 (talk) 21:12, 30 May 2017 (UTC)


 * - Please, compare Sofiapapad123 to Cyprianio .  Vanjagenije  (talk)  21:16, 30 May 2017 (UTC)
 * ❌.--Bbb23 (talk) 22:43, 30 May 2017 (UTC)
 * Closing because of inaction. Bbb23 (talk) 14:08, 11 June 2017 (UTC)