Wikipedia:Sockpuppet investigations/Liborbital/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Zuckerden is a semi-disclosed paid editor. In the last week, HelgaStick has !voted keep at two AFDs of articles created by Zuckerden:  and also removed a PROD:. These are almost the only deletions that the user has been involved in, so it seems very unlikely to have occurred by chance.

This page move by Zuckerden of a draft also looks as suspicious and as if the MemeGeen was created as a sock but then the page was accidentally moved by Zuckerden. SmartSE (talk) 18:22, 15 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I found the way that Zuckerden and MemeGeen were supporting each other to be suspicious, and particularly deceptive if they're related accounts, so I set out to just check those accounts alone and give HelgaStick the benefit of the doubt. Sadly, I stumbled upon something else in the process. ✅ that the following accounts are related: Given that one of the accounts has a paid editing disclosure, I think this user has not behaved egregiously, but it's getting very close to that. I'd be inclined not to block them, but to warn them to stick to two accounts, one for personal contributions and one for paid editing, and abandon the other accounts. I'll let the closing administrator decide on that. --Deskana (talk) 11:23, 18 August 2017 (UTC)
 * Using multiple accounts for undisclosed paid editing and also to try and avoid articles being deleted is extremely egregious behaviour. I am indeffing them all. SmartSE (talk) 12:13, 18 August 2017 (UTC)


 * GringisMan is the oldest account here so the SPI should be moved to that name. SmartSE (talk) 12:17, 18 August 2017 (UTC)


 * Moved to oldest account (Liborbital) and tagged all. Closing. Sro23 (talk) 18:21, 18 August 2017 (UTC)
 * Sro23 Thanks for checking which was actually the oldest account! SmartSE (talk) 20:54, 18 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

2 accounts involved at a clear paid-for article and their contributions both involve adding advertising, here and here therefore chances they are either one person or otherwise still involved. SwisterTwister  talk  04:14, 19 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  00:35, 24 August 2017 (UTC) — Berean Hunter   (talk)  12:37, 24 August 2017 (UTC)
 * due to proxy use. -- Amanda  (aka DQ) 17:48, 19 August 2017 (UTC)
 * to compare 's results in the Liborbital case to these accounts as I think that may be the master based on this history where these two accounts stepped right in for that master.
 * Given the proxy usage DQ referred to, the best I can do is . Callanecc (talk • contribs • logs) 12:15, 24 August 2017 (UTC)
 * Thank you, Callanecc. Moved casename to Liborbital and indeffed socks with tags and closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Tarja Kardash, with a short contribution history started this month, restored the content originally added by the sockmaster Liborbital to the article Eric D. Goodman and added wikilinks to that article in several other articles (Goodman's high school, etc.). The activity strongly suggests a undisclosed paid editor. ~Anachronist (talk) 00:19, 23 September 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - To connect accounts and check for others. See . Thanks, Kevin ( aka L235 ·&#32; t ·&#32; c) 20:07, 27 September 2017 (UTC)
 * I don't see any technical overlap with, however is ✅.-- Jezebel's Ponyo bons mots  21:38, 27 September 2017 (UTC)
 * Behaviourally Tarja Kardash fits the bill so.
 * Looking at that also led to me notice that is related to Olavhenri (see below) via User:Jcpc63752/sandbox and Tarja Kardash here. Another of their drafts was created by . They are both  so this is just noting for cleanup. SmartSE (talk) 22:04, 17 October 2017 (UTC)
 * Case closed.  Vanjagenije  (talk)  17:45, 2 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Mfarazbaig first edits indicate they are not a new account. They than removed the paid editing tag on this article. which was created by one of the prior socks in this edit. Many of Mf's other edits are obviously paid aswell. Doc James (talk · contribs · email) 14:13, 14 October 2017 (UTC)  Doc James  (talk · contribs · email) 14:13, 14 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * This user is not obviously a new one.Even with a bout of AGF, I would advocate for a CU being run. Winged Blades of Godric On leave 15:06, 14 October 2017 (UTC)
 * Well, even the first two articles by RetroHunk look to be PAID work. Winged Blades of Godric On leave 06:45, 15 October 2017 (UTC)
 * At least two of the new pages created Political movements in Kashmir during the Dogra rule and Mridu Rai are related to the now blocked user . I notice that Faizan requested him to open email contact in May 2017. My feeling is that Mfarazbaig installed these pages for Faizan. They are outside Mfarazbaig's expertise. -- Kautilya3 (talk) 14:32, 15 October 2017 (UTC) This expansion of Tahir Amin also falls into that category. These are some of the topics that Faizan socks debated with me. -- Kautilya3 (talk) 15:00, 15 October 2017 (UTC)
 * I will ask the administrator(s) to not close the case until and unless Mfarazbaig returns to his periodic editing pattern(s) and could give a convincing argument about the CU matches with several PAID/COI accounts, his removing of PAID tags and likely proxying for blocked user(s). Winged Blades of Godric On leave 10:07, 16 October 2017 (UTC)
 * Interestingly, didn't come up when Callanec ran a check on Mfarazbaig last week. It appears that Mfarazbaig has at least one more sock:  which he is also using for making paid edits. It is very likely that Mfarazbaig is operating these accounts using multiple computers. &mdash;  MB laze Lightning T 18:12, 16 October 2017 (UTC)
 * Sorry so late to request this, but I'd like to see administratively treated as part of the sockfarm based on WP:DUCK. From the English in their unblock requests, as  (implied) by Anachronist and  by Marchjuly, this is not the published author claimed, or even a native speaker of American English. He also . Add to this  who they seem to be admitting to be in same unblock request (creator of Smyser-Bair House). ☆ Bri (talk) 14:52, 19 October 2017 (UTC)
 * This might be considered as well considering WP:DUCK close connections to topics visited by the socks. ☆ Bri (talk) 18:05, 19 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
❌ to the master but to. Also, there is IP socking done by Mfarazbaig to edit war which caused page protections. Mfarazbaig is also fond of open proxies. — Berean Hunter   (talk)  00:23, 15 October 2017 (UTC)
 * In light of that, can you check these:
 * The first uploaded images used in Dom Marcell and also drafted the article. The second also drafted that article in their sandbox.
 * This user is also suspicious - they added a photo to Mary Cruz that was uploaded by a different user on commons the day before. SmartSE (talk) 07:51, 16 October 2017 (UTC)
 * is ✅ to
 * is to
 * This user is also suspicious - they added a photo to Mary Cruz that was uploaded by a different user on commons the day before. SmartSE (talk) 07:51, 16 October 2017 (UTC)
 * is ✅ to
 * is to

— Berean Hunter   (talk)  19:00, 16 October 2017 (UTC)
 * is ✅ to  but ❌ in geolocation or UA to the above results for MeemSupreem or Mfarazbaig.


 * Thanks. Orange U-turn doesn't look like a paid editor but behaviourally matches MeemSupreem.
 * Kindadella doesn't much like UPE either apart from the image addition I noted above and behavioually looks quite different to MeemSupreem.
 * Despite the lack of technical evidence, Joe Gurstein and Bcarere are clearly related to RetroHunk via Dom Marcell. SmartSE (talk) 20:54, 16 October 2017 (UTC)

From several busy ranges:
 * and are  to . They are using some of the same proxies but UAs are different.
 * is ✅ to and created their accounts at the same time while sharing the IP with Albert Dawkins who was editing at the time.
 * to Albert Dawkins but needs evaluation:
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins
 * is ✅ to and possible to Albert Dawkins


 * is ✅ to (this turned up in a proxy shared by some of the above but may not be related)

— Berean Hunter   (talk)  20:04, 16 October 2017 (UTC)
 * needs blocked as too close to unless that editor has created this as an alt account.


 * Zalam4u edits where clearly refspam (I've reverted).
 * Some of Albert Dawkins' edits are clearly UPE e.g. Samir Tabar and Pixhug. {
 * Boiseldas hasn't made any edits but given the technical evidence
 * Olavhenri fits UPE and Rob Shanahan is already tagged as COI/UPE by . That article was previously created by
 * CoolbreezeCalmwaves looks ok to me.
 * Jdsak made edits to Moeen Nizami working closely with . That article has some signs of COI.
 * Atif.s.awan created User:Atif.s.awan/sandbox which could be COI, but off-wiki info suggests that it is unlikely that they are related to this sockfarm.
 * Nauman147 is another refspammer (reverted).
 * Atiqnagra looks ok. Only edits are about a deceased actor
 * Dudacastro created what appeared to be an autobio at Duda Castro but was also created by a few days beforehand. That doesn't look professional and presumably they used a proxy afterSockpuppet_investigations/Razziaftab/Archive.
 * Jiskani Baloch doesn't look like UPE.
 * The Shoaibmanzoor accounts haven't made any edits.
 * Mian shahzad hasn't edited but SerialAgent was blocked for refspamming.
 * Concur about KylieTastics. Blocked per the username policy SmartSE (talk) 22:20, 16 October 2017 (UTC)
 * I'm happy to keep all of the UPE accounts listed under Liborbital as they match behaviourally. SmartSE (talk) 22:28, 16 October 2017 (UTC)
 * In addition to the users tagged above. I've also . SmartSE (talk) 22:48, 16 October 2017 (UTC)
 * Hmmm..I think may be more promotional than their userpage implies:
 * This promo edit follows 's image addition on the Leo Robin article implying that it is being promoted.
 * This edit appears to nest some promo hidden in the refs to Thrillist, an online media brand with an article that looks to have been promoted earlier this year. Of course, Tasting Table looks to have received promo work earlier this year also with this edit by.
 * This appears to counter 's edit to cleanup after 's and 's promo work on SpotOption.

— Berean Hunter   (talk)  00:55, 17 October 2017 (UTC)
 * What do you think?
 * Yes I agree based on that analysis. So
 * Looking through those I noticed this edit to the CEO of Tasting Table followed up a few months later by these edits by . Their article creations also seem to fit the UPE bill especially Mark Moses (CEO Coach). SmartSE (talk) 20:01, 17 October 2017 (UTC)

— Berean Hunter   (talk)  11:58, 17 October 2017 (UTC)
 * SmartSE, when a CU gives a ✅ or ✅ then the confirmed tag is appropriate but in other cases, you should consider using a tag such as the suspect tag to more accurately reflect the results. Some of these may need to be adjusted. One more small thing that I noticed is that although you have stated that you have blocked Boiseldas, they do not appear to be blocked. These UPE cases create a great deal of details which can get lost in the shuffle.
 * Woops sorry about that. So should they all be tagged as only suspected to this master considering the lack of direct technical evidence? Boiseldas is now blocked - it was getting late! Are there any good tools for blocking and tagging? I use twinkle sometimes but it is quite clunky and slow still. (I did have a look at you .js but couldn't find any). SmartSE (talk) 20:01, 17 October 2017 (UTC)
 * the one that would be tagged to the master as confirmed would be Orange U-turn. Any others that are confirmed would be tagged to the accounts that they were confirmed to...each other. The clerks that action this case should help sort it. Did you look here? I don't use the monobook skin. There are a few in there that might help but the clerk script has a couple of buttons that you shouldn't push like endorsing a CU request. You should consider these:
 * Mark-blocked script.js
 * spihelper.js
 * massblock.js


 * For the last two, I believe you would need to discuss with . I'm not sure if anyone outside of clerks and CUs are using this.

— Berean Hunter   (talk)  21:08, 17 October 2017 (UTC)
 * ...and these two lines which could be useful to you,
 * maxUsersCUStaleness = 100;
 * mw.loader.load("/w/index.php?title=User:Writ Keeper/Scripts/cuStaleness.js&action=raw&ctype=text/javascript");
 * Did you notice my request RE Prof.Marlin above? I've removed the tags now and will leave it to the clerks although the following that I listed at COIN should help.
 * These are all connected either technically or behaviourally to each other and via Tarja Kardash to the master.
 * (not checked yet)
 * (not checked yet)
 * (not checked yet)
 * (not checked yet)
 * (not checked yet)
 * (not checked yet)
 * (not checked yet)


 * There aren't any direct links that I can see between those and these though, which themselves are linked technically or behaviourally and to the master via Mfarazbaig
 * SmartSE (talk) 23:22, 19 October 2017 (UTC)
 * SmartSE (talk) 23:22, 19 October 2017 (UTC)
 * SmartSE (talk) 23:22, 19 October 2017 (UTC)
 * SmartSE (talk) 23:22, 19 October 2017 (UTC)
 * SmartSE (talk) 23:22, 19 October 2017 (UTC)

— Berean Hunter   (talk)  10:49, 26 October 2017 (UTC) — Berean Hunter   (talk)  11:03, 26 October 2017 (UTC)
 * Blocked:
 * for a near-identical repost of Special:Undelete/Samir Tabar at Draft:Samir Tabar, (admins only) and this (note that I only deleted the draftspace redirect). MER-C 04:28, 22 October 2017 (UTC)
 * Prof.Marlin is.
 * Prof.Marlin is.
 * is.
 * All unblocked accounts are too old now. It's just not worth trying to figure out the tags here. Closing. Sro23 (talk) 21:55, 3 January 2018 (UTC)

Suspected sockpuppets

 * (used for socking when Mfarazbaig was not blocked)
 * (used for socking when Mfarazbaig was not blocked)
 * (used for socking when Mfarazbaig was not blocked)


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Since getting blocked on Mfarazbaig, he is socking with IP. Restored an edit originally by Mfarazbaig, edit warring on 2016–17 Kashmir unrest, Mfarazbaig had added Pakistan WP banner on Talk:Indian mathematics and IP removed WP India banner on a related article Mathematics article Talk:Bakhshali_manuscript. Removing material that concerns Pakistan on Persecution of Hindus like Mfarazbaig. Capitals00 (talk) 08:08, 24 October 2017 (UTC)

had said that Mfarazbaig has used IP to edit war. Seems like I have found the IP address and upon further investigation, this new edit by IP is clear copy of Mfarazbaig's edit. WP:DUCK.
 * Mfarazbaig: "unreliable defence.pk reference"
 * 45.116.233.7: "defence.pk is an online forum. Fails WP:RS" Capitals00 (talk) 08:19, 24 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * because I don't think Berean received that ping. &mdash;  MB laze Lightning T 05:11, 25 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  10:55, 26 October 2017 (UTC)
 * /16 range blocked one month.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Obviously a WP:DUCK. Since Mfarazbaig is using a different ISP now, please range block this as well. Thanks, &mdash;  MB laze Lightning T 11:54, 31 October 2017 (UTC)
 * Pinging &mdash;  MB laze Lightning T 11:54, 31 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Suspected sockpuppets

 * User compare report Auto-generated every hour.
 * Editor interaction utility
 * User compare report Auto-generated every hour.
 * Editor interaction utility

Created Peach & Lily (beauty brand) a recreation of Special:Undelete/Peach & Lily that was created by Jcpc63752. Tarja Kardash !voted in a recent AFD about Peach & Lily's founder. SmartSE (talk) 19:56, 15 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * --Tarja is already blocked as a sock-puppet of this very farm about a month ago.Are you sure about putting him in the suspected list?Regards:) Winged Blades Godric 06:20, 22 November 2017 (UTC)
 * IIRC tarja wasn't confirmed to the master and nobody has resolved how this should be split up. I listed them again here as the CU should compare tarja to the newer account. SmartSE (talk) 14:07, 22 November 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  23:39, 22 November 2017 (UTC)
 * ❌ as they are in a completely different geolocation to any other of the aforementioned groups.
 * Case closed.  Vanjagenije  (talk)  17:46, 2 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

New account, that restored originally composed by Mfarazbaig. Capitals00 (talk) 10:22, 30 November 2017 (UTC)

This is a WP:DUCK case. Max Cooper is abusing the IP 39.50.205.191 to edit war with on dozens of articles. Same was done by Mfarazbaig. That he went to edit war with his IP to put his edits back and his IP, and used same edit summary as Max Cooper.

Abuse of IP (39.50.205.191) by Max Cooper:-


 * 39.50.205.191 Max Cooper
 * 39.50.205.191 Max Cooper
 * 39.50.205.191 Max Cooper
 * 39.50.205.191 Max Cooper

Mfarazbaig was also obsessed with putting WikiProject Pakistan on talk pages.(edit summary: WP Pakistan) while the IP's edit summary is: WP:PAK Capitals00 (talk) 12:53, 4 December 2017 (UTC)
 * Disruption from this account is still widespread and GeneralizationsAreBad is away till 20 December. can you block this account instead? Capitals00 (talk) 10:52, 10 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Sounds like a WP:DUCK with the same pattern and the same edits. Adamgerber80 (talk) 19:06, 4 December 2017 (UTC)
 * I agree that Max Cooper is a clear sock of Mfarazbaig. He is also showing interests in current events articles, which is a hallmark of Mafarzbaig. The CU result isn't surprising, because Mfarazbaig has been using different ISPs (see Sockpuppet investigations/Liborbital) since range blocked his older IP addresses. And I think it's worth mentioning that Mfarazbaig's latest IPs geolocate to the same region (Sindh, Karachi) as his other IPs. &mdash;  MBL  Talk 10:06, 8 December 2017 (UTC)
 * Plus, the suspected sock has the same habit of undoing an edit without using the default undo message. &mdash;  MBL  Talk 05:55, 11 December 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Please compare to . Thanks, GABgab 04:15, 2 December 2017 (UTC)
 * Salvio Let's talk about it! 12:18, 2 December 2017 (UTC)
 * I concur with the above points that Max Cooper is a DUCK and will block accordingly. SmartSE (talk) 17:02, 11 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Has similar edits to sock on the Pakistani passport page. Also, continues to undo edits without a pro Pakistani tilt as other socks like and  Adamgerber80 (talk) 16:08, 8 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing case. Sro23 (talk) 23:02, 8 January 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same edits as of adding other scripts and removing Hindi scripts. The diff of the edits are here ,. Adamgerber80 (talk) 11:11, 18 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Now the IP is stale, so I'm closing. Sro23 (talk) 22:02, 23 January 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same IP frequently being abused by Mfarazbaig. Edits are same as those made by Mfarazbaig with his IP, for removing mention of India.

Similar interest in opinions of Pervez Hoodbhoy. D4iNa4 (talk) 18:50, 10 February 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Now socking as . &mdash;  MBL  Talk 12:11, 12 February 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The IP edits are too old. Closing. Bbb23 (talk) 16:20, 16 February 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same as previous IPs. Disrupted a template recently that was previously edited by one of the sock account. D4iNa4 (talk) 15:12, 21 February 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Now socking as . &mdash;  MBL  Talk 07:58, 24 February 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * IP's are now stale. Closing. Sro23 (talk) 03:01, 27 February 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Still evading his block. &mdash;  MBL  talk 05:55, 2 March 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * One edit from yesterday. Closing. Bbb23 (talk) 17:06, 3 March 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same IP as usual. Calling others edits a vandalism  when requesting page protection. Interest in antisemitism in Pakistan. Capitals00 (talk) 08:27, 5 March 2018 (UTC)

Now socking with like previous IPs. Capitals00 (talk) 08:01, 7 March 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Clearly it’s him; same ISP, same geographical location. See also: &mdash;  MBL  talk 08:58, 5 March 2018 (UTC)
 * Now socking as . &mdash;  MBL  talk 07:10, 6 March 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The IP edits are too old. Closing. Bbb23 (talk) 13:43, 11 March 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Now socking on. &mdash;  MBL  talk 05:31, 19 March 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The IP edits are too old. Closing. Bbb23 (talk) 00:30, 24 March 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same obsession of opposing/supporting attack-related articles for news, created 2018 Sukma attack and now raises an issue related to this article on ANI. D4iNa4 (talk) 11:30, 24 March 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
IP edits too old. Closing.--Bbb23 (talk) 13:24, 27 March 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This account came out of nowhere to engage in edit war on Insurgency in Balochistan. It looks like a sock of Mfarazbaig.

Same style of adding sources.

Obsessing over Wikipedia talk:In the news/Recurring items concerning sports and also articles about incidents in India, and then trying to get these incidents-related articles passed on In the news/Candidates. Capitals00 (talk) 09:36, 23 April 2018 (UTC)

Has shown his opposition against "T20" cricket on WP:ITN, like Mfarazbaig.


 * Uncle Sargam: "ref added"
 * RetroHunk: "ref fix"
 * "cleanup"
 * "no source"


 * Uncle_Sargam: "seek consensus on talk page before blanket removal"
 * Mfarazbaig's sock Albert Dawkins: "get consensus before addition"

Similar votes in WP:ITN/C:
 * Support as a updater. It received global news coverage. --Uncle Sargam (talk) 08:42, 7 April 2018 (UTC)
 * Oppose per Masem, its a 'first world problem'. Not significant enough to receiving global coverage. - Mfarazbaig (talk) 20:31, 2 October 2017 (UTC)
 * Support - Major development covered by the global media houses. Albert Dawkins(talk)

File complaint against multiple editors in ANI after failing to get his version accepted. Capitals00 (talk) 13:22, 26 April 2018 (UTC)


 * "A significant no. of deaths and the incident received global news coverage. Mfarazbaig (talk) 05:51, 30 September 2017 (UTC)"
 * "Support as a updater. It received global news coverage. --Uncle Sargam (talk) 08:42, 7 April 2018 (UTC)"

Clear WP:DUCK. Capitals00 (talk) 17:26, 27 April 2018 (UTC)


 * Posts Google books links as "google.com.pk/", summaries as "update".
 * The SPI has already become stale and the disruption continues.  any of you are still active on this SPI? Capitals00 (talk) 14:12, 10 May 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Yeah, it's him. .  MBlaze Lightning  talk 09:40, 23 April 2018 (UTC)
 * , for the record, ran a check on Mfarazbaig on 5 March, so I don't think this could be stale. In any case, this is  pretty much an  open-and-shut case. Not long ago, Mfarazbaig had reported Capitals00, me,  and  at WP:ANI for reverting his edits on, an article that he created, via an IP address, , alleging that we were acting in "collusion". Now this new sock filed a frivolous complaint at WP:ANI against Capitals00, me and  for "edit warring" on Insurgency in Balochistan, saying "These editors seem to gang up and censor anything they dont like by reverting contributions made by others. There definitely is a pattern that seems fishy."
 * Also note that Uncle Sargam puts two dashes in a row (--) before signing his comment, just like the master and past confirmed socks.  MBlaze Lightning  talk 02:02, 25 April 2018 (UTC)
 * I can point out many editors who insert two dashes before their signatures. Just one look at my recent interactions reveal that Bbb23 and NadirAli insert two dashes before their signatures and there are many many other editors who do that. That is again the type of evidence, I call trivial.  Sh eri ff  |  ☎ 911  | 13:18, 25 April 2018 (UTC)
 * Arent the two dashes inserted by default?? Unless you force a hyphen or something else in your signature, the default signature carries two dashes.— Trip Wire ________ʞlɐʇ 13:41, 25 April 2018 (UTC)


 * This is a very poor evidence. Trivial things presented as evidence here. "This account came out of nowhere to engage in edit war on Insurgency in Balochistan" as Librobital is the only one in the world who engaged in an edit war on that page, that page is infested with edit-warriors. Totally different styles of adding the source presented as "Same style of adding the sources", Uncle Sargam is adding the source under "Further reading" while Libro is adding it inside the main article content whereas Libro’s source is named while Sargam’s source is not otherwise everyone adds sources the same way. Other pieces of evidence are very trivial as well for example interest in "In the news", "sports" and "India" topics. There is nothing outstanding in the evidence to convict Sargam.  Sh eri ff  |  ☎ 911  | 20:45, 24 April 2018 (UTC)
 * The editor does not seem as a somebody who just started editing on Wikipedia. They are very well versed with Wikipedia policies and the WP:ANI. This can be further cemented by the use creating a new template Template:Liaquat Ali Khan. IMO, there could be two reasons somebody who is well versed with Wikipedia might be editing from a recently created account. It could be a fresh start in which case the user should come clean (in private) with the admins and clear up this confusion. Or they might be evading a past Topic ban (on India Pakistan Articles) or a block. This is not new and has been noticed across many SPI's. I am inclined to believe that this is a sock of since there are some uncanny similarities.  Both of these editors have strong interest in unrest in India, and on expanding these articles. On pushing/opposing articles in the Wiki news candidates ,. In addition is their interest in Pakistani sports here , , . To further sum this is they are already involved in edit war with other editors with whom they have had a similar situation in the past. 128.220.159.7 (talk) 17:04, 25 April 2018 (UTC)
 * The sudden parachuting of this IP (128.220.159.7) here, solidifies my hunch that there is something fishy as I mentioned it on WP:ANI. I ask the admins to investigate this IP's connection with Capitals00, MBlaze Lightning & Raymond3023. As far as how I was able to create Template:Liaquat Ali Khan is concerned, I simply copy-pasted Template:Muhammad Ali Jinnah, replaced the parameters and took a bit of inspiration from Template:Abraham Lincoln. Is the IP really suggesting that one needs to know some sort of coding to edit Wikipedia? --Uncle Sargam (talk) 06:53, 26 April 2018 (UTC)
 * Rebuttal to latest evidence presented by the filer:

(a) "Same style of adding sources." - I see that Mfarazbaig would even put square brackets within refs to link news sources which I don't. e.g.
 * 1) Summary terms such as “ref added”, “ref fix”, “cleanup” and “no source” are universal terms and used by many editors
 * 2) The other evidence regarding asking for consensus is trivial as well, I ask for the consensus all the time and many other editors do as well
 * 3) Votes presented as similar are not similar at all, they are for completely different pages with different topics so there are two differentiating factors in there, one being a different page, second being different topic, for example, here are the links given by filer as evidence (I just added the page titles for clarity): Uncle Sargam (April 2018 caste protests in India), Mfarazbaig (Monarch Airlines)
 * 4) Filing complaints on ANI is not a smoking gun either, done by many, as a matter of fact, there are 10-20 complaints open at ANI every day.  Sh eri ff  |  ☎ 911  | 16:05, 26 April 2018 (UTC)
 * Capitals00 filed for this investigation on 23rd April. He then posted some more cherry picked examples on 26th April, then on 27th April and now on 10th May. He continues to stalk my edits. Is this kind of behavior normal on Wiki? Do you plan to let this investigation be open for all eternity? If I have to debunk this allegation to get this investigation to close then so be it.

(b) "Obsessing over Wikipedia talk:In the news/Recurring items concerning sports and also articles about incidents in India" - According to filer I have an obsession over ITNR concerning sports but I don't see myself commenting on a Suggestion to add: Other multi-national Olympic-style sporting events, which was up there during the same time. And the suggestion of me having obsession over "incidents in India" is trivial. It seems the filer is going to accuse anyone editing articles about "incidents in India".

(c) "Has shown his opposition against "T20" cricket on WP:ITN" - This accusation is as dumb as it gets. Fact is I opposed the Proposed Addition: Domestic Football Leagues.

(d) "cleanup" - My edit summary was cleanup while Mfarazbaig's was Cleanup. with a capital C and a full stop.

(e) "no source" - My summary is no source. Mfarazbaig's is WP:OR, no source. Again the usage of full stop.

This investigation was filed on lies and deceit. And if any admin is taking any of this seriously, tag me here so I can debunk the rest. --Uncle Sargam (talk) 05:56, 11 May 2018 (UTC)

It seems to me that the evidence is too strong for the report to be closed as no action. The account is continuously engaging in a pattern of disruptive editing that is same as the master. --1990&#39;sguy (talk) 18:25, 19 May 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * This case is . CU declined.--Bbb23 (talk) 10:20, 24 April 2018 (UTC)
 * First, Berean did not run a check against in March 2018. Second, Mfarazbaig is stale. Third, I can't tell what accounts Berean is talking about in the link you provided because no names are used, and I'm not going to dig to figure it out because it's irrelevant. That said, I assume that Berean checked the CU logs for Mfarazbaig, which can be done by any CheckUser of any account that's been checked before.--Bbb23 (talk) 02:08, 25 April 2018 (UTC)
 * Closing with no action.--Bbb23 (talk) 18:57, 15 May 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Adding these to the archive. I was notified of this at WT:ITN with this edit. – Muboshgu (talk) 05:58, 28 April 2018 (UTC) – Muboshgu (talk) 05:58, 28 April 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Closing.--Bbb23 (talk) 07:00, 28 April 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Much evidence against Uncle Sargam being associated with this sock farm had been already added here earlier, (archive) hence I am not going to rehash it.

Similarities in the selection of their usernames speaks volumes. Uncle and Auntie are both terms used for defining second-degree relatives. Other than this, "Uncle Sargam" and " Auntie Agni " are names of two different Pakistani characters.

Same isolated votes on AfD of 2016 Indian Line of Control strike. Both wants article to be "Redirect" or "merge" with both citing "WP:CFORK" and "WP:POVFORK".

Contributions on WP:ITN about the incidents involving fatalities are same, as well as Pakistani individuals, like recently blocked sock IP of the sockmaster. 1990&#39;sguy (talk) 23:50, 22 May 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Uncle Sargam and Auntie Agni are ✅ from each other. Blocked without tags.--Bbb23 (talk) 00:53, 23 May 2018 (UTC)
 * All done here. Closing.  —  Rich wales (no relation to Jimbo) 03:49, 10 June 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Created hardly 14 days ago and shows same traits as Mfarazbaig.


 * Heavy usage of dawn.com as a source. And style of sourcing is also not different.


 * "undo vandalism" same like "unexplained undo use talk page".


 * Wikilawyering by using edit summaries.


 * Compared a Pakistani politician, Sadiq Sanjrani, with Donald Trump. Just like he had compared a Pakistani politician, Khawaja Muhammad Asif, with Kim Wall and Bill Cosby, with his sock IP which was soon blocked. 1990&#39;sguy (talk) 11:43, 3 July 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I agree, Ridhej.dhhes is clearly a returning user. I had looked into his contribution history a while back. I was convinced then and I'm convinced now that it's him. Mfarazfaig socks have a history of evading CUs; Mfarazbaig himself had showed up as technically "unrelated" to PAKHIGHWAY on 7 October 2017 ( diff ), and exactly a week later his sock/meat farm was exposed. I see the same modus operandi here: Ridhej.dhhes showed up as unrelated technically on 20th June, while here CU turned up (my interpretation of the CU result "") which itself speaks volumes. His edits until 20 June are tagged as mobile edits, but edits starting from 24 June are lacking mobile tags, which clearly indicates that he intentionally used a mobile device in order to evade CU, and later switched to a computer upon seeing the negative CU results.   MBlaze Lightning  talk 08:54, 22 July 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . There's some evidence indicating a connection between the accounts, and some indicating no connection. Unless the behavioural evidence is clear enough on its own, I'd like another checkuser to review this data. --Deskana (talk) 21:35, 7 July 2018 (UTC)
 * I find the account ❌.--Bbb23 (talk) 22:19, 7 July 2018 (UTC)
 * I'm changing my finding. I ran a check against this user on June 20, and I stupidly neglected to update the check now before posting the above finding. Based on the updated check, I understand why you found it, but personally I would find it a bit better than . Two of the user agents, as far as I know (and I go way back on this case), have never been used before, and the other is so common I have trouble hanging my hat on it even when it matches another user.--Bbb23 (talk) 22:54, 7 July 2018 (UTC)
 * Yeah. To summarise, I think the outcome of our investigation is that checkuser can neither prove nor disprove this allegation. --Deskana (talk) 15:54, 8 July 2018 (UTC)
 * as a courtesy, I'm providing you the definition of "inconclusive" from Wiktionary: Your interpretation of this as "possible" (for which checkusers have a different possible flag available) is wrong: there simply can be no conclusion made. That's what it means.
 * I have to agree with the checkusers here, the behavioural evidence presented does not conclusively demonstrate a connection, and technical results are of no help. Closing with no action. Ivanvector (Talk/Edits) 18:26, 14 August 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Alleges people of socking or meat puppetry like months ago he did.

Son of Kolachi jumped to restore edits of above IPs. Mfarazbaig and Son of Kolachi edit wars and tells others to "raise them on talk page" or "take it to the talkpage"

Notify so that they can familiarize themselves. Sdmarathe (talk) 20:52, 21 July 2018 (UTC)


 * Mfarazbaig, whom I had interacted on Talk:Persecution of Hindus, became part of this sock farm in 14 October 2017 (Sockpuppet investigations/Liborbital/Archive). The investigation was huge and Mfarazbaig was an undisclosed paid editor who was unrelated to many other paid editors of this sockfarm. It is not unbelievable if some sock comes up unrelated while they are mimicking behavior of Mfarazbaig. Sdmarathe (talk) 16:49, 22 July 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Thanks I know now that those IPs are socks. As already in above SPI, the use of dawn.com as a source and writing the reference similarly is clearly WP:DUCK:


 * 
 * 


 * Clearly not a new editor, account is being used to evade scrutiny and edit war, a block for this disruption is justified. Accesscrawl (talk) 06:32, 22 July 2018 (UTC)


 * please take a look.
 * MBL had suspected meat puppetry about DilpaKaur in past here Administrators%27_noticeboard/IncidentArchive975. curiously enough, Dilpa returns and files a frivolous 1RR report in spite of it being obvious IP vandalism. -- D Big X ray  08:59, 22 July 2018 (UTC)


 * This looks like a lure. I have no doubt after that report that Son of Kolachi is a bad hand account. Accesscrawl (talk) 09:23, 22 July 2018 (UTC)
 * Yes. name itself Quacks.
 * Kolachi is old name for Karachi. where these IPs geolocate to. and  used IPs from the same location. The IP range is similar.
 * IPs throws allegations of Sock / meat explained by the Filer above.
 * He may be using proxy or may be we are looking at meat puppets-- D Big X ray  11:30, 22 July 2018 (UTC)
 * Hello can an admin take a look at the behavioral evidence that i placed above after the CU response. this is clearly an old timer based on his coments and edit summaries. -- D Big X ray  21:21, 2 August 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
❌. .--Bbb23 (talk) 00:22, 22 July 2018 (UTC)
 * IP edits too old. Closing. Ivanvector (Talk/Edits) 18:26, 14 August 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This IP popped up at WP:ITN/C today to make a nomination regarding the Pakistani general election (diff). The ITN edits are a dead giveaway, given the master's addiction to ITN/C (1, 2, 3 4), which is no secret. It is also the same IP that asked SheriffIsInTown to make edits for him in March, since he finds the said user to be loyal to him. Finally, the IP geolocate to the same location and is in the same range as previously blocked IPs (e.g., see #24_October_2017) The quacking is loud enough, in my opinion, to block the IP.  MBlaze Lightning  talk 15:14, 24 July 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
The IP's edits are too old. Closing.--Bbb23 (talk) 15:47, 3 August 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These IPs popped up after User:Son of Kolachi was blocked yesterday. Trying to make disruption on atleast three BLPs - which I often edit - after I refused to entertain his request .. the listed IPs geolocate to the same location and is in the same range as previously blocked IPs.

Berean Hunter blocked 2 ranges of this sockfarm very recently (122.8.0.0/16 and 39.57.128.0/17) this could be the reason why this sock has now has switched to a new range. Saqib (talk) 14:16, 12 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CU-rangeblocked. Closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 18:53, 18 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

created Shahid Shafaat (who is also blocked for block evasion) and continues to remove g5 tagging. Both ips are in the same range as past blocked (ranges and individual ips) of Liborbital. Praxidicae (talk) 14:43, 25 October 2018 (UTC)
 * See also this hilarious claim they "know this ip". Praxidicae (talk) 14:44, 25 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I don't know if they're Liborbital but the new IP user is obviously the same user as the 39.38 blocked range. Since that range is also blocked for block evasion, the page is eligible for G5 deletion. Ivanvector (Talk/Edits) 15:11, 25 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This IP in the same range as past blocked of Liborbital and co. Requesting undeletion of BLPs Requests_for_undeletion and edit warring at Sana Sarfaraz. Saqib (talk) 05:54, 30 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP already blocked. Closing. Bbb23 (talk) 18:03, 4 November 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Had been blocked before too by Bbb23. Same geolocation as all other recently blocked IP addresses. Criticizes reading ability of others during edit war. Contributions on ITN, like other blocked IPs, and accounts sounds same. Also check the edits from March 2018, when he was using his other recently blocked range (39.48..) to restore edits of this reported IP (58.27.134.133). Capitals00 (talk) 17:59, 4 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No activity from this IP for 10 days. Closing.  Vanjagenije  (talk)  19:04, 14 November 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Created hardly a week ago and shows same traits as Mfarazbaig. Saqib (talk) 18:29, 21 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Mahzain is very to. Blocked, tagged, closing.--Bbb23 (talk) 22:44, 21 November 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same geolocation as all other recently blocked IP addresses and shows same traits as Liborbital. Edit warring and creating BLPs on non-notable person.Saqib (talk) 08:05, 1 December 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Obvious.  has already blocked 119.160.116.0/22 for a month, so nothing more to see here.  Closing and archiving. Courcelles (talk) 20:28, 2 December 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Shows same traits Liborbital.. Hardly a month old account with 50 or so edit yet interest in "In the news", and request for undeletion. Saqib (talk) 08:30, 9 December 2018 (UTC)


 * As noted here, Liborbital & co. has "obsession of opposing/supporting attack-related articles for news" - .  Liborbital's socks often make undeletion request   - which is not normal for a newbie..


 * And now The Donkey King has began participating in AfD's, . Only an experienced user would do this . --Saqib (talk) 10:25, 10 December 2018 (UTC)
 * See above. --Saqib (talk) 15:36, 12 December 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Can you show 1 or 2 edits that show the same traits? -- Amanda  (aka DQ) 08:53, 9 December 2018 (UTC)
 * ✅ to previous socks. Blocked without tags. Closing.--Bbb23 (talk) 16:50, 16 December 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Registered after the last sock had been blocked. Updated the article created by Son of Kolachi. Restored content which was added by Mfarazbaig. D4iNa4 (talk) 17:01, 10 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅ to previous socks. . Closing.--Bbb23 (talk) 18:53, 12 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Registered after the last sock had been blocked. Shows same traits sa Liborbital.. following my contributions (hounding) and editing my drafts Saqib (talk) 15:35, 7 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Saqib Hey bro, i guess there has been a confusion. I recently saw your contribution and got impressed with number of article you have written. That's why i intended to assist you in a draft over 'Jehan Ara'. In case if you feel, i should have assisted with some protocol, do let me know, i am always ready to learn. when in doubt, i ask (talk) 09:07, 8 February 2019 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Credauth and are  to the master. — Berean Hunter   (talk)  13:29, 8 February 2019 (UTC) — Berean Hunter   (talk)  21:29, 8 February 2019 (UTC)
 * Add to the ✅ list.


 * I was checking something else and also found ✅ to Mike Foxtrot Bravo. Ivanvector (Talk/Edits) 16:10, 11 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Makes "new article" on Indian and Pakistan news events and appears active on Portal:Current events.  M L talk 09:01, 21 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 13:36, 21 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Showing same traits as Liborbital.. adding OR to Pakistani bios despite warning. Saqib (talk) 12:31, 8 March 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocking random stale IPs on a mobile phone network isn't going to be productive. Nothing to be done. Closing. Cabayi (talk) 09:24, 11 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

New user with same sort of obsession with ITN, Quetta Gladiators, updates on Mohammad Asif (snooker player).

Using the named IP to evade 3RR. D4iNa4 (talk) 03:31, 29 November 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The archive is all stale., are you looking for a check for sleepers or? The SandDoctor  Talk 16:40, 29 November 2019 (UTC)
 * ✅ to previous socks. Blocked, tagged, closing.--Bbb23 (talk) 17:01, 29 November 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

New user, reactivated after Bigfoot Yeti got blocked as a sock with same sort of obsession with ITN, Naseem Shah, Template:Terrorist attacks in Pakistan. D4iNa4 (talk) 04:34, 23 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * to Bigfoot Yeti., closing. Mz7 (talk) 06:24, 23 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The user is editing on the same pages with similar agenda. Störm  (talk)  14:10, 1 February 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Adding another IP. All blocked for 1 week. Dreamy Jazz 🎷 talk to me &#124; my contributions 23:23, 1 February 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Reinstated content previously created by the former sock.

Edit warred with.

Pinging for any additional comments. Kautilya3 (talk) 22:14, 5 February 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * —&thinsp;JJMC89&thinsp; (T·C) 04:35, 6 February 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same dawn.com spam like all other socks in the archive, and the usual habit of WP:STONEWALLING by reverting on a page he hasn't even edited before. Azuredivay (talk) 01:09, 22 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No non-stale accounts in archive. The SandDoctor  Talk 04:59, 22 June 2020 (UTC)
 * CheckUser is as I've nothing to compare to in the archive. However, I have blocked based on the behaviour. Closing. Callanecc (talk • contribs • logs) 08:08, 22 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same spam of dawn.com edits about recent pakistani affairs, and attempting to create anti-indian pages/redirects. Azuredivay (talk) 17:09, 30 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Addict Banker, Brown Hero, Guy in the Mall. -- Amanda  (aka DQ) 18:01, 1 July 2020 (UTC)
 * , closing. Mz7 (talk) 18:21, 1 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

IP socking by the sockpuppeteer. Exact same disruptive addition of content [despite explained removals by multiple users] with the same meaningless edit summaries (update, restore). Master, IP1, IP2, IP3 (same edits or edit summaries); Master, IP1 (same edit summaries); Master, IP4 (similar edits); IP2, IP5 (exact same edits); IP6, IP7 (same edit summaries). Clearly not a case of mistaken logout sine the IPs have been working in tandem with the main sockpuppeteer and each other on multiple articles.

And clearly not a new inexperienced account either: has created Talk pages, with WP projects to boot, edited templates and created dubious disamb pages. Might be a sock of another master (the range has been used by at-least one other LTA abuser in the past WP:LTA/SAMI). Gotitbro (talk) 03:00, 1 July 2020 (UTC)
 * Added other IPs who have similar editing patterns or edited the same articles as the master. Gotitbro (talk) 03:17, 1 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * CU won't connect IPs. This sock is most likely related to already filed Sockpuppet_investigations/Liborbital. Azuredivay (talk) 12:56, 1 July 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * won't connect IPs. -- Amanda  (aka DQ) 18:01, 1 July 2020 (UTC)
 * I didn't run any checks, but based on the behavioral evidence, I've placed range blocks on 119.157.240.0/20 and 119.157.112.0/20. Closing. Mz7 (talk) 18:34, 1 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Exact same reinsertion of content as by previous socks and IPs. Prev sock, Current sock; Prev sock, IP sock, current sock.

Also tagged as likely in the previous checkuser. Gotitbro (talk) 19:02, 1 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Oops, I thought that this account was already blocked. now. Mz7 (talk) 19:05, 1 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Exact same reinsertion of content as previous IP socks in the same range. Prev IP1, Current IP; Prev IP2, Current IP.

we need a larger range block here, the socking is getting ridiculous here. Gotitbro (talk) 21:25, 1 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I widened the range block to the /16 for a period of 2 weeks. The main issue with a block this wide is collateral damage—let's start with a shorter/medium-length block before going a month or longer. Mz7 (talk) 21:30, 1 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Admits on his userpage that he is using multiple accounts but has not named any accounts. See WP:SCRUTINY.

Came back after the last 2 week range block was made on him. Made his first main page edit to conflict with Gotitbro (who reported him most in the recent times), then started edit warring him across many articles. Aman Kumar Goel (Talk) 06:33, 11 August 2020 (UTC)


 * Also added Invisible Lad, who is showing interest in same subjects as this sockfarm, such as "Chandragup", and is also interested in ITN.


 * are you around? Aman Kumar Goel (Talk) 06:33, 16 August 2020 (UTC)

Comment I used to have a previous account, but I am not him. It's a clean start that's why i do not want to declare anything previous. But I want to declare that my previous account was not under any scrutiny, sanctions or block. Consider WP:AGF, that's all i have to say. Islam Treasure66 (talk) 07:24, 16 August 2020 (UTC)

Comment. The filer has failed to "explain how the accounts are being used abusively". Moreover, the comparisons made are merely superficial & hilarious at best. Please note that my account is active since May 2019 and I use it from multiple locations. --Invisible Lad (talk) 16:19, 17 August 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I'm endorsing this, but it's marginal. For sure, a 7-year sleeper coming to life to edit-war with editors the master previously interacted with makes my ears perk up.  On its own, I don't think that would be enough to endorse, but given the long history of this case, CU seems reasonable.  And, yeah, the declaration on the user page too. -- RoySmith (talk) 16:28, 11 August 2020 (UTC)
 * PS, if confirmed, this would be the new master. -- RoySmith (talk) 16:29, 11 August 2020 (UTC)


 * - ST47 (talk) 16:40, 17 August 2020 (UTC)
 * These accounts are ✅ to previous socks, and will be blocked:
 * Islam Treasure66 is technically, blocking behavorially. ST47 (talk) 16:45, 17 August 2020 (UTC)
 * I do not think that we should rename the case. Closing. ST47 (talk) 16:47, 17 August 2020 (UTC)
 * Islam Treasure66 is technically, blocking behavorially. ST47 (talk) 16:45, 17 August 2020 (UTC)
 * I do not think that we should rename the case. Closing. ST47 (talk) 16:47, 17 August 2020 (UTC)
 * Islam Treasure66 is technically, blocking behavorially. ST47 (talk) 16:45, 17 August 2020 (UTC)
 * I do not think that we should rename the case. Closing. ST47 (talk) 16:47, 17 August 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Abusing this range once again just like he did weeks ago. Wareon (talk) 16:11, 20 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Unclear what to do here. Over the years, they've used a huge range of IPs.  I could block 119.157.247.44/18, or even (based on the history), 119.157.247.44/16, but looking at the contributions, there seems to be a lot of collateral.  Most of the edits are on Pakistan-related topics, but that's not surprising given that this geolocates to Pakistan. -- RoySmith (talk) 16:53, 20 September 2020 (UTC)
 * At this point, the entire /18 range has been quiet for over a week, so there's really nothing to do here. It is worth noting that activity on that range stopped at almost exactly the same time this SPI was opened.  Hmmmmm. -- RoySmith (talk) 22:01, 27 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same misleading and dodgy edit summaries for restoring problematic articles:

Alleging same opponents of edit warring while himself avoiding any use of talk page: Wareon (talk) 09:50, 6 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Nomad on Road is ✅. Pictogram resolved.svg All sock blocked and tagged. Closing case. Callanecc (talk • contribs • logs) 23:06, 6 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same interests as earlier socks,,, dawn.com use, comes back to create/update page about a recent terrorist attack in Pakistan. Aman Kumar Goel (Talk) 17:43, 22 August 2021 (UTC)
 * As the last and experienced CU of this SPI, can you check the above account? Thanks. Aman Kumar Goel (Talk) 08:30, 1 September 2021 (UTC)
 * Apart from similarities above, this user created userpage by only repeating his username, same as previous socks. Can you issue the block? Aman Kumar Goel (Talk) 15:50, 5 September 2021 (UTC)
 * I think possible certainly means more than just same location and ISP. I have more evidence but I would rather wait more. Let me know if it would be alright to re-file should more evidence emerge. Aman Kumar Goel (Talk) 01:35, 7 September 2021 (UTC)
 * If you've got additional evidence, you could just add it to this report if you get there before it is archived. If you need a little time, let me know and I'll place this on hold.  Or, if you prefer to wait and gather better evidence, you can certainly just file a new report at some future date. -- RoySmith (talk) 01:58, 7 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * It's technically but I don't have a lot to compare to. Callanecc (talk • contribs • logs) 09:34, 1 September 2021 (UTC)
 * I don't see any strong behavioral evidence of socking. The topics they edit attract a lot of attention, so shared interest in them doesn't mean much.  I assume the "possible" from CU means something like, "They're all on the same mobile carrier in India or Pakistan", which describes a lot of people.  The similarity in their user pages is indeed curious, and somewhat suspicious, but that's not enough to block on.  Closing with no action taken. -- RoySmith (talk) 16:22, 5 September 2021 (UTC)

Suspected sockpuppets
Same obsession with:-
 * restoring 🇮🇳 India to infobox of Insurgency in Khyber Pakhtunkhwa.
 * ITN nominations like all his other socks.
 * calling insurgency in Jammu and Kashmir a "Kashmir Intifada"

. Capitals00 (talk) 07:06, 9 April 2023 (UTC)
 * This sock has only 135 edits. His another tendency is to create articles on latest tragedies or riots in Indian and Pakistan, and cites "LONGQUOTE".  May I know if this behavioral evidence is enough for block? Capitals00 (talk) 16:07, 9 April 2023 (UTC)
 * @Capitals00 I'm going to leave this for somebody else to take a look at. The problem is, the sorts of things you're describing are popular editing topics for a lot of people, so it's easy to misidentify socks in this area. -- RoySmith (talk) 16:28, 9 April 2023 (UTC)

Alright. Some more striking similarities:-
 * On Sharada Peeth, he removed Devanagri script ("शारदा पीठ"), and changed "Pakistan occupied Jammu and Kashmir" to "Azad Kashmir". Earlier sock made same edits.
 * Edit summary while creating articles is "New article".
 * Accuses experienced editors of engaging in "WP:IDL" or "WP:IDONTLIKEIT" as reason for reverts. Capitals00 (talk) 05:18, 10 April 2023 (UTC)
 * Can you evaluate the behavioral evidence? Thanks Capitals00 (talk) 16:04, 12 April 2023 (UTC)
 * Can you evaluate the behavior? Capitals00 (talk) 11:56, 18 April 2023 (UTC)
 * @Capitals00 It's really not useful to keeping pinging specific people asking them to handle the case. Cases get handled whenever somebody on the SPI team gets to it.  There's a long queue and sometimes it takes a while. -- RoySmith (talk) 13:27, 18 April 2023 (UTC)
 * That depends. Another SPI I filed today had swift action. I edited this SPI after nearly a week today because things are getting worse and this sock is doing his best to influence consensus discussions that have time limit. Capitals00 (talk) 14:23, 18 April 2023 (UTC)


 * Can you also check this new account War Wounded? Both User:War Wounded and User:Oriental Aristocrat:
 * updated section on Pakistan at Humanitarian response to the 2023 Turkey–Syria earthquake,
 * added category on Abrar Ahmed (Pakistani cricketer),
 * restored same content on Insurgency in Khyber Pakhtunkhwa by calling edits "unexplained",
 * vote stacking on Talk:Pakistani Taliban and Move review/Log/2023 April. Capitals00 (talk) 20:49, 19 April 2023 (UTC)


 * The connection was "possible" and there was not enough behavioral evidence but this time we clearly have it. Right? I see that registration dates for both accounts is also almost same. One registered on 17 June 2022 and another registered on 22 June 2022.  Kindly undo your close. There is lots of behavioral evidence and "possible" CU result (for War Wounded and Oriental Aristocrat) for confirming ongoing sock puppetry. Capitals00 (talk) 23:22, 21 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Global ongoing events can be of interest to many editors. The major earthquake in Turkey was a recent tragedy. While, Abrar Ahmed recently made a debut in cricket (the most popular sport in South Asia). Similarly Sudan conflict is ongoing military event. Apart from that there are other editors who have restored the same content or "voted" on both the discussions. These recent filings are just another attempt of HARASSING editors who disagree with you. SPIs shouldn't be used for FISHING. War Wounded (talk) 15:11, 21 April 2023 (UTC)
 * How you found this SPI given we never interacted? Why you are acting like all other socks of this SPI? Capitals00 (talk) 15:40, 21 April 2023 (UTC)
 * The same way you filed the SPI superficially even without any interaction. P.S. It is no rocket science to know this, when you link someone's account, they will get a ping notification. Now, explain your position. War Wounded (talk) 17:34, 21 April 2023 (UTC)
 * No you don't get ping from that. I don't have to interact you to file SPI. Like all other previous socks, you learned about this SPI due to your own habit of keeping a watch here if someone has finally caught your new socks. Capitals00 (talk) 20:56, 21 April 2023 (UTC)


 * Both the accounts here are clearly not new users, despite a lower edit count their wiki jargon fluency and edits in obscure WP spaces show usual sock behaviour. The overlapping edits in the Move Review space and on Insurgency and Taliban articles make a very good case for these accounts being socks of each other or editing in co-ordination. Gotitbro (talk) 16:17, 21 April 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * There's very little data to compare to. What little there is says ❌, but  might work too. -- RoySmith (talk) 13:22, 9 April 2023 (UTC)
 * PS: to clarify my CU finding, it's probably best to just ignore the CU data and evaluate this on behavior alone. -- RoySmith (talk) 16:29, 9 April 2023 (UTC)
 * The potential connection between Oriental Aristocrat and War Wounded was previously investigated in Sockpuppet investigations/Oriental Aristocrat/Archive, which resulted in no action. Mz7 (talk) 21:23, 21 April 2023 (UTC)
 * Closing. Filer has a history of filing frivolous SPI reports against editorial opponents. Absent a technical finding, there's nothing to do here. Ivanvector (Talk/Edits) 21:28, 21 April 2023 (UTC)
 * Since the filer won't stop making new comments here and posting messages on my talk page, I'm reopening this for another look. I'm busy right now so I'll post comments later unless someone beats me to it. Ivanvector (Talk/Edits) 20:32, 22 April 2023 (UTC)

This report and this case in general have a lot working against it. Some thoughts in no particular order: That said, let's take a look at the evidence presented here: On the evidence added later: And on the comparison with War Wounded:
 * The filers' behaviour hinders investigations here. There seems to be a tendency of SPI reports in this contentious topic to hold back some evidence to be disclosed only after some conclusions have already been stated, and that includes adding more accounts after a check has been run. This isn't helpful: if you're discovering more evidence after initial filing then do what you need to do, but if you have it and just aren't writing it here for some reason (to be dramatic? I don't know) you're just disrupting the process. Make your case and let the clerks evaluate it.
 * Consider forming your reports as though they're going to be reviewed based on behaviour alone; don't rely on checkuser to make your case for you. For one thing CU just isn't very helpful here (here as in this geographic region): the networks are astoundingly large and false technical connections are common, and geolocation is accurate to within about 2,000 kilometers (entirely unhelpful, in other words). If a clerk feels it would be helpful they will request it, but these reports tend to end up judged on behaviour anyway. Requesting CU also works against you because of the phenomenon that cases with a status of checked languish in the queue forever; that has been the topic of several discussions but it still happens.
 * There is another tendency of filers in this contentious topic to forumshop new accounts through multiple SPIs if the first doesn't result in a block. As a result there is a ton of confusion in our CU records about which account is whose sock, and there are numerous accounts blocked as "probably somebody's sock" who for one don't help with future investigations, and two are likely innocent.
 * That tendency, plus the tendency to blanket reports with late evidence, and the tendency of that evidence to be throwing mud at the wall to see what sticks, also leads to scope creep in the cases and obfuscates future behavioural analysis. Liborbital was originally a paid editing and refspamming case, back in 2017. I have notes from 2018-19 where I was comparing this case to Pakistanpedia, which was exclusively an edit-for-hire case (I didn't find any definitive connections and believe them to be separate, FTR). It evolved seemingly spontaneously in late 2017 into a case of ARBIPA POV pushing with no indication of paid editing at all - that's a wild swing in behaviour for any connections to have been made, but also leads to the situation now where the behavioural profile is too vague and generic to make any connections. As RoySmith aptly put it, "the sorts of things you're describing are popular editing topics for a lot of people". In the past I've referred to this as accusing two fish of sockpuppetry because of a common interest in water.
 * The swing I referred to above happened when a certain group of editors began filing reports here. I and several other clerks observed two groups of editors on either side of the ARBIPA-defined conflict working together to file retaliatory reports against their opponents; see the last archived report in Sockpuppet investigations/Capitals00 for example (don't read into that case, there was never any finding). Some of them also sock-tagged the subjects of their reports themselves before any conclusions were formed, which led to more confusion down the road.
 * What we're left with here is checkuser data that is inconsistent, and a behavioural profile that any new user in India or Pakistan is likely to fit at least somewhat. In other words, what am I comparing this to?
 * New users tinkering with flags in infoboxes is not evidence of sockpuppetry; in fact it's strong evidence of a genuinely new user. You can click "recent changes" pretty well any time of any day and find at least one edit that is adding or removing flags from an infobox.
 * ITN nominations would be a good indicator if there was a trend in the nominations. Of these: two are significant events in cricket and one is a political event; they're also months apart. This case and related cases are physically located in a region that has been in political turmoil for hundreds of years, with a population of nearly 2 billion people, and cricket is an incredibly popular sport in the region. The likelihood of any two users having common political and sporting interests here is so high as to be expected. This doesn't demonstrate a connection.
 * "Kashmir Intifada": again, politics. These edits are six years apart but rely on the same sources - this is worth a closer look. It was added in Aug 2017 and stayed in the article largely unchanged for five years while the article continued to be edited by numerous editors I would consider experts in this topic, which suggests to me it was warranted and had consensus. It was removed by an editor who had no other edits to the page, and only removed the word, not the sources. When Oriental Aristocrat added it back six months later, a reasonable explanation is that they were correcting the lede to match the sources (which were sources for "intifada", while "insurgency" had and continues to have no sources inline), but they did not add the sources. All things considered I don't see this as evidence of socking.
 * "Azad Kashmir": I think the filer is mistaken here. Oriental Aristocrat removed the Devanagari script, and called it "non-native" as the sock had in the past edit, but OA didn't do anything with the description of the region at all.
 * "New article" edit summary when creating an article: well, yes, that's what edit summaries are for. The fact that two of the articles are about current-at-the-time political events (both described as riots) is interesting, but there is a subtle difference in the edit summary despite being incredibly generic otherwise. The page about the public fountain isn't very useful in this analysis.
 * WP:IDONTLIKEIT in disputes with other users: so common as to be irrelevant, and OA used a different shortcut from the blocked sock anyway.
 * First of all, sock list calls checkuser, which I'm fairly sure does generate a ping if you also sign the edit (I'll test this and report back). War Wounded coming to the page after being pinged wouldn't be surprising.
 * Turkey-Syria earthquake response: this is an article outside the ARPIPA scope; the two users added information to the same section a month apart, and both without an edit summary. Would two Pakistani editors both be interested in their country's response to a foreign disaster? Perhaps. The information they added was not similar, otherwise. They also formatted their refs differently and used opposite date formats, which could be intentional obfuscation, but we'll come back to that.
 * Abrar Ahmed (Pakistani cricketer): these edits were two days apart and added different categories, but the article was under rapid expansion at the time as the cricketer was in the news. Again, editors in this region with an interest in cricket are a dime a dozen - this is probably coincidence.
 * Insurgency in Khyber Pakhtunkhwa: these edits are the first that are really indicative of sockpuppetry, as Oriental Aristocrat appears to be directly restoring War Wounded's edit, and this time the date formats match. But, as Vanamonde observed when similar evidence was provided at Sockpuppet investigations/Oriental Aristocrat, this article is a magnet for POV pushers, and these reverts are part of a slow-motion edit war that has been going on for a long time before either of these editors were involved.
 * Vote stacking: this is the first evidence that seems related to the Liborbital profile, prior to its scope being vaguely expanded to include basically everything. However, I don't see the evidence for vote-stacking in the Pakistani Taliban move discussion: there were numerous editors supporting the move. In the Hindu terrorism move review I see numerous editors on both sides who have probably been canvassed; I would suspect War Wounded of being related to one of the IPs, but I don't see the evidence of coordination with Oriental Aristocrat specifically. Numerous editors are making the same arguments on all sides of that discussion.
 * Ref and date formatting: I mentioned this in a comment above. War Wounded consistently uses dmy format while Oriental Aristocrat ( dmy,  mixed,  mdy) is not consistent. WW also consistently formats their refs with full spaces on both sides of the horizontal bar, while OA inserts the parameter immediately after the bar. This suggests two separate users.
 * Another indicator we can look at is their interests outside of the interests we know they have in common, which we also expect most people in their region to have in common. War Wounded has made a lot of gnomish edits to pages and categories on regions within Pakistan, Pakistani film topics (especially biographies), Pakistani police, and Pakistani municipal/utility companies. Oriental Aristocrat makes more substantive edits on Indian culture topics, local geographic features (especially rivers), and recently has created articles on Pakistani mountaineers and an elephant. These aren't similar.
 * Gotitbro's "clearly not new users" comment: there are currently 1.2 million pages in the Wikipedia namespace and just under 1,000 in the Help namespace, which together provide a detailed and thorough guide to everything you might need to know and everything you might want to do on Wikipedia; indeed we have one of the most comprehensive user guides of any collaborative project that has ever existed. Anyone can look up any part of it at any time, and we repeatedly encourage new users to read the most important pages. Knowing how to do things is not, in and of itself, evidence of sockpuppetry. No evidence was provided at all, but especially not for the allegation that the two accounts are editing niche topics in common (politics and cricket are not niche, as I've described elsewhere).
 * Previous CU result: the closeness in the account creation times may be indicative, but they are outside the CU retention window. The previous checks were run by Blablubbs, not Mz7, and their checks didn't leave enough info in the logs to be useful now, unfortunately.


 * - my detailed analysis of the evidence presented is above. I've given my opinion of the history and development of this case, offered my opinions of the evidence provided and provided some additional evidence of my own, and I apologize for its length. I also re-checked given the staleness of Blablubbs' previous CU result, and posted the data and some commentary on cuwiki. However, I'm going to leave this to someone else to review and state a definitive conclusion, as I'm likely to be accused of bias no matter which buttons I push or don't push. Ivanvector (Talk/Edits) 17:04, 23 April 2023 (UTC)
 * I agree with analysis. . : You have been warned about your behavior at SPI (e.g. ), and it doesn't seem you are taking the advice on board . I'd suggest you to carefully read everything that other checkusers have explained in this case before you file another report. You will have to resolve this content dispute elsewhere. MarioGom (talk) 21:35, 23 April 2023 (UTC)
 * Respectfully, I appreciate your comments here and obviously I don't disagree, but I asked for a checkuser to review this with respect to my notes on our private wiki. There is info there that I can't share here which may lead to action. Relisting once more for a checkuser to review. Ivanvector (Talk/Edits) 22:03, 23 April 2023 (UTC)
 * Ok, no problem. MarioGom (talk) 22:07, 23 April 2023 (UTC)
 * @Ivanvector I'm not sure if you had intended that I would take another look, or that a third CU should. I'm going to assume the later, so I'll just note that there's some WP:LOGGEDOUT editing going on here, but probably nothing that rises beyond the level that uw-login could address for now.  Let's see what a third set of eyes sees. -- RoySmith (talk) 22:31, 23 April 2023 (UTC)
 * no, I wasn't expecting that you specifically would take another look, but thank you for doing so. It seems like you saw what I saw, and your recommendation is sensible to me. I'm going to close this now (I think this is the third time). Ivanvector (Talk/Edits) 11:37, 29 April 2023 (UTC)