Wikipedia:Sockpuppet investigations/MHoover/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Both users have been changing the site address at Dream Market just like the now-blocked MHoover  -- in a way that contradicts the sources; users have not responded to repeated discussion requests at Talk:Dream Market. Both users uploaded a forged version of the infobox image with the wrong address (File:Dreamlogo_sharpened.png and File:DreamMarketLogo.png. -- intgr [talk] 10:54, 3 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - these two accounts are obvious sleepers, so there are likely more. Ivanvector (Talk/Edits) 18:38, 3 October 2017 (UTC)
 * The only possible sleeper I see is, which was created on one of the webhosts used by Big In Japan. UA matches as well.-- Jezebel's Ponyo bons mots 22:58, 4 October 2017 (UTC)
 * It's not clear this is sockpuppetry and not meatpuppetry, but since all of the IP vandalism was coming from the same area and these accounts were making the same exact edits, I'm calling them socks. This includes the account and IP I've just added above: Squarecubed is already blocked and the IP is stale. Ivanvector (Talk/Edits) 13:02, 5 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Adding CU request for EmilyTheEngineer who also made a similar edit using one of the forged images listed above. Thanks to for pointing it out. -- intgr [talk] 16:29, 5 October 2017 (UTC)


 * The user just made more similar edits and uploaded File:Dnm dream.png, but this SPI case hasn't been updated in 5 days. Did I mess something up with this second SPI case or do I just need to be more patient? -- intgr [talk] 23:59, 9 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked per previous socks. All done here for now. -- zzuuzz (talk) 11:44, 10 October 2017 (UTC)
 * I did receive the ping and specifically took no action here because we had just run CU while this account was active and it didn't get flagged, so I was "waiting to see". But given the subsequent replacement of the URL again and uploading another forged logo, this was clearly another sock. Ivanvector (Talk/Edits) 12:02, 10 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

same changing of the Dream Market onion url as the others. Please also delete File:Dream Market Iogo.png while you're at it, an image the user made to replace the current one (notice IOGO rather then LOGO). Sheesh. Ah. I see they've done precisely this before. &mdash;  Rhododendrites talk  \\ 15:25, 16 October 2017 (UTC) &mdash;  Rhododendrites  talk  \\ 15:25, 16 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - This editor has continued the same behaviour that identified all previous socks. . Please block this account. Sir Sputnik (talk) 03:08, 17 October 2017 (UTC)
 * Sir Sputnik - ✅.  ~Oshwah~  (talk) (contribs)   04:26, 17 October 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same changing of the Dream Market onion URL as MHoover and the others (1 2 3 4) despite repeated reverts and attempts to thwart phishing attempts on the talk page. In the case of the two most recent edits, the user posted the exact same phishing URL that got MHoover blocked originally (1). Maservant (talk) 14:25, 6 September 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Thanks, IP blocked for two weeks (to be extended if necessary). -- zzuuzz (talk) 14:37, 6 September 2018 (UTC)