Wikipedia:Sockpuppet investigations/Mariah200/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

252Jononin showed up in October, gamed for ACPerm and created the ultra spammy/possibly upe and copyvio Pritika Swarup, today Mariah200 shows up after not having edited for a month and "declines" the speedy. Both editors are relatively new (despite registering years ago) and immediately start mass categorizing stuff with hotcat as well as using Twinkle and mass adding orphan tags. Praxidicae (talk) 15:29, 14 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Self endorsing. Praxidicae (talk) 15:30, 14 November 2020 (UTC)


 * Just dropping by to say that I concur with the endorsement and recommend looking for sleepers; there are several other accounts I suspect are connected to this. I also think that this group may be related to, but that account is stale so CU won't tell us much. GeneralNotability (talk) 20:12, 14 November 2020 (UTC)
 * as both accounts are using proxies. I can't say there exists a technical connection, but given behavioral similarity and the use of proxies, make of that what you will.   Maxim (talk)  19:34, 15 November 2020 (UTC)
 * Everything said above (especially the proxies), plus the "Welcome to Wikipedia!" spam from both of them.  -- RoySmith (talk) 20:23, 18 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Mariah200 blanked a speedy tag from Seetu Kohli, an article that Μεταφερθείσα had created, almost immediately after the tag was placed, which is reminiscent of the tag teaming detailed in the original filing of this case. The article then got Afd'd. In that AfD, we can find a keep !vote by Estarosmārṭ, whose general behaviour is highly reminiscent of the master; spaced out contributions, orphan tagging, welcomes, gnoming on company pages, draftifications, draft speedies and what could be called reputation management (see Special:Diff/989226724, Special:Diff/989226292); similar behaviour can be found for Μεταφερθείσα. Their timecards also show significant similarities (Mariah200, Estarosmārṭ, Μεταφερθείσα) – note the mostly Mo-Fr editing schedule. Courtesy ping to. Best, Blablubbs (talk • contribs) 10:43, 19 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I think there's enough evidence to link Μεταφερθείσα to Mariah and have as such. My gut feeling is that Estarosmart is a different UPE and have blocked them separately. Closing. GeneralNotability (talk) 14:15, 19 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreating Pritika Swarup using the exact same wording and templates apart from some sentences having been deleted in this new version.

Possible that this is just an unrelated UPE with the content being delivered by the subject, per the comments at Draft:Hisham Al Gurg, User:Merciify was sent the text for that draft by the subject.

– Thjarkur (talk) 23:14, 5 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * As far as I can tell, it's a different person behind the keyboard here. That said, their page creations are shouting "mercenary," and I have UPE-blocked them. Closing. GeneralNotability (talk) 01:32, 6 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Extremely similar behavioural pattern: Clearly not a new user; lots of semi-automated editing to add tags to articles, good number of draftifications, mass-welcoming of users and then spammy creations like this. In addition:
 * Spelling wikilink with a space:
 * Brief edit summaries:
 * Very similar timecards: Blablubbs | talk 18:31, 15 February 2021 (UTC)
 * Note as well these rather unusual edits to their userpage. Blablubbs | talk 18:45, 15 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * User is UA-spoofing via a few dozen open proxies; with regard to the master. Primefac (talk) 12:25, 16 March 2021 (UTC)


 * Whether or not Jenyire2 is related to Mariah200, they are obviously trying to conceal abuse of multiple accounts. —&thinsp;JJMC89&thinsp; (T·C) 02:11, 17 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Immediately shows up and starts mass categorizing, edits to user page suggest someone trying to hide a previous identity. First edit was on Feb 4 2021, user page says she's been here 3 years. Noah 💬 17:52, 13 April 2021 (UTC)

Dear Noah. You are right to point out my timeline. I had a Wikipedia account previously and set it up around 2017. I lost access. I assumed that I should make clear in my userspace that I have previously edited this encyclopaedia. Thanks. — Preceding unsigned comment added by Jolly246 (talk • contribs) 18:02, 13 April 2021 (UTC)

mostly the mass categorization and strange Draft behavior consistent with possible sock Jenyire2 at Denis Clarke Hall. Noah 💬 18:06, 13 April 2021 (UTC)

I'm not saying Denis Clarke Hall in particular, just general behavior with drafts. Noah 💬 18:12, 13 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I have nothing to do with either of the accounts that you mentioned. If there is a problem with me moving Denis Clarke Hall into the article mainspace then I am happy for it to be returned to the draftspace and properly edited before possibly becoming a draft. I wanted to create an article for Clarke Hall because he was President of the Architectural Association. I'm sorry if I've trodden on the toes of a previous editor who did;t want this article to be created.

Clerk, CheckUser, and/or patrolling admin comments

 * what specifically about this account makes you think that this is Mariah200 and not another generic sock farm? I don't see the overlap personally as Mariah200 tends to be a UPE farm and I can't imagine anyone getting paid for the subjects they've written or heavily edited.... TAXIDICAE💰 17:59, 13 April 2021 (UTC)
 * I fail to see what Denis Clarke Hall has to do with Jenyire2 or prior socks. TAXIDICAE💰  18:07, 13 April 2021 (UTC)


 * i'm declining the request for CU because I don't see any overlap, I won't detail fully why as per WP:BEANS but this doesn't seem behaviorally similar at all. Of course, you're free to disagree but you'll need to provide some more concrete evidence in the form of diffs. TAXIDICAE💰  18:11, 13 April 2021 (UTC)
 * Behaviourally, these accounts are unrelated. Per their timecards, they're on different continents, the language skills lead me to believe that Jolly246 is indeed a native English speaker, while Mariah200 is not and can't even decide which continent they're on . The general MO is rather different as well; no details per BEANS (I've been burned by providing too much detail in UPE SPIs a lot recently), but this doesn't match the behaviour that has previously been outlined in the archives. You're under no obligation to do so, but I strongly recommend disclosing your previous account on your userpage (e.g. with User previous account) for the sake of transparency and to avoid suspicions of sockpuppetry. Closing with no action.  Blablubbs&#124;talk 18:27, 13 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obvious UPE (bypassing watchlists by creating the UPE target Aaron Leupp under Aaron F. U. Leupp), behaviour identical to, became active hours after Jenyire2 was blocked, incidental overlap with Jenyire2 on Molala Kate Chantal. – Thjarkur (talk) 11:17, 8 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - very similar to Mariah200 from what I can see; endorsing to a) see if there's proxy use involved here and b) rule out that this is a different master with a similar MO. --Blablubbs&#124;talk 12:03, 8 May 2021 (UTC)
 * that this is a sock of Jenyire2, same proxy use and UA spoofing (though no obvious overlap), but since Jenyire2 was inconclusive w.r.t. Mariah2000 I almost feel like we should split off these two into their own group. Either way, I'll quote the last block and say "they are obviously trying to conceal abuse of multiple accounts." Primefac (talk) 12:46, 8 May 2021 (UTC)
 * Good enough for me given behaviour. – please block the sock indefinitely.  Behaviourally, I'm pretty convinced that Jenyire2 is == Mariah200, so I'm not sure this really needs a merge.  --Blablubbs&#124;talk 16:14, 8 May 2021 (UTC)
 * , Um, did you mean, "not sure this really needs a split"? -- RoySmith (talk) 16:34, 8 May 2021 (UTC)
 * Yep, indeed. --Blablubbs&#124;talk 17:41, 8 May 2021 (UTC)
 * Fine by me. Primefac (talk) 01:43, 9 May 2021 (UTC)
 * Blocked & Tagged, back to you. -- RoySmith (talk) 17:58, 8 May 2021 (UTC)
 * Thanks, closing. --Blablubbs&#124;talk 21:49, 8 May 2021 (UTC)

Suspected sockpuppets

 * ( original case name)

I'm coming to this because of the recent edits at Miroslava Duma, where the user wants to deemphasize her Russian-ness, and emphasize her Ukrainian connections. As that article has been a magnet for UPE in the past, I looked at the users history. What I saw was behaviorally similar enough to blocked user that I am making this report. I comment that Estarosmārṭ was blocked by during the SPI investigation of.

Both users started by making gnomic edits to articles, with a pattern of making 3-4 small edits, several of which correct mistakes left by earlier edits. Both tended to make fixes to the lede, and the edit summaries are similar. After around 50 edits, Estarosmārṭ went on to leaving Speedy Deletion notices on user talk pages, while Ilsecondoordine instead left welcome messages on pages of users with little to no other sign of interaction.

The messages posted at Talk:Miroslava Duma by Ilsecondoordine and by Estarosmārṭ have a similar tone to them (see the last two headings on that talk page).

Ilsecondoordine has also apparently interacted with the UPE farm of Mariah200 (previously linked to Estarosmārṭ, as noted above) on the article BangDB. I am unable to see this deleted article for the details, and am going by the deletion discussion and a talk page notice at User talk:Ilsecondoordine for the relationship. Russ Woodroofe (talk) 13:28, 21 March 2022 (UTC)
 * To clarify: edits of Estarosmārṭ are probably stale; checkuser requested because of the likelihood of related accounts in the presence of UPE. Russ Woodroofe (talk) 13:52, 21 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , no other accounts immediately visible. I think this is Mariah200, but am not 100% and would appreciate a second pair of eyes. I am dead certain they're being paid, however, and have blocked on those grounds. - please compare behavior to Mariah200, and if you think this is them, please tag appropriately and merge the cases. GeneralNotability (talk) 23:21, 23 March 2022 (UTC)
 * I think it's Mariah200 (and I still believe that Estraosmart was as well) – merged, tagged, closing. I'll also note that I blocked as a Mariah sock outside of SPI recently. --Blablubbs (talk) 10:03, 23 April 2022 (UTC)
 * Also noting
 * and
 * for the record. --Blablubbs (talk) 10:06, 23 April 2022 (UTC)
 * for the record. --Blablubbs (talk) 10:06, 23 April 2022 (UTC)

Suspected sockpuppets
Recreated Abraham A. Great, Abraham Great was created by several sockpuppets in this sockfarm. I know this is an old SPI case but I thought I'd report this since versions of this biography continue to be created. Might just be a paid editing job that gets passed around but the version I deleted today looks almost identical to previous versions of this article. Thanks. Liz Read! Talk! 02:36, 22 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * They're using proxies in a way that no good faith users ever do, and is certainly compatible with what I can gather for past Mariah200 socks. Both behaviourally and technically, they also strike me as very consistent with Sockpuppet investigations/10Anstrouiote (who might be Mariah200 as well). I'd like a second opinion on that. In the meantime, as an obvious spamsock.  --Blablubbs (talk) 16:25, 26 November 2022 (UTC)
 * SoottendL overlaps with STNANZZ (not tagged) on Abraham Great. It is fairly similar to the 10Anstrouiote group, with some interesting tells in user page edits. Dziedanas (10Anstrouiote group) overlaps on The Narrative Method with Ilsecondoordine (Mariah200 group). Both groups are probably the same person. MarioGom (talk) 20:11, 27 November 2022 (UTC)
 * Any thought on this? MarioGom (talk) 21:28, 1 December 2022 (UTC)
 * @MarioGom: I'd say go ahead and merge if you think they're a good match. --Blablubbs (talk) 10:32, 2 December 2022 (UTC)
 * , closing. MarioGom (talk) 17:00, 2 December 2022 (UTC)

Suspected sockpuppets

 * ( original case name)
 * ( original case name)

Sock created day after puppeteer was blocked, and went right to one of the master's articles. See Narayan Priyank: Revision history  Onel 5969  TT me 20:30, 24 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * For the record. --Jack Frost (talk) 12:34, 26 November 2022 (UTC)
 * Also . The accounts from that batch are connected to each other through technical data, and clearly behaviourally related to 10Anstrouiote. CUs can find some notes at . --Blablubbs (talk) 12:42, 26 November 2022 (UTC)
 * going straight to Narayan Priyank is quite suspicious, though there's a couple of things which give me pause in terms of reaching straight for the block button. - Please compare  to previous accounts. --Jack Frost (talk) 12:41, 26 November 2022 (UTC)
 * CU results for are best described using my favourite nonstandard graphical indicator: The others were all on proxy, whereas this one might not be, but I'm working with fairly limited data.   --Blablubbs (talk) 12:51, 26 November 2022 (UTC)
 * Blocked accounts dual tagged. No action in relation to at present; in my view there's just not the history to tip it into blockable at this time. Jack Frost (talk) 13:01, 26 November 2022 (UTC)
 * Merged from Sockpuppet investigations/10Anstrouiote and... triple tagged. MarioGom (talk) 17:00, 2 December 2022 (UTC)
 * Hmm, I feel like the triple- and/or double-tagging here will make this quite confusing to parse in future cases. Before we archive, would it be possible to make a definitive decision on the sockmaster? It seems like we've merged all of these under Mariah200, so what I would recommend is tagging all accounts here with  and be done with it. No need to explicitly call out the CU connection to HnonJi (ideally, we also shouldn't tag as   unless a checkuser specifically says ). Mz7 (talk) 20:10, 4 December 2022 (UTC)
 * Ok. I guess I overdid it. Tagged all as suspect to Mariah200. MarioGom (talk) 21:45, 4 December 2022 (UTC)
 * Thanks! Mz7 (talk) 00:42, 5 December 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

All accounts are SPAs focused on Leo Liu. The article was created by Zave Di kokzz. New account showed up to edit the article, remove the PROD and vote keep at AfD. Hesi0913 is another new account whose very first edit was to vote keep on the article. Spicy (talk) 00:01, 26 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * This is clearly a Boskit190 pattern as they almost always game autoconfirmed status. 2400:ADC1:468:400:BC69:16CE:3B67:5B73 (talk) 04:42, 26 February 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Requesting CU to confirm and check for other accounts as this seems like an UPE ring. I strongly recall having seen Zave Di kokzz' edit summary style somewhere else, but I forget which sockfarm it was. Thanks, Spicy (talk) 00:02, 26 February 2023 (UTC)
 * I'm afraid you're not getting much from CU here:
 * is most likely trying to evade CU through technical measures.
 * Assuming is not on proxy, that would make them inconclusive to Zave and unrelated to Carinco. There is a chance that they are, however; I can't really tell at this point.
 * is not on proxy.
 * I'm inclined to think we're looking at three coordinating individuals, but it's hard to tell with any kind of certainty based on the technical profiles. --Blablubbs (talk) 13:35, 26 February 2023 (UTC)
 * Case merged from Sockpuppet investigations/Zave Di kokzz. Spicy (talk) 23:28, 15 April 2023 (UTC)
 * I've blocked Carinco Tuck as either a sock or meatpuppet as they have voted to keep 3 articles created by this sockfarm (Leo Liu, Rex Dane and Megan Euker). No action with Hesi0913 for now. Closing. Thanks, Spicy (talk) 23:35, 15 April 2023 (UTC)

Suspected sockpuppets
Filed for the record, rationale below. Spicy (talk) 23:20, 15 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Went down a rabbit hole while investigating a couple of other SPIs. These accounts are obviously engaging in UPE and are clearly behaviourally related to each other as well as to past accounts in this farm such as . There are a few WP:DUCK tells which I can explain to clerks or admins if it is not clear. I'm not requesting CU as past reports suggest extensive proxy use, but I'll ping who CU-blocked two of these & who's been involved with this case in the past in case he wants to take a look. All accounts . Closing. Thanks, Spicy (talk) 23:24, 15 April 2023 (UTC)