Wikipedia:Sockpuppet investigations/PlikoraT/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

for JorgeBigfoot and HummrTrukht for creation of FOL Logistics. PlikoraT has very little edit history, and was inactive, yet suddenly became active to move Draft:FOL Logistics into main article space, with an assertion that it passed WP:CCS and/or WP:N. That seems like duck-ishly unusual behaviour to me. I nominated both creations as CSD A7 / CSD G11, as I wasn't convinced that there was a good CCS there in either instance, and it seemed promotional. I can't see deleted revisions, obviously, but the second creation didn't seem like it had significantly improved over the first (from my limited recollection of the first). If both versions are quite similar, that would probably be a quack. Not tagged as requesting CU, leaving that to clerk/admin discretion, if you feel it's needed. Murph 9000 (talk) 14:36, 16 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This goes beyond the scope of the case as filed and is fairly clearly paid editing.
 * The following accounts are ✅:
 * Blocked without tags.
 * JorgeBigfoot is ❌.
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)
 * Blocked without tags.
 * JorgeBigfoot is ❌.
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)
 * Blocked without tags.
 * JorgeBigfoot is ❌.
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)
 * Blocked without tags.
 * JorgeBigfoot is ❌.
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)
 * Blocked without tags.
 * JorgeBigfoot is ❌.
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)
 * Please determine the oldest account, move the case, and tag all the accounts.--Bbb23 (talk) 00:53, 17 September 2016 (UTC)
 * PlikoraT appears to be the oldest account. Tagging and closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 01:55, 17 September 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Spamming of healthwhoop.com (now blacklisted): [//en.wikipedia.org/w/index.php?title=Staphylococcus_aureus&diff=prev&oldid=741272377], [//en.wikipedia.org/w/index.php?title=Photodermatitis&diff=741267516&oldid=732985539], [//en.wikipedia.org/w/index.php?title=Staphylococcal_infection&diff=741270243&oldid=732197356//en.wikipedia.org/w/index.php?title=Actinic_cheilitis&diff=741273567&oldid=738804255], [//en.wikipedia.org/w/index.php?title=Trichilemmal_cyst&diff=738650733&oldid=733007846], [//en.wikipedia.org/w/index.php?title=Photodermatitis&diff=prev&oldid=741581808], [//en.wikipedia.org/w/index.php?title=Prostate_massage&diff=prev&oldid=741580839], [//en.wikipedia.org/w/index.php?title=Solifugae&diff=741310262&oldid=740383035], [//en.wikipedia.org/w/index.php?title=Lipid_profile&diff=741555490&oldid=733705920]. Given that there are other unrelated promotional edits (User:Indu11/sandbox,, Uebert Angel, TapJets) it is highly likely that these are undisclosed paid advocates. Please look for other accounts. MER-C 12:07, 29 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - To find the rest of these spammers. Thanks, GABgab 15:10, 29 September 2016 (UTC)
 * Group 1 – the following accounts are ✅ to each other:
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Group 3 – the following accounts are ✅ to each other and between and  to Groups 1 and 2:
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * Blocked all accounts without tags. The clerk can determine master(s) and tags.--Bbb23 (talk) 17:58, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)
 * The behavioral similarities are pretty compelling. At least one sock in each group has spammed the healthwhoop.com URL, and others have performed the same pointless linking. Also, there is some article overlap. Taking the technical evidence into account, I tagged group 1 as confirmed, group 2 as proven, and group 3 as suspected. Closing. GABgab 19:17, 29 September 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I think you might have missed a couple who edited articles shortly after they were created by one of the confirmed socks.
 * 
 * 
 * on the heels of article creation, interleaved with from the sockfarm
 * Probably a sock of who visited same article  and, obvious variation on same username

Another one created Delhi School of Internet Marketing ‎ which was then expanded and referenced by the sockfarm. - Brianhe (talk) 14:32, 30 September 2016 (UTC)

Note that this sockfarm and have both been using the pseudosource The Indian Economist for promotion of Indian topics. Chints247 used the source here and this sockfarm used it in Delhi_School_of_Internet_Marketing here (I think--a now deleted revision). Brianhe (talk) 17:15, 30 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Amjithambro2511 is.
 * WriterNeetin is but.
 * The remainder of the accounts are ❌ to each other and this master.--Bbb23 (talk) 17:29, 30 September 2016 (UTC)
 * Marking as closed. Mkdw talk 22:33, 16 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

SPA editing another sock's spam page agt x  20:03, 30 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Added SPA on Leslie Glass, closely related to sockfarm created article Reach Out Recovery. - Brianhe (talk) 09:34, 1 October 2016 (UTC)
 * Jennifer.marko felt the need to contest the speedy deletion of TapJets at Talk:TapJets. MER-C 12:35, 1 October 2016 (UTC)
 * Just like contested Leslie Glass PROD... Brianhe (talk) 03:27, 2 October 2016 (UTC)
 * Added WoukerLuke, Reikerdrone (Draft:XXL Box compare to Special:Undelete/XXL Box); JasonReimen (Draft:Mobile Pro compare to Special:Undelete/Mobile Pro); RmpleDusseldorf . MER-C 08:19, 2 October 2016 (UTC)
 * Added Justinmark who previously created DJ Sian that was later recreated by one of the recently blocked accounts. SmartSE (talk) 09:44, 4 October 2016 (UTC)
 * And Simon Mugava who recreated Uebert Angel. SmartSE (talk) 19:38, 13 October 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Added another SPA. GABgab 03:09, 1 October 2016 (UTC)


 * WoukerLuke and Reikerdrone are . Please do not list accounts that have not edited in months.
 * The following accounts are ✅:
 * The following accounts are ✅ to each other and ❌ to anyone else:
 * The remaining accounts are ❌ to each other and the master.
 * I've blocked and tagged the accounts that are confirmed to the master and blocked the other confirmed accounts without tags.--Bbb23 (talk) 20:43, 13 October 2016 (UTC)
 * Marking as closed. Mkdw talk 22:33, 16 October 2016 (UTC)
 * The following accounts are ✅ to each other and ❌ to anyone else:
 * The remaining accounts are ❌ to each other and the master.
 * I've blocked and tagged the accounts that are confirmed to the master and blocked the other confirmed accounts without tags.--Bbb23 (talk) 20:43, 13 October 2016 (UTC)
 * Marking as closed. Mkdw talk 22:33, 16 October 2016 (UTC)
 * The remaining accounts are ❌ to each other and the master.
 * I've blocked and tagged the accounts that are confirmed to the master and blocked the other confirmed accounts without tags.--Bbb23 (talk) 20:43, 13 October 2016 (UTC)
 * Marking as closed. Mkdw talk 22:33, 16 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Firsttakepr uploaded an image including a spamlink. After the link was removed Km111 restored it

Firsttakepr uploaded an image including a spamlink. After the link was removed Km111 restored it

Firsttakepr uploaded an image including a spamlink. After the link was removed Km111 restored it

Both Km111 and Firsttakepr linkspammed coachtube 

Both Km111 Waverspun30  created similar articles for Raising the Bar (event) duffbeerforme (talk) 04:30, 14 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - per provided evidence.  Vanjagenije  (talk)  00:20, 15 December 2016 (UTC)
 * Group 1 – the following accounts are ✅:
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)
 * Group 2 – the following accounts are ✅ to each other and to Group 1:
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 01:48, 15 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

SPI has three parts. Part 1 is since the last SPI
 * JessieRupo has copypasted User:RanturJason/sandbox/Smartbox into Smartbox. . User:RanturJason is a sock from last SPI. Then patrolled by UnkleBrunt.

Part 2. Duck which was not part of the last SPI
 * AndrewKrushk created Draft:StyleWe which was published by Elsefter dayi at StyleWE to separate it from deleted version at StyleWe
 * Reaprtho created Fattitude from Draft:Fattitude, created by PlikoraT. This page was patrolled by User:MontTazlo, an Orangemoody sock.

Part 3. Based on Blocked sock Doosedouyrs
 * Doosedouyrs patrolled Jill Nulty, Smartbox (above), Phekoo, Michael McGuinness, All Public Art, AME Medical Group, Inc. - Urgent Care, 911 Restoration Inc.
 * These each have short term throwaway accounts editing them.

Phekoo
 * HaiderPoert
 * BrettKrent User:BrettKrent/sandbox/Phekoo

Jill Nulty
 * RemanoJaeinkaro
 * NuemantoKrinto
 * FikarouKrump
 * KrumpourK    already blocked sock

Michael McGuinness
 * Umert Krakko
 * UnkleBrunt

IEDM
 * JhintoBrunt
 * UnkleBrunt
 * DrnukqwPrunt

AME Medical Group, Inc. - Urgent Care
 * RobbyNeuken

911 Restoration
 * 911 Restoration Inc.
 * 911Restoration
 * Draft:911 Restoration
 * Draft:Idan Shpizear

911 Restoration Inc.
 * Milestonemiri
 * Ountro Akura
 * Usamanau
 * Doosedouyrs

Draft:911 Restoration
 * Hydrophobic4278
 * ReumerKrantou

Draft:Idan Shpizear
 * NuekamSultan
 * UnkronKlusk

Older version of 911 Restoration
 * MilestoneSeoInfo
 * Keith Santos

Note two account names suggest a connection with Milestone SEO who have 911 Restoration as a client. 

All Public Art was created by another promotional sockfarm Sockpuppet investigations/DrankJetter after being drafted by anothe SPA. Account naming by both farms suggests they are the same.

Part 4. Other

Matt Lange
 * RinkuKalus
 * UnkronKlusk

Jasper Sanks
 * JosephKrump
 * DreamKron
 * UnkronKlusk

A lot of draft by one, create by another behaviour

Amongst other name similarities The usernames have an overabundence of Ks and lots of other overlaps. ramp rump rant runt. kora karo
 * FikarouKrump FikarouKrump ReumerKrantou RanturJason BruntJekker JhintoBrunt UnkleBrunt DrnukqwPrunt
 * PlikoraT RemanoJaeinkaro

All but Part 1 are probably stale. Might not be much use doing much with others, just documenting. duffbeerforme (talk) 10:57, 19 December 2016 (UTC)

Additional non stale accounts dedicated to the refspamming of Carsmind. Carsmind has recently been used as a reference in 11 articles and is only used in those 11. One instance is by a blocked sock.
 * BMjhantur

The 9 other were introduced by SPAs whose sole edit (wit a few minor exceptions) has been to add this ref.
 * RonCarmichael
 * RonnyJason
 * ErkelMason
 * DrantJake
 * JacobKrummer
 * ReutekKross
 * ReiKerLoc
 * JasonTrenk
 * 137.59.164.231

The last can't be seen due to the removal of unrelated copyvio but was most likely introduced by another samey SPA.
 * Nissan GT-R -

There will be other connected accounts such as KunterBunter and RonaldClint. duffbeerforme (talk) 06:58, 20 December 2016 (UTC)

Forgot to add Tracie Martyn salon. Drafted by blocked sock User:KabalRai, puclished by RunterBrusk and patrolled by Usamanau. (fits into part one)

Add others to the carsmind spammers. One was reverted, the other is new (since last edit here).
 * RuntKlemp
 * JasonNorton . duffbeerforme (talk) 07:19, 21 December 2016 (UTC)


 * Another stale one. Account naming matches. Created Michael McGuinness which was quickly followed up by Doosedouyrs (blocked sock) and UnkleBrunt. (Mentioned above but not listed). duffbeerforme (talk) 03:03, 4 January 2017 (UTC)
 * Another stale one. Account naming matches. Created Michael McGuinness which was quickly followed up by Doosedouyrs (blocked sock) and UnkleBrunt. (Mentioned above but not listed). duffbeerforme (talk) 03:03, 4 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Wow. This will take me some time to review, but I just want to note that the following accounts are not :
 * GABgab 16:56, 29 December 2016 (UTC)
 * - OK. CU will be able to shed some light on this. This is a request to check the above non- accounts against one another and past socks. I also see the prominent link to, and I would be interested to check the Part 2 socks against OM except for the fact that Reaprtho is stale. Similarities among the socks include name conventions, page overlaps, and linkspamming. Thanks very much for your time and help, GABgab 17:56, 29 December 2016 (UTC)
 * As a bonus incentive, I'll throw in a "CU barnstar of excellence" for whoever is kind and persistent enough to sift through this puzzle. GABgab 23:14, 29 December 2016 (UTC)
 * . You're bribing me with a barnstar? What happened to good old-fashioned money? This may take some time.--Bbb23 (talk) 01:01, 30 December 2016 (UTC)
 * Call me naive, but I'm not sure if institutionalized bribery is an entirely positive development for SPI. Maybe we should have an RFC on that. GABgab 01:19, 30 December 2016 (UTC)
 * It's not "institutionalized". Just you transferring money to my offshore account. It's not even a crime. You're paying me to do a service. Beats what the Foundation pays me. I just hope you're wealthy enough to afford me.--Bbb23 (talk) 02:09, 30 December 2016 (UTC)
 * GABgab 16:56, 29 December 2016 (UTC)
 * - OK. CU will be able to shed some light on this. This is a request to check the above non- accounts against one another and past socks. I also see the prominent link to, and I would be interested to check the Part 2 socks against OM except for the fact that Reaprtho is stale. Similarities among the socks include name conventions, page overlaps, and linkspamming. Thanks very much for your time and help, GABgab 17:56, 29 December 2016 (UTC)
 * As a bonus incentive, I'll throw in a "CU barnstar of excellence" for whoever is kind and persistent enough to sift through this puzzle. GABgab 23:14, 29 December 2016 (UTC)
 * . You're bribing me with a barnstar? What happened to good old-fashioned money? This may take some time.--Bbb23 (talk) 01:01, 30 December 2016 (UTC)
 * Call me naive, but I'm not sure if institutionalized bribery is an entirely positive development for SPI. Maybe we should have an RFC on that. GABgab 01:19, 30 December 2016 (UTC)
 * It's not "institutionalized". Just you transferring money to my offshore account. It's not even a crime. You're paying me to do a service. Beats what the Foundation pays me. I just hope you're wealthy enough to afford me.--Bbb23 (talk) 02:09, 30 December 2016 (UTC)
 * GABgab 16:56, 29 December 2016 (UTC)
 * - OK. CU will be able to shed some light on this. This is a request to check the above non- accounts against one another and past socks. I also see the prominent link to, and I would be interested to check the Part 2 socks against OM except for the fact that Reaprtho is stale. Similarities among the socks include name conventions, page overlaps, and linkspamming. Thanks very much for your time and help, GABgab 17:56, 29 December 2016 (UTC)
 * As a bonus incentive, I'll throw in a "CU barnstar of excellence" for whoever is kind and persistent enough to sift through this puzzle. GABgab 23:14, 29 December 2016 (UTC)
 * . You're bribing me with a barnstar? What happened to good old-fashioned money? This may take some time.--Bbb23 (talk) 01:01, 30 December 2016 (UTC)
 * Call me naive, but I'm not sure if institutionalized bribery is an entirely positive development for SPI. Maybe we should have an RFC on that. GABgab 01:19, 30 December 2016 (UTC)
 * It's not "institutionalized". Just you transferring money to my offshore account. It's not even a crime. You're paying me to do a service. Beats what the Foundation pays me. I just hope you're wealthy enough to afford me.--Bbb23 (talk) 02:09, 30 December 2016 (UTC)
 * Call me naive, but I'm not sure if institutionalized bribery is an entirely positive development for SPI. Maybe we should have an RFC on that. GABgab 01:19, 30 December 2016 (UTC)
 * It's not "institutionalized". Just you transferring money to my offshore account. It's not even a crime. You're paying me to do a service. Beats what the Foundation pays me. I just hope you're wealthy enough to afford me.--Bbb23 (talk) 02:09, 30 December 2016 (UTC)


 * There are some technical wrinkles that are freqeuent across the list of accounts (and the new accounts below). Some are using proxy servers, but others are using legitimate ISPs but from locations that don't match this master. For the most part, though, I am discounting the location mismatch, partly because the other technical evidence is consistent and partly because some accounts use both the mismatched location and a matched location. I am labeling these accounts as confirmed. I also don't know if it's been pointed out above, but many of the userpages of these socks are identical.
 * The list of non-stale socks are all ✅ except the following accounts are only :
 * These accounts are also ✅:
 * is ..
 * DishaangJokab is older than the master. I don't think it's worth changing the master.
 * I've blocked and tagged all the confirmed accounts.--Bbb23 (talk) 18:00, 30 December 2016 (UTC)
 * This master and socks do not appear to be related to .--Bbb23 (talk) 18:10, 30 December 2016 (UTC)
 * is ..
 * DishaangJokab is older than the master. I don't think it's worth changing the master.
 * I've blocked and tagged all the confirmed accounts.--Bbb23 (talk) 18:00, 30 December 2016 (UTC)
 * This master and socks do not appear to be related to .--Bbb23 (talk) 18:10, 30 December 2016 (UTC)
 * is ..
 * DishaangJokab is older than the master. I don't think it's worth changing the master.
 * I've blocked and tagged all the confirmed accounts.--Bbb23 (talk) 18:00, 30 December 2016 (UTC)
 * This master and socks do not appear to be related to .--Bbb23 (talk) 18:10, 30 December 2016 (UTC)
 * I've blocked and tagged all the confirmed accounts.--Bbb23 (talk) 18:00, 30 December 2016 (UTC)
 * This master and socks do not appear to be related to .--Bbb23 (talk) 18:10, 30 December 2016 (UTC)


 * okay, buckle your seatbelts. I've been looking at this off and on for a few days, and I think I've got this worked out. There are several related and unrelated groups here.
 * Group 1 includes the oldest account,, which is already blocked. Milestone SEO and 911 Restoration are run by the same person, and indeed accounts related to Milestone have been pushing to have 911 Restoration's article in mainspace for five years, and have made no COI disclosure that I can find. (Edit: Milestonemiri disclosed on 's talk page. Ivanvector (Talk/Edits) 18:12, 3 January 2017 (UTC) ) I believe that these accounts clearly related to Milestone are a separate group from the other socks here, or less likely may be "good hand" accounts:
 * Group 2 is just this one account which appears that it might be related to a different PR firm, but hasn't done much of anything:
 * Group 3 are less obvious accounts related to the creations at StyleWe, StyleWE and Draft:StyleWe. The deleted article was created by socks in the larger farm here, then the extant pages were recreated by older sleeper accounts (including the oldest account not related to Milestone). StyleWE is a client of Dakota Digital PR.
 * Group 4 are the carsmind spammers, who as far as I can tell have done nothing else. Some of these are also CU-confirmed from above:
 * Group 5 includes the rest of the accounts named here. These accounts are behaving similarly to how I understand the Orangemoody farm operates: some identify declined drafts, AfC declines and deleted articles, polish them and move them to mainspace (sometimes by cutting and pasting), while others in this group go around "patrolling" the articles once moved, and it's noteworthy that several of the affected articles are about artists and performers. There is even one (Highedit) who appear to be removing and pushing for deletion of certain articles, another Orangemoody behaviour. There are some broken histories due either to cut-and-paste moves or multiple PR firms receiving press releases (i.e. Fattitude vs. Draft:Fattitude, All Public Art vs. Draft:All Public Art) that will need to be repaired. What's odd is that this group also created Draft:Idan Shpizear, whose subject is Milestone/911's CEO, but I do still think that that group is separate. Also adding these two which were reported in a different case and show the same pattern:
 * I also believe that some of the accounts that are CU-confirmed to DrankJetter also exhibit this same behaviour, such as (not an exhaustive list):
 * - created Expatriate Healthcare
 * - patrolled that page but also created Mobile Pro
 * - patrolled Mobile Pro and created XXL Box, which was patrolled by DrankJetter
 * My conclusions are that group 1 is an unrelated SEO firm operating in good faith (with respect to sockpuppetry, at least) and group 2 can't be definitively connected. Group 5 is the main group which includes the behaviour of accounts from the previous investigation here and the archive at DrankJetter. Group 3 is related to the main group based on behaviour, and group 4 is related due to earlier technical evidence. I believe that this case and DrankJetter should be merged; is the oldest of the related accounts. I'm going to do a bunch of blocking here, but I am placing this  so I can confer with clerks more familiar with Orangemoody to see what tagging and merging needs to be done here. Ivanvector (Talk/Edits) 16:11, 2 January 2017 (UTC)
 * Closing instead, I think I've done everything I can do here. Ivanvector (Talk/Edits) 03:33, 8 January 2017 (UTC)
 * Group 5 includes the rest of the accounts named here. These accounts are behaving similarly to how I understand the Orangemoody farm operates: some identify declined drafts, AfC declines and deleted articles, polish them and move them to mainspace (sometimes by cutting and pasting), while others in this group go around "patrolling" the articles once moved, and it's noteworthy that several of the affected articles are about artists and performers. There is even one (Highedit) who appear to be removing and pushing for deletion of certain articles, another Orangemoody behaviour. There are some broken histories due either to cut-and-paste moves or multiple PR firms receiving press releases (i.e. Fattitude vs. Draft:Fattitude, All Public Art vs. Draft:All Public Art) that will need to be repaired. What's odd is that this group also created Draft:Idan Shpizear, whose subject is Milestone/911's CEO, but I do still think that that group is separate. Also adding these two which were reported in a different case and show the same pattern:
 * I also believe that some of the accounts that are CU-confirmed to DrankJetter also exhibit this same behaviour, such as (not an exhaustive list):
 * - created Expatriate Healthcare
 * - patrolled that page but also created Mobile Pro
 * - patrolled Mobile Pro and created XXL Box, which was patrolled by DrankJetter
 * My conclusions are that group 1 is an unrelated SEO firm operating in good faith (with respect to sockpuppetry, at least) and group 2 can't be definitively connected. Group 5 is the main group which includes the behaviour of accounts from the previous investigation here and the archive at DrankJetter. Group 3 is related to the main group based on behaviour, and group 4 is related due to earlier technical evidence. I believe that this case and DrankJetter should be merged; is the oldest of the related accounts. I'm going to do a bunch of blocking here, but I am placing this  so I can confer with clerks more familiar with Orangemoody to see what tagging and merging needs to be done here. Ivanvector (Talk/Edits) 16:11, 2 January 2017 (UTC)
 * Closing instead, I think I've done everything I can do here. Ivanvector (Talk/Edits) 03:33, 8 January 2017 (UTC)
 * Group 5 includes the rest of the accounts named here. These accounts are behaving similarly to how I understand the Orangemoody farm operates: some identify declined drafts, AfC declines and deleted articles, polish them and move them to mainspace (sometimes by cutting and pasting), while others in this group go around "patrolling" the articles once moved, and it's noteworthy that several of the affected articles are about artists and performers. There is even one (Highedit) who appear to be removing and pushing for deletion of certain articles, another Orangemoody behaviour. There are some broken histories due either to cut-and-paste moves or multiple PR firms receiving press releases (i.e. Fattitude vs. Draft:Fattitude, All Public Art vs. Draft:All Public Art) that will need to be repaired. What's odd is that this group also created Draft:Idan Shpizear, whose subject is Milestone/911's CEO, but I do still think that that group is separate. Also adding these two which were reported in a different case and show the same pattern:
 * I also believe that some of the accounts that are CU-confirmed to DrankJetter also exhibit this same behaviour, such as (not an exhaustive list):
 * - created Expatriate Healthcare
 * - patrolled that page but also created Mobile Pro
 * - patrolled Mobile Pro and created XXL Box, which was patrolled by DrankJetter
 * My conclusions are that group 1 is an unrelated SEO firm operating in good faith (with respect to sockpuppetry, at least) and group 2 can't be definitively connected. Group 5 is the main group which includes the behaviour of accounts from the previous investigation here and the archive at DrankJetter. Group 3 is related to the main group based on behaviour, and group 4 is related due to earlier technical evidence. I believe that this case and DrankJetter should be merged; is the oldest of the related accounts. I'm going to do a bunch of blocking here, but I am placing this  so I can confer with clerks more familiar with Orangemoody to see what tagging and merging needs to be done here. Ivanvector (Talk/Edits) 16:11, 2 January 2017 (UTC)
 * Closing instead, I think I've done everything I can do here. Ivanvector (Talk/Edits) 03:33, 8 January 2017 (UTC)
 * - patrolled Mobile Pro and created XXL Box, which was patrolled by DrankJetter
 * My conclusions are that group 1 is an unrelated SEO firm operating in good faith (with respect to sockpuppetry, at least) and group 2 can't be definitively connected. Group 5 is the main group which includes the behaviour of accounts from the previous investigation here and the archive at DrankJetter. Group 3 is related to the main group based on behaviour, and group 4 is related due to earlier technical evidence. I believe that this case and DrankJetter should be merged; is the oldest of the related accounts. I'm going to do a bunch of blocking here, but I am placing this  so I can confer with clerks more familiar with Orangemoody to see what tagging and merging needs to be done here. Ivanvector (Talk/Edits) 16:11, 2 January 2017 (UTC)
 * Closing instead, I think I've done everything I can do here. Ivanvector (Talk/Edits) 03:33, 8 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

JackKramer42 created Draft:Kosta Peric, which is nearly identical to Special:Undelete/Kosta Peric by User:RonaldClint.

RaultKrump and JackKramer42 have very similar userspace edits to some previous socks, followed by the creation of a promotional "article". JoshRagnor created Draft:Lincoln Square, London, which is nearly identical to Lincoln Square, London by RaultKrump. RonaldJackson created Draft:Adrok, which is very similar to Adrok Group by RaultKrump. MER-C 07:58, 2 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I have blocked all of these accounts (without tags, pending above) for matching the behaviour in previous investigations. Endorsing CU for sleepers, and please also check against Sockpuppet investigations/DrankJetter if possible. Thanks. Ivanvector (Talk/Edits) 16:24, 2 January 2017 (UTC)
 * I've added two more accounts to check, one which did a cut-and-paste move of Draft:Adrok to Adrok Group, and the other which added an orphan tag to the article. Ivanvector (Talk/Edits) 16:45, 2 January 2017 (UTC)
 * I've added two more just now which are stale (reported by above) and which are now blocked. Krumploker created Draft:Michael McGuinness and Umert Krakko did a cut-and-paste move to Michael McGuinness, at which point it was worked on by other confirmed socks. Not tagging, again, pending follow-up above. Ivanvector (Talk/Edits) 14:11, 4 January 2017 (UTC)


 * ✅ - Group 1:


 * is to that group 1 while ✅ to the following:


 * Krumploker is . -- Amanda  (aka DQ) 02:19, 9 January 2017 (UTC)
 * Thanks, those two are now blocked, along with that I dug up from mining those accounts' contribs. I've seen enough to be convinced that PlikoraT and DrankJetter are the same sockfarm: both cases have confirmed accounts that have spambombed links to various websites, as well as having checkuser-confirmed accounts doing the cut-and-paste draft moves and orphan tagging as I noted above (DrankJetter has  and, for example). These cases will need to be merged but I don't have time to do it at the moment; any other admin clerk may do so if I don't get back to it first, so I'm switching this to admin status. The oldest account on this page is  but I have not checked all of the accounts in the other case, and at any rate there may be older accounts not yet discovered and so trying to rename to the oldest account might be a moot point anyway. Ivanvector (Talk/Edits) 13:59, 9 January 2017 (UTC)
 * Merge done, hopefully I didn't make too much of a mess of it. On re-checking I have my doubts about Elserfter dayi and Andrewkrushkk from the case above, so I am leaving the merged case under PlikoraT. It's going to take me some time to work out the tagging so I'm putting this back on hold. Ivanvector (Talk/Edits) 13:55, 11 January 2017 (UTC)
 * Ok, all done here. Ivanvector (Talk/Edits) 23:33, 14 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Recreated previously created by RonKarlmichal. SmartSE (talk) 12:03, 21 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I have added Efilickaer, which recreated All Public Art, a page previously created by this sockfarm. Both accounts here waited out autoconfirmation and then recreated previous articles verbatim, and the way this farm operates there are likely numerous sleepers already. . Please also check against Sockpuppet investigations/Reutrolantri, which I strongly suspect is the same user. Ivanvector (Talk/Edits) 12:20, 21 April 2017 (UTC)
 * The following are ✅ matches to each other:
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)
 * But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)


 * Case closed.  Vanjagenije  (talk)  08:38, 23 April 2017 (UTC)