Wikipedia:Sockpuppet investigations/CharmenderDeol/Archive
CharmenderDeol
- CharmenderDeol (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
04 July 2021
Suspected sockpuppets
- Bridgerton96 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Yaywoh (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Skybluepants24 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- TheMinionQueen (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- MonkeyKong12 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Hokuspokus25 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Noisy Neighbor (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- ImmaDie (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- YKZ-m (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Pro-forma, see below. Blablubbs (talk) 12:36, 4 July 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Confirmed and blocked at Wikipedia:Sockpuppet investigations/Yoodaba (perma), Tagged, closing. Blablubbs (talk) 12:38, 4 July 2021 (UTC)
02 August 2021
Suspected sockpuppets
- Yoodaba (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: originally filed under this user)
- FMlives4eva (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Recreated Draft:Saphyte, previously created by two socks see Special:Undelete/Draft:Saphyte. More crossover at Michael_K._Obeng e.g. [1] [2] [3] and at Rachid_Yazami e.g. [4] [5] [6] SmartSE (talk) 17:35, 2 August 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
This probably belongs to Wikipedia:Sockpuppet investigations/CharmenderDeol, which was split out from a previous Yoodaba report. MarioGom (talk) 17:53, 2 August 2021 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
- Concur with Mario that this is more likely to be CharmenderDeol. Moved here from WP:Sockpuppet investigations/Yoodaba, Clerk endorsed for confirmation and sleeper check. --Blablubbs (talk) 18:33, 2 August 2021 (UTC)
- In progress - - TheresNoTime 😺 21:13, 2 August 2021 (UTC)
- It's fairly Likely when compared to MonkeyKong12 and YKZ-m etc, but not enough for me to block on technical evidence alone. Behavioural evidence needs evaluation - TheresNoTime 😺 21:23, 2 August 2021 (UTC)
- Behaviour seals the deal. Awaiting administrative action - please block the sock indefinitely. --Blablubbs (talk) 12:57, 3 August 2021 (UTC)
- Blocked and tagged. GeneralNotability (talk) 01:33, 4 August 2021 (UTC)
18 August 2021
Suspected sockpuppets
- Pinkypanther1234 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Chromestorm (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Dupetube12345 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
- Pinkypanther1234: Editor Interaction Analyser (Pinkypanther1234, FMlives4eva, Noisy Neighbor, Skybluepants24, Yaywoh, Dupetube12345), especially Michael K. Obeng.
- Chromestorm: Editor Interaction Analyser (Chromestorm, Noisy Neighbor, TheMinionQueen)
- Dupetube12345: Editor Interaction Analyser (Dupetube12345, Yaywoh, Pinkypanther1234)
See also timings in consolidated contributions. Also compare edit summaries. Ping me for some further beans if needed. MarioGom (talk) 14:59, 18 August 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress - ~TNT (she/they • talk) 22:22, 18 August 2021 (UTC)
- Chromestorm and Pinkypanther1234 are Likely to each other, and Likely to previously blocked sock FMlives4eva.
- Dupetube12345 is Possible to Chromestorm and Pinkypanther1234, and therefore only Possible to previously blocked sock FMlives4eva.
- Behavioural evidence needs evaluation for tagging. No blocks made ~TNT (she/they • talk) 22:28, 18 August 2021 (UTC)
- Blocked and tagged Pinkypanther and Chromestorm. Evaluating Dupetube. GeneralNotability (talk) 14:27, 22 August 2021 (UTC)
- Dupetube is shouting UPE and shares some quirks with the rest of this group, but I could see them being a different UPE as well. Blocked and tagged, but this is a low-confidence tagging. GeneralNotability (talk) 14:31, 22 August 2021 (UTC)
25 August 2021
Suspected sockpuppets
- Discologist (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- PinkedInPumpkin (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Iamnumber55 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Alootikki96 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Both accounts with Mon-Fri editing and similar behavioral patterns. See overlaps:
- Editor Interaction Analyser (Discologist, Yaywoh, Skybluepants24, ImmaDie, Bridgerton96)
- Editor Interaction Analyser (PinkedInPumpkin, Pinkypanther1234, FMlives4eva, Yaywoh, Skybluepants24, Noisy Neighbor)
Also Discologist created Draft:ĐÀO Minh Quân (permalink) using File:DAO_Minh_Quan.jpg, uploaded by Skybluepants24. MarioGom (talk) 16:42, 25 August 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- I was coming here myself to report PinkedInPumpkin. They created Draft:Jermaine Melvin and continued editing Draft:Rubba Ducks which both smell of UPE. SmartSE (talk) 15:05, 26 August 2021 (UTC)
- Added Alootikki96 per crossover with Iamnumber55 here and here. Not active here, but also see evidence of crossover between these accounts via Commons:Special:Contributions/Nirmaln404. SmartSE (talk) 13:55, 6 September 2021 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
This case is being reviewed by Spicy as part of the clerk training process. Please allow him to process the entire case without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.
- I've blocked and tagged PinkedInPumpkin because I noticed them outside of this SPI. My not addressing the other suspected socks has nothing to do with the merits of this filing. Bbb23 (talk) 15:28, 6 September 2021 (UTC)
- CheckUser requested and endorsed by clerk for confirmation. GeneralNotability (talk) 00:03, 19 September 2021 (UTC)
- In progress - ~TNT (she/they • talk) 13:44, 19 September 2021 (UTC)
- TL;DR Behavioural evidence needs evaluation
- Account groups:
- Group 1: Discologist and Denverdiscog are Confirmed to each other.
- Group 2: PinkedInPumpkin and JollyDolly12345 are Confirmed to each other.
- Group 3: Alootikki96 and Nirmaln404 are Confirmed to each other.
- Iamnumber55 is very Likely to all accounts in Groups 1 to 3 (by range, geoloc & data).
- Iamnumber55 and Groups 1 to 3 are all Possible to CharmenderDeol, but we can't be sure as the master's last login was from a proxy.
- Compared to previous socks, these accounts are only Possible (again, due to evasion).
- I have made no blocks as the behavioural evidence needs evaluation in absence of reliable technical data ~TNT (she/they • talk) 14:10, 19 September 2021 (UTC)
- Based on the overlap on obscure spammy pages, CU results, and a few other behavioural similarities that I'd rather not spell out here per BEANS, I'm very confident that the four reported accounts are related to each other and the master. The three accounts found by CU - Denverdiscog (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), JollyDolly12345 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), and Nirmaln404 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) - have no contributions on enwiki. However, they do have contributions to Commons, and these show that they are connected to the CharmenderDeol sockfarm.Denverdiscog uploaded c:File:Luis_Marti.jpg, which was added to an article by Discologist [7]. Nirmaln404 uploaded images relating to Draft:Uplift11 and Draft:Rubba Ducks, which have been extensively edited by CharmenderDeol sockpuppets. JollyDolly12345 uploaded c:File:AQUILES_ESTE.jpg, which is in use on a a simplewiki article created by SabrinaMaze (an account which is now stale on enwiki); and which exists on enwiki as Draft:Aquiles Este, created by Blackiepanther1234 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). Blackiepanther1234 shows all the usual behavioural tells of this farm and considering that a previously blocked sock was named Pinkypanther1234, Looks like a duck to me. Awaiting administrative action - Please block the accounts listed in the filing and found by CU, plus Blackiepanther1234. Thanks, Spicy (talk) 08:13, 25 September 2021 (UTC)
- Blocked but awaiting tags, I'll go delete some stuff. Back to you, Spicy. --Blablubbs (talk) 08:20, 25 September 2021 (UTC)
- Thanks. Tagged the untagged accounts as suspected to the master, owing to the messiness of the CU data. Global lock(s) requested. Closing. Spicy (talk) 08:39, 25 September 2021 (UTC)
13 October 2021
Suspected sockpuppets
- Hammerhead.thor (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Same quirks as previous accounts and overlap at Draft:Michael Ede, so very likely the same person as Iamnumber55 and Alootikki96. MarioGom (talk) 22:52, 13 October 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress GeneralNotability (talk) 00:48, 15 October 2021 (UTC)
- Hammerhead.thor is Likely to Alootikki96 and Iamnumber55 from the archive.
- In addition:
- SilentMonolith (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is Confirmed to Hammerhead.thor
- And the following accounts are Likely or better to each other and to CharmanderDeol, technical evidence suggests that this is more than one person:
- RachelBrian (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Editorinprocess2021 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Headoverheelsmexican (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Brunoo2010 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- RachelFox2.0 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Purplehazelnuts (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Strawberryfrozenyogurt (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- FloatingKoala (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (see their spam blacklist log)
- BettytheBeth (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Antipaidediting (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (ironically)
- Davidkasper245 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- There are also failed login attempts to The Cosmic Beaver (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), who is Stale. GeneralNotability (talk) 01:43, 15 October 2021 (UTC)
- Also: Hillster (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (unsurprising, given the declarations on their, Bettythebeth, and The Cosmic Beaver's userpages)
Between the technical evidence and the behavior of these accounts, I find it very likely that this is one or more people in some kind of UPE farm - and I note that Bettythebeth, Hillster, and The Cosmic Beaver's userpages have paid editing disclosures that include their employers (which is nice, but if other folks from their firm are editing without disclosure...that's not acceptable). Blocked and tagged the lot, Global lock(s) requested. GeneralNotability (talk) 01:52, 15 October 2021 (UTC)
15 October 2021
Suspected sockpuppets
- Thecooleditor96 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Pro forma, found while performing followup checks. GeneralNotability (talk) 18:26, 15 October 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Technical evidence puts Thecooleditor96 as Likely to Strawberryfrozenyogurt (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). Between that and behavior, I'm convinced. Blocked and tagged, Global lock(s) requested. GeneralNotability (talk) 18:27, 15 October 2021 (UTC)
17 November 2021
Suspected sockpuppets
- Error404forever (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Summerlove21 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Same editing pattern, large edit summary overlap (e.g. [8][9][10]), consistent timecards. MarioGom (talk) 21:56, 17 November 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
This case is being reviewed by Spicy as part of the clerk training process. Please allow him to process the entire case without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.
- CheckUser requested and endorsed by clerk - Error404forever's edit summary patterns and general MO look very similar to what I've seen from this group before. I'm slightly less confident about Summerlove21, but the diffs presented here, plus overlap with previous accounts on [12], are enough to make me suspicious. Please compare to previous accounts and check for sleepers, as sleeper checks have proven fruitful in the past. Thanks, Spicy (talk) 22:33, 17 November 2021 (UTC)
- In progress - -- RoySmith (talk) 01:28, 18 November 2021 (UTC)
- I compared Error404forever and Summerlove21 to an assortment of proven socks in the archives, plus some data in cuwiki. The IPs (and geolocations) differ, and there's no indication of proxy use from our proxy-detection tools. On the other hand, the user agents are such a close match, I'm tempted to be skeptical about the IPs. So, I think Possible with a side-order of Inconclusive Behavioural evidence needs evaluation. -- RoySmith (talk) 01:54, 18 November 2021 (UTC)
- Looking at the totality of the behaviour and the CU results, I'm convinced these accounts are related. Awaiting administrative action - please indef Error404forever and Summerlove21. Thanks, Spicy (talk) 01:39, 19 November 2021 (UTC)
- (nb. non-CU action) Requested actions completed, closing ~TheresNoTime (to explain!) 03:24, 19 November 2021 (UTC)
17 December 2021
Suspected sockpuppets
- Forthemessiah (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Checked per history at Nick Fowler: [13] [14] [15]. Confirmed by CheckUser. – bradv🍁 17:30, 17 December 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
11 February 2022
Suspected sockpuppets
- Illsavetheworld (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: original case name)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
Draft:John William Connor was created by Alootikki96. The subject was notable, so I created Jack Connor (physicist). Illsavetheworld has now added content directly from that deleted draft to the article e.g. Connor developed an interest in elementary particle work, including the bootstrap model of elementary particles and new ideas about quarks
. Googling that phrase doesn't bring up any mirrors, so it seems unlikely they've stumbled across it. @MarioGom and Theroadislong: have also both raised COI/UPE concerns with them about their other creations. SmartSE (talk) 15:20, 11 February 2022 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress - Girth Summit (blether) 15:33, 11 February 2022 (UTC)
- Confirmed, along with Cashewsandalmonds21, Enteryourusernamein123, Letmebeforever, Stevestan96 and Excalibur1995. Blocking and tagging. Girth Summit (blether) 15:39, 11 February 2022 (UTC)
- For future reference:
- Enteryourusernamein123 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Letmebeforever (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Cashewsandalmonds21 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Stevestan96 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Excalibur1995 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) --Blablubbs (talk) 15:42, 11 February 2022 (UTC)
- For future reference:
- Found Feather2121 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) too. Blocked and tagged. --Blablubbs (talk) 15:52, 11 February 2022 (UTC)
- Lavenderpeople (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) too. --Blablubbs (talk) 15:56, 11 February 2022 (UTC)
- Thanks for the speedy service! I've deleted everything they've created per G5. SmartSE (talk) 15:59, 11 February 2022 (UTC)
- Jam Arjan, it would need to be either two people, or one person switching back and forth between two computers. I'm wondering if this is a case of closely coordinated people, potentially in different locations. Can you explain how you concluded that these were socks? I'll ping TheresNoTime as well, who has blocked some of these socks before and may have some insight. Cheers Girth Summit (blether) 16:44, 11 February 2022 (UTC)]
- @Girth Summit: The initial discovery was via c:File:Doug Batchelor.jpg (uploaded by Excalibur1995) and Special:Undelete/Doug Batchelor, what sealed the deal was an edit summary comparison between those two and confirmed socks, especially Illsavetheworld. I am basically dead certain this is all the same tightly knit meatfarm or individual (they've started evading recently, so I'd prefer to not get more specific than that, but I can contact you privately if you aren't seeing the same thing). --Blablubbs (talk) 16:50, 11 February 2022 (UTC)
- OK, thanks. I've just noted in the archives that TNT's action here was non-CU; it was RoySmith who investigate last time, and noticed the same disparity in the geolocations. There are some notes on CU wiki; if you want to forward me any observations in an e-mail, I might expand those notes a bit. At the moment I'm swithering about whether this really ought to be two separate cases (one for each of the IP locations), or whether it makes more sense to keep it all under one roof. Other opinions would be welcome. Girth Summit (blether) 16:56, 11 February 2022 (UTC)
- @Girth Summit: Email sent :) --Blablubbs (talk) 17:17, 11 February 2022 (UTC)
- OK, thanks. I've just noted in the archives that TNT's action here was non-CU; it was RoySmith who investigate last time, and noticed the same disparity in the geolocations. There are some notes on CU wiki; if you want to forward me any observations in an e-mail, I might expand those notes a bit. At the moment I'm swithering about whether this really ought to be two separate cases (one for each of the IP locations), or whether it makes more sense to keep it all under one roof. Other opinions would be welcome. Girth Summit (blether) 16:56, 11 February 2022 (UTC)
- @Girth Summit: The initial discovery was via c:File:Doug Batchelor.jpg (uploaded by Excalibur1995) and Special:Undelete/Doug Batchelor, what sealed the deal was an edit summary comparison between those two and confirmed socks, especially Illsavetheworld. I am basically dead certain this is all the same tightly knit meatfarm or individual (they've started evading recently, so I'd prefer to not get more specific than that, but I can contact you privately if you aren't seeing the same thing). --Blablubbs (talk) 16:50, 11 February 2022 (UTC)
- (Blocking Fossilfuel88 and Hilofilo96 without tags for now while we figure this out) Girth Summit (blether) 16:45, 11 February 2022 (UTC)
- OK, I've discussed this off-wiki with Blablubbs, and am content to keep this all under one case based on the behaviour. I will tag the remaining socks I blocked and close. Girth Summit (blether) 14:57, 13 February 2022 (UTC)
25 February 2022
Suspected sockpuppets
- Knight of CAW (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
See below --Blablubbs (talk) 15:32, 25 February 2022 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Already blocked, but filing for a sleeper check. I don't want to say too much, but even a very brief comparison to the behaviour of Hillster (talk · contribs) and BettytheBeth (talk · contribs), as well as [16][17][18] should be more than enough grounds for checking. CheckUser requested and endorsed by clerk – please look for others. --Blablubbs (talk) 15:35, 25 February 2022 (UTC)
- In progress - -- RoySmith (talk) 15:52, 25 February 2022 (UTC)
- On the technical evidence, Knight of CAW is Unrelated. There's some notes in cuwiki, and Blablubbs I'll email you with a few more details. The gist is, unless you're really, really, sure about the behavioral identification, my suggestion would be to unblock. I didn't look for sleepers. -- RoySmith (talk) 16:12, 25 February 2022 (UTC)
- Welp. Technical call notwithstanding, I am really, really, really sure. I'll leave this open in case anyone else wants to evaluate behaviour, though. --Blablubbs (talk) 16:41, 25 February 2022 (UTC)
- I don't see anybody jumping up to re-evaluate, so I'm going to close this. If Knight of CAW wants to protest their innocence, they can file an unblock request. -- RoySmith (talk) 16:02, 1 March 2022 (UTC)
02 April 2022
Suspected sockpuppets
- ElizabethWiki2001 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: original case name)
- CherylWiki007 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Both working for Wiki Creators LLC per their user pages. CherylWiki007 was created shortly after ElizabethWiki2001 block, which is unappealed so far. ElizabethWiki2001 claimed to be the only editor at the company [19]. MarioGom (talk) 11:35, 2 April 2022 (UTC)
- Note about the relation to CharmenderDeol: there seems to be a connection to the disclosed paid editors in CharmenderDeol (linked to Digitonics / Sybex Labs). I opened as a separate SPI since accounts in both cases are associated to different companies. I don't rule out that the accounts are controlled by the same person though, maybe after switching companies. MarioGom (talk) 10:06, 3 April 2022 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
wrt the CharmanderDeol linkage, does it make articles and drafts created by ElizabethWiki2001 eligible for
]Clerk, CheckUser, and/or patrolling admin comments
- Clerk assistance requested: - Apparently this should be moved to Wikipedia:Sockpuppet investigations/CharmenderDeol. Bbb23 (talk) 13:04, 2 April 2022 (UTC)
- CherylWiki is Likely to ElizabethWiki. There are a couple other accounts on the same range as CherylWiki/ElizabethWiki that I'd also call likely, but I am not sufficiently confident based on behavior to name them publicly right now. Both are Possible to CharmenderDeol - same country, similar (very common) UAs, different ISPs, inconclusive geolocation, no indication of proxy use. GeneralNotability (talk) 18:45, 6 April 2022 (UTC)
- Merged, Tagged as suspected to CD, closing. --Blablubbs (talk) 09:44, 13 May 2022 (UTC)
26 May 2022
Suspected sockpuppets
- Michael Ede (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Re-creating Draft:Michael Ede, which was created and re-created by two previous socks (BettytheBeth and SamratPaswan) Drm310 🍁 (talk) 17:50, 26 May 2022 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- CharmenderDeol et al. is essentially a UPE farm. Given the name and obvious COI edits, Michael Ede strikes me as either the subject of the article creating an autobiography, or another (newer) UPE editor. Regardless of which they are, they've now been warned and the article has been deleted as spam. I'm going to close without action at present, though if Michael Ede make spammy edits again, they should likely be blocked for that. --Jack Frost (talk) 19:05, 26 May 2022 (UTC)
18 August 2022
Suspected sockpuppets
- WforWriter (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Daniel1996Wiki (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- SalikSahmed (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
There is a lot of overlap with a past CD sock - I'm not very familiar with this group but this seems to be quite a similar pattern.
WforWriter joined shortly after JessicaBruton did and while it was before the sock was blocked and presumably didn't show up in CU, there's a lot of overlap.
Specifically, the first edit WfW makes is to Lucky Budd, which in itself isn't a huge deal, but their edit summaries are eerily similar. This edit by JB on April 14 (ve, switched) (Added Sources, Added recent information, and copyedited the article.)
and then this edit on April 18th by WfW (ve, switched) (references , new information, and copy checked for mistakes.)
Not to mention that both Jessica and WfW's accounts have a spiel on their userpage about going to NYU/being from NY and have very, very similar timecards
Then we also have Daniel1996Wiki, who's edits follow Jessicas, specifically at Kyle Bass with both WfW and JB. this edit by JB on May 11 (ve, switched) (Added Sources, copyedited the article and removed information that was not credibly cited. Edited for accuracy and notability according to the guidelines of Wikipedia.)
followed 2 days later by Daniel with this edit (ve, switched) (Added Sources, copy-edited the article and removed information that was not credibly cited. Edited for accuracy and notability according to the guidelines of Wikipedia.)
and then edits by WforW interspersed throughout these two.
JB also had this draft link on their userpage, which was again created by them and CherylWiki007 who has a nearly identical userpage to Daniel
It's also worth noting Daniel1996Wiki created Premier Rugby Sevens, which is listed here on the nearly identical userpage of a blocked CD sock as being paid.
And we also have the obvious keep vote socking at this AFD, for an article which was created by JB. PRAXIDICAE🌈 19:53, 18 August 2022 (UTC)
- I have also added SalikSahmed as Daniel and this account co-edited Shyla Murray, and they share similar edit summaries to other socks here. PRAXIDICAE🌈 19:55, 18 August 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress - -- RoySmith (talk) 18:13, 19 August 2022 (UTC)
- On the surface, none of these are related, but there's extensive proxy use, so I'd ignore the CU results and figure this one out just on behavior. -- RoySmith (talk) 18:20, 19 August 2022 (UTC)
- Behaviour looks convincing to me, especially combined with the proxy use. Blocked and tagged. Closing. --Blablubbs (talk) 18:37, 19 August 2022 (UTC)
11 November 2022
Suspected sockpuppets
- RebelliousPujol (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: originally filed under this user)
- Matzah sedar (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- MikvahAssasin (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Seemingly UPE editing pattern (autoconfirmed gaming and creation of dubious articles). MikvahAssasin created this sandbox draft about Elissa Altman. An identical article was created in mainspace by RebelliousPujol a few days later [20]. Both of these accounts share an obvious edit summary quirk. Matzah sedar has the same quirk, same UPE-ish behaviour, and their username, like MikvahAssassin's, contains Hebrew terms. Spicy (talk) 22:45, 11 November 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- CheckUser requested and endorsed by clerk - to check if this is part of a larger UPE ring. Thanks, Spicy (talk) 22:46, 11 November 2022 (UTC)
- In progress - -- RoySmith (talk) 23:24, 11 November 2022 (UTC)
- Inconclusive There is extensive proxy use by all three accounts, and the proxy usage looks more sophisticated than the typical residential "I want to watch NetFlix in a different country" kind of thing. -- RoySmith (talk) 23:41, 11 November 2022 (UTC)
- Thanks, that's not unexpected. Awaiting administrative action - please indef all 3 accounts as suspected socks of each other based on behaviour. Spicy (talk) 23:55, 11 November 2022 (UTC)
- Blocked and tagged. Closing. -- Tamzin[cetacean needed] (she|they|xe) 01:37, 12 November 2022 (UTC)
19 November 2022
Suspected sockpuppets
- RebelliousPujol (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: originally filed under this user)
- ShiraSynagogue (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- BumbleGore (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Petite Maman Marion (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Similar pattern, like the use of Hebrew terms as username, incubating drafts in sandbox and then posting on mainspace.
- Like, BumbleGore (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) worked on A.R Capetta in the sandbox (diff: [21]), posted it on mainspace (diff:[22]), and then emptied the sandbox afterwards (diff:[23]) versus .
- Compare edit summary, at Draft:Scott Adelson
*/Starting Article*/
(diff:[24]) by User:BumbleGore versus at Cory DeAn Cowley*/Starting Article/*
(diff:[25]) by MikvahAssasin (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). Another (use of "about" and use of */ /*, etc.), at A.R Capetta,about award-winning american author
, by User:BumbleGore versus at Abraham Morgentaler*/Starting Article/* about American Urologist
by Matzah sedar (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (diff:[26]).
- Compare edit summary, at Draft:Scott Adelson
- ShiraSynagogue (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), chosed a Hebrew word(s) as thier username. Edit summary match (use of "about" and mistake like uncapitalized "american",
starting article about american philosopher
at Raymond Belliotti (diff:[27]) versusabout award-winning american author
, at A.R Capetta, by User:BumbleGore. And,starting article about american philosopher
at Raymond Belliotti (diff:[28]) at Raymond Belliotti versusstarting article about a lawyer
at Robert Seiden (diff:[29]) orStarting Article
at Elissa Altman (diff:[30]).- Another usual behavior, User:ShiraSynagogue started work on their client Rohith V.S. (diff:[31]) then switched to Raymond Belliotti, incubated in sandox and then posted it on mainspace, blanked in the end (diff:[32]).
- Petite Maman Marion (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) has exclusively edited Raymond Belliotti, added a photo, used words like "updated CV" so they are definitely related (diff:[33]).
- Checkuser may help uncover their other accounts which I believe are many. I won't be surprised if they are in different countries as shown before (in fact, this will further confirm) Behavior evidence is enough already).
- Note: Based on stylometry, they are very likely part of Wikipedia:Sockpuppet_investigations/CharmenderDeol/Archive sockfarm. 31.205.13.109 (talk) 16:12, 19 November 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress - -- RoySmith (talk) 14:54, 26 November 2022 (UTC)
- This is much the same story as in 11 November 2022. There's extensive proxy use, and in some vague way the pattern is similar to what was seen before, but I really can't say anything beyond Inconclusive Behavioural evidence needs evaluation. I took a brief look at some notes we've got on CharmenderDeol. Again, other than some vague patterns about proxy use, there's nothing useful CU can say about the two cases being related. -- RoySmith (talk) 15:17, 26 November 2022 (UTC)
- About the relation to CharmenderDeol, I think it's too weak. I would advise against a merge at the moment. MarioGom (talk) 08:39, 9 December 2022 (UTC)
- Ok. Actually, it is definitely CharmenderDeol (the Wiki Creators LLC subgroup). This needs a merge to CharmenderDeol. MarioGom (talk) 19:09, 9 December 2022 (UTC)
- WP:BEANS here, so ping me if you need them. I could use a second opinion on Petite Maman Marion. MarioGom (talk) 20:10, 9 December 2022 (UTC)]
- Blocked and tagged, including Petite Maman Marion, who fits the technical pattern fairly well. Closing. --Blablubbs (talk) 20:23, 9 December 2022 (UTC)
09 December 2022
Suspected sockpuppets
- YiYiYangYang (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Tangent |
---|
The following discussion has been closed. Please do not modify it. |
|
Clerk, CheckUser, and/or patrolling admin comments
- Awaiting administrative action - Please, indef the account and tag as suspected to CharmenderDeol. This is clearly part of the Wiki Creators LLC group (ElizabethWiki2001, CherylWiki007, JessicaBruton). Those with access to paid-en-wp@ can get additional evidence, but I don't think it's strictly required. MarioGom (talk) 08:33, 9 December 2022 (UTC)
- MarioGom - Done. ~Oshwah~(talk) (contribs) 16:17, 9 December 2022 (UTC)
- Linda Gerdner: Please, note that this is not an investigation against you, but against Wiki Creators LLC. I have collapsed your comment, since there is no necessity of drawing further attention to your page in this report. I'm sorry about this situation. If you need further advice, feel free to contact me at my talk page or privately by email. MarioGom (talk) 16:44, 9 December 2022 (UTC)
06 February 2023
Suspected sockpuppets
- AlcarrasEstiu (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Editing style, username, stylometry suggests that AlcarrasEstiu (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (who created spam Cariuma (shoes)) is part of this spam group. This goes back to Isingness (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) [34] 69.165.235.238 (talk) 12:53, 6 February 2023 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- They are definitely related with User:Isingness as one of their recent sock edited obscure topic, Aspetto, that was created by Isingness. 69.165.235.238 (talk) 13:00, 6 February 2023 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
- Well, they certainly look like a spammer - random edits to gain autoconfirmed, then immediately make an article about a little-known company. They're using proxies, which makes CU data inconclusive, but they certainly look a lot like CharmenderDeol socks to me. They are Confirmed to BonnieTheGardner, and I'm going to block both without tags for now - pinging BlaBlubbs for a second opinion on the link to the master. Girth Summit (blether) 19:29, 6 February 2023 (UTC)
- I think it is very likely related to Wiki Creators LLC (cohort described in the archive), and thus, to CharmenderDeol. Feel free to ping me privately for further evidence. MarioGom (talk) 20:27, 6 February 2023 (UTC)
- Thanks MarioGom - that's appreciated. Repinging Blablubbs, since I botched the last one - any thoughts? Girth Summit (blether) 21:48, 6 February 2023 (UTC)
- @Girth Summit and MarioGom: It's always kind of awkward to translate these cases into templatespeak, but I'd say AlcarrasEstiu is Likely to e.g. Kangroosius from a technical perspective. --Blablubbs (talk) 22:05, 6 February 2023 (UTC)
- Thanks Blablubbs - based on your observations, MarioGom's and my own, I'm tagging as suspected and requesting locks. Girth Summit (blether) 18:05, 8 February 2023 (UTC)