Wikipedia:Sockpuppet investigations/Zavia345/Archive

From Wikipedia, the free encyclopedia


Zavia345

17 November 2021

Suspected sockpuppets

Tony1985sept was blocked by Blablubbs for "advertising and copyright violations – most likely WP:UPE". Among his creations was Draft:Olga Fleming, deleted on 8 October as G11 (my nomination). Suzannah Richmond created an account at 20:22 today, 17 November 2021 and five minutes later re-posted the first part of the deleted text (word-for-word or nearly so); she then added the rest of it (again, word-for-word or nearly so). Justlettersandnumbers (talk) 19:50, 17 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Thanks for the ping, Justlettersandnumbers. Considering the identical recreation, I'm fairly certain that this is either them, or a distinct spammer hired to post the same spam, which essentially boils down to the same thing.  Blocked but awaiting tags and Clerk endorsed; the master posted some other spam as well, I think a CU run is warranted to check if we're dealing with a farm. --Blablubbs (talk) 19:59, 17 November 2021 (UTC)
  • In progress - -- RoySmith (talk) 02:01, 18 November 2021 (UTC)
  • I looked at Tony1985sept, Suzannah Richmond, and Rosemarry199 (from the next report). Lots of different IPs in use, some of which appear to be proxies. Everything geolocates to the same region of the same country. There's a lot of user agent similarity, but it's a very common UA, so that probably doesn't mean much. Overall, somewhere between  Possible and Inconclusive  Behavioural evidence needs evaluation. -- RoySmith (talk) 02:12, 18 November 2021 (UTC)
    PS, I didn't look for sleepers because the nature of the data made it seem unlikely to be productive. -- RoySmith (talk) 02:16, 18 November 2021 (UTC)
  • Tagged, closing. Thanks, Spicy (talk) 02:20, 19 November 2021 (UTC)

17 November 2021

Suspected sockpuppets

Tony1985sept created Draft:Samanta Liza on 26 June 2021; it was deleted as G11 (my nomination) on 7 October. On 25 October Rosemarry199 created an identical (or very nearly identical) page. Other page creations are just as promotional as those of the master. Justlettersandnumbers (talk) 20:01, 17 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • See previous section. -- RoySmith (talk) 02:13, 18 November 2021 (UTC)

This case is being reviewed by Spicy as part of the clerk training process. Please allow him to process the entire case without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.

  • Comparing (what I can see of) the previous draft to the current one, it's either socking or UPE meat (probably socking, based on some other behavioural similarities). Blockable either way, so Pink clock Awaiting administrative action - please indef Rosemarry199. Thanks, Spicy (talk) 02:29, 19 November 2021 (UTC)
  • Spicy blocked. I'll leave the tagging to you. -- RoySmith (talk) 15:16, 19 November 2021 (UTC)
  • Thanks, tagged as suspected, closing. Spicy (talk) 22:02, 19 November 2021 (UTC)

02 December 2021

Suspected sockpuppets

UPE sock group. A previous group of accounts have already been blocked and tagged by Bilby based on off-wiki evidence. The two new suspected socks turned up today to move Fretello to mainspace, an article started by sock Allenweiber (talk · contribs). Mathew313 (talk · contribs), performed the move (the other edits from the account also give off UPE vibes), and SPA ElleMcF (talk · contribs) turned up shortly afterwards. Requesting a CU check, as it is likely that there are more accounts in the UPE ring. Pahunkat (talk) 21:22, 2 December 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Spicy, I just sent you an email. Hopefully it will come in useful. Pahunkat (talk) 23:37, 5 December 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

17 December 2021

Suspected sockpuppets

Checked per history at Anthony Soohoo (Entrepreneur). Confirmed by CheckUser. – bradv🍁 17:58, 17 December 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Blocked and tagged. – bradv🍁 18:00, 17 December 2021 (UTC)

22 December 2021

Suspected sockpuppets

Same behavior, first starting the sandbox ( & ) and then blanking it when the content has been moved to draftspace ( & ) Always uses visual editing. Nelson Turner were hired on this project to paste pre-packaged material on Fulvio Bonavia. Sleeper check requested along with merge of case as per evidence.

For User:Kalim0135, (same creating and blanking of sandbox , ) see overlap/keep votes of their socks on Wikipedia:Articles for deletion/Saeid Jamali. ScriptedDecrypted (talk) 23:20, 22 December 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • In addition, the confirmed user tried repeatedly to log in as Techconsultant1985 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI) but was not successful.  Behavioural evidence needs evaluation, this account is too old to confirm.
  • The confirmed accounts have been Blocked and tagged and their contribs have been purged. Clerks: please G5 any contribs from socks in this case, it's likely they are drafting and blanking articles in their sandboxes to be copied-and-pasted by future socks. Ivanvector (Talk/Edits) 18:06, 2 January 2022 (UTC)
    I've been G5ing page creations and evaluated the behavioural evidence. For Techconsultant1985 it is missing some of the patterns for the other socks and doesn't have much history, so no action was taken. Javeria Tariq I would consider possible there as well, but it has some behaviour not seen in any of the previous socks so no action there either. Closing. --Trialpears (talk) 00:44, 4 January 2022 (UTC)

02 February 2022

Suspected sockpuppets

Same tactics/editing pattern i.e. using sandbox for drafting an article and then posting it in drafspace while simultaneously blanking the sandbox at the end of work completion. 80.1.188.53 (talk) 14:17, 2 February 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Blocked and tagged. Ivanvector (Talk/Edits) 15:25, 2 February 2022 (UTC)


08 February 2022

Suspected sockpuppets

Recreated Draft:Haian Dukhan as an exact copy of the draft created by Terence louis (talk · contribs). See below. Ivanvector (Talk/Edits) 13:15, 8 February 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • I blocked earlier today when I saw the draft recreated, however they are technically Red X Unrelated. This account is located on another continent from the other socks and is using a different device. However, the two drafts are bit-for-bit identical. This is probably two people competing for something like an Upwork job where copy has been supplied, but for our intents and purposes this is a sock, Blocked and tagged. Ivanvector (Talk/Edits) 13:15, 8 February 2022 (UTC)

30 April 2022

Suspected sockpuppets

Anecdotes show that Sarah_Freedmen is part of this mass spam mill. Like this one, blanking the sandbox before putting it live. I am sure they are operating many more. 2001:8F8:1343:C225:FDD8:D3B7:F43E:4543 (talk) 16:25, 30 April 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

See Wikipedia:Sockpuppet investigations/Sarah Freedmen.--Bbb23 (talk) 01:48, 1 May 2022 (UTC)

01 August 2022

Suspected sockpuppets

Suspicious account editing only in draftspace and making dummy edits there (wikilinking country names, changing between variations of English). On frwiki they created article Dalia AlFaghal which appears to be an exact translation of an article published some months ago on enwiki by blocked sock Allenweiber, see Special:AbuseLog/31037029. – NJD-DE (talk) 19:45, 1 August 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

15 August 2022

Suspected sockpuppets

For the record — Confirmed to Tom Max350, check of Blaze Reed345 — TheresNoTime (talk • she/her) 21:25, 15 August 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

18 December 2022

Suspected sockpuppets

Classic pattern of this sock farm: use of numeral usernames, visual editor, 9-10 edits on random drafts (much like Sam 3494 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI), Blaze Reed345 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI)), and then publish their spam in mainspace, all confirmed in Saimsheikh727 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI). Lizkwatson already, checkuser may reveal more clues. Previously, checkuser was helpful, and would likely be helpful this time too. 142.117.154.66 (talk) 09:00, 18 December 2022 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

24 January 2023

Suspected sockpuppets

Part of the Zavia345 that is trying to promote their client, Paul P. Momtaz, on multiple Wikipedias, as it is clearly obvious by this creation de:Paul P. Momtaz by Zavia345 himself (banned now). Then, they used Andreaheldge5 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI) to create articles on French, Portugese, and Hungarian Wikipedias about their client: fr:Paul P. Momtaz, pt:Paul P. Momtaz, hu:Paul P. Momtaz. And later, they published on English Wikipedia, Paul P. Momtaz, using Justin047 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki · SI). Now, they have discovered an obscure topic, Draft:Binghatti, to submit. Please check for sleepers. 2A02:C7C:7201:2700:2DE9:34F:E47E:513 (talk) 16:14, 24 January 2023 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Related Articles

Wikiwand AI