Wikipedia:Sockpuppet investigations/Shewasafairy/Archive

{{sock list|1=Comintell|2=Wikicontributerr|tools_link=yes}}

• [https://interaction-timeline.toolforge.org/?wiki=enwiki&user=Shewasafairy&user=Comintell Interaction Timeline] between User:Comintell and Shewasafairy, especially in Undetectable.ai. User:Comintell's first simple wiki edit on 4th Jan, was to vote keep at the [https://simple.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_deletion/Requests/2024/Justin_Jin&diff=prev&oldid=9283901 AfD of Justin Jin (simple wiki)].
• User:Wikicontributerr is gaming their edit account exactly how Coookiemonster did, by adding irrelevant categories. The blocked 50mMidas sock User:Dotdotcomma has interacted with User:Wikicontributerr in simple wiki and User:Wikicontributerr also voted keep in the same AfD. Jeraxmoira🐉 (talk) 17:53, 4 May 2024 (UTC)
• :{{Diff|User talk:Blablubbs|1218373792|1216897659|History of this case.}} Jeraxmoira🐉 (talk) 17:58, 4 May 2024 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{Inprogress}} - RoySmith (talk) 15:04, 16 July 2024 (UTC)

:Also {{socklist| Passwordlol|IIIronicMediaGroup}}

• Comintell is {{confirmed}} on data. Passwordlol is {{confirmed}} on newusers/create2. I don't know what the story is with IIIronicMediaGroup; they are {{tallyho}}, but not enough editing activity to say for sure; in any case, they would certainly qualify for a username block, so I'm not going to worry too much about it. Wikicontributerr is long stale. RoySmith (talk) 15:33, 16 July 2024 (UTC)

----

{{sock list|1=MeltPees|2=Erika Mayer|3=Fauxkallax|4=Mneme|5=Journalrahul|6=Redring32|7=WikiEnthuasiastGR30|8=Johnofmars|9= DesignatedOcelot|tools_link=yes}}

Potential compromised SPA copying content from drafts and creating new articles in the main space.

• [https://interaction-timeline.toolforge.org/?wiki=enwiki&user=MeltPees&user=Shewasafairy Interaction Timeline] between Shewasafairy and MeltPees on Draft:Etf.com. - WP:OBSART Jeraxmoira🐉 (talk) 08:01, 7 May 2024 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I'm not sure Meltpees is related to Shewasafairy but prior to their recent activity here on en, their only other activity was on Commons to upload :File:Brands Impact logo.jpg back in 2019. Brands Impact is a PR company and their activity here suggests UPE along with others. For example, they edited Draft:Lifeplus, which was created by declared paid editor Erika Mayer. They then recreated it mainspace [https://en.wikipedia.org/w/index.php?title=Special:Log&page=Lifeplus]. An NPP reviewer moved it back to draft as Draft:Lifeplus 2 since it was duplicate then redirected it to Draft:Lifeplus. As noted above the same with existing draft Draft:Etf.com created by Fauxkallax and the article/draft has a [https://en.wikipedia.org/w/index.php?title=Special:Log&page=Draft%3AEtf.com history of UPE] and also Draft:Cindy Lin created by Mneme, which was draftified to Draft:Cindy Lin (author). S0091 (talk) 15:30, 14 May 2024 (UTC)

:Added Journalrahul related to Gayathri Vivekanandan/Draft:Gayathri Vivekanandan. S0091 (talk) 15:58, 14 May 2024 (UTC)

:Added {{no ping|Redring32}}: sleeper SPA created 27 December 2021. Zero edits until yesterday, when they declared COI at their user page, then created and submitted Draft:Jim Connors (radio personality). When this was declined, {{no ping|MeltPees}} re-created it at Jim Connors (RJ), first as a stub and then copying the draft over piecemeal. It's now at Draft:Jim Connors (RJ). Also adding {{no ping|WikiEnthuasiastGR30}}, who created NextDNS: this was moved to Draft:NextDNS by User:Alpha3031, then worked on by MeltPees [https://en.wikipedia.org/w/index.php?title=Draft%3ANextDNS&diff=1222665856&oldid=1218238066]. {{ping|Alpha3031}} you commented on MeltPees' behaviour at Wikipedia:Articles for deletion/Hexaware Technologies (3rd nomination), any comment? Do you think {{no ping|Rchardk}}, creator of latest Hexaware Technologies, should be added as another sock? The rabbit hole seems to go deeper here, and other drafts which MeltPees is recreating at altered titles suggest several more socks not yet listed here: User:Johnofmars (created 2017) is another candidate for master, with stale logs but edit overlap with some of the socks already listed. Wikishovel (talk) 15:16, 23 May 2024 (UTC)

::I don't really have much experience with socks, so I don't think I can offer too much. Though TBH I think (in my very biased opinion) that MeltPees can probably be blocked for DE if nothing else until they learn to {{em|use the move button}} like they're supposed to at least. Alpha3031 (t • c) 15:22, 23 May 2024 (UTC)

:::I agree they should be blocked if for no other reason than continuously copying drafts into mainspace, especially given they did not create them. @Wikishovel I redirected Draft:Jim Connors (RJ) to Draft:Jim Connors (radio personality) given it is a duplicate. S0091 (talk) 15:29, 23 May 2024 (UTC)

:::Well I'm adding {{no ping|Johnofmars}}, who I notice recreated PropertyLimBrothers, which was tagged and moved to draft by Alpha3031 (you see, you've got a natural talent for this), where it was worked on for tone by MeltPees [https://en.wikipedia.org/w/index.php?title=Draft%3APropertyLimBrothers&diff=1222662996&oldid=1222655448], 2 hours after the maintenance tags were removed by an anon sock: [https://en.wikipedia.org/w/index.php?title=Draft:PropertyLimBrothers&diff=prev&oldid=1222655448]. MeltPees was also the lone "keep" !vote at Wikipedia:Articles for deletion/PropertyLimBrothers: [https://en.wikipedia.org/w/index.php?title=Wikipedia:Articles_for_deletion/PropertyLimBrothers&diff=prev&oldid=1223503883]. Wikishovel (talk) 15:33, 23 May 2024 (UTC)

::::I think it's probably mostly that CORP articles have a higher density of UPE compared to other topic areas. I should probably {{em|try}} and pick up some more behavioural cues, though IDK what the best way to do that is. Maybe just exposure would do it. In other news, it seems that MER-C has blocked most of the participants for Whiteshield ({{np2|Del Amol Banora}}), Connecteam ({{np2|Prhinohoursers}}, {{np2|Improvised but so real unicorn}}, {{np2|FightBrightTigh}}) or both ({{np2|扱. し. 侍.}}). I suppose it would be normal to add them to see if they're part of this group or another one, find any other linked accounts, etc? Alpha3031 (t • c) 07:25, 26 May 2024 (UTC)

:Added {{no ping|DesignatedOcelot}}, SPA created 22 May. Seven minutes after creation, blued their user page with a user tutorial template (false, not done). Three hours later created Draft:Giacomo Segre in four edits. Three hours after that, draft moved to Giacomo Segre by MeltPees. Wikishovel (talk) 15:58, 23 May 2024 (UTC)

• {{Cudecline}} - Given the evidence of close collaboration between DesignatedOcelot and MeltPees, I checked those two and found them {{unrelated}}. I don't think there's enough evidence to justify any more fishing. RoySmith (talk) 16:14, 28 July 2024 (UTC)
• Insufficient evidence to show sockpuppetry, and most of these accounts have stopped editing. If there's UPE, that can be handled through the normal channels. The Wordsmith^{Talk to me} 21:51, 7 August 2024 (UTC)

----

{{sock list|1=StrongDeterrence|2=Comintell|tools_link=yes}}

See User_talk:Yamla#New_and_unusual_users. In particular, there's an overlap at Writesonic between Comintell and StrongDeterrence. However, it's also very clear right from the beginning that StrongDeterrence is not a new user. Additionally, they are focusing on an area which will result in a huge amount of cleanup if they are indeed a blocked/banned user. There are additional stylistic overlaps which I don't want to go into here due to WP:BEANS. So, at this point, both Bbb23 and I agreed there was something there. But, enough to run a CU? I wanted a second opinion and consulted {{np|Ponyo}} via email. Ponyo read the discussion on my talk page and agreed there was enough to run a CU. Of course, Ponyo did not see this SPI; I'm filing this after the brief email discussion. So, three admins, two of whom have CU (one of whom is me) agree there's enough to be concerned about here. Yamla (talk) 22:41, 4 September 2024 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• So, CU isn't a huge amount of help here. There's no smoking gun, except for widespread proxy use. As per Wikipedia:Open_proxies#Checkuser, this unfortunately does indeed create "an appearance that an account has been using open proxies to circumvent policy". On that basis, I'm going to block the account. There's a very real possibility this user will stop using proxies and will show up unrelated to the sockmaster. If so, I or any other checkuser would then unblock the account. --Yamla (talk) 22:50, 4 September 2024 (UTC)

----

{{sock list|1=Janny'sDonuts|tools_link=yes}}

Block evasion. Sleeper {{no ping|Janny'sDonuts}} created 19 January, made a burst of edits for 40 minutes same day, and went to sleep. Yesterday woke up, and took just four minutes to recreate and submit Connecteam at Draft:Connecteam Platform, two days after Connecteam was deleted following Wikipedia:Articles for deletion/Connecteam (3rd nomination). Draft:Connecteam Platform was rejected in AfC by User:Bonadea, so sock blanked it and oddly moved it to Draft:Cp comp, apparently to avoid another logged deletion at Draft:Connecteam, where I've now moved it. Wikishovel (talk) 10:43, 2 October 2024 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Just adding to have a record of the shenanigans: Janny'sDonuts requested a G7 deletion of the draft when Wikishovel had moved it to Draft:Connecteam. It's always possible that this means they have given up and won't recreate the draft again, I suppose. Well, it is possible. --bonadea contributions talk 16:04, 2 October 2024 (UTC)

• I've blocked for the promotion. The check was about as helpful as Yamla dealt with in the most recent archive. Izno (talk) 05:36, 6 October 2024 (UTC)

----

{{sock list|1=Atomicpowur|2=Barker1987|3=Furik|tools_link=yes}}

Compromised accounts or likely bought from a marketplace, similar to previous ones. Atomicpowur recreated the page for Justin Jin on Muen and Barker1987 moved it to Justin Jin (producer).

• Furik, Barker1987 and Atomicpowur have been inactive since 2021.
• Furik has created Poybo Media on Mediababy/Draft:Mediababy. Jeraxmoira🐉 (talk) 05:07, 4 October 2024 (UTC)

See also WP:Sockpuppet investigations/50mMidas/Archive for additional history about Justin Jin and other related socks. S0091 (talk) 13:55, 4 October 2024 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• CU isn't very helpful here. I agree compromise seems likely though, and it is plainly apparent ([https://en.wikipedia.org/w/index.php?title=Muen&action=history][https://en.wikipedia.org/w/index.php?title=Justin_Jin&action=history][https://en.wikipedia.org/w/index.php?title=Draft:Mediababy&action=history]) that this is another round of coordinated promotion surrounding Justin Jin. That topic involves a mix of outright (UPE) socking and (UPE) meat, and at this point it seems like a waste of time to differentiate between them. {{bwt}}, closing. --Blablubbs (talk) 11:48, 6 October 2024 (UTC)

----

{{sock list|1=Php13333332|2=50.226.102.245|tools_link=yes}}

See 50mMidas and Justin Jin (producer) where the IP (and other IPs) in quick succession have tried to turn redirects created by Php13333332 into articles. See also WP:Sockpuppet investigations/50mMidas. There's been a years long attempt to create an article about Justin Jin and/or his businesses. Based on Blablubbs last comment, CU is not especially helpful so not requesting it. S0091 (talk) 20:27, 29 March 2025 (UTC)

:Thanks @Kuru!

:Separately, some additional notes about Php13333332. Thus far the only editors who have contributed about Justin Jin have been spammy COI/UPE and I don't think anyone who is not somehow affiliated with Jin would create 50mMidas. That's inside baseball so to speak. Also looking a bit more at their log and contributions, they do not seem to be a new editor or their activity is at least odd. They joined in December 2023 and created a draft that does not appear to have been accepted, then they disappear for about a year. Their next edits are mostly requesting or creating a handful of redirects, including the two related to Jin, but they also create templates which usually is not something a relatively new editor does. S0091 (talk) 19:58, 30 March 2025 (UTC)

:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

:The IPs are obviously either the same SEO spam farm that was hired out in prior incidents, or a new one. Either way, the articles they've reverting in are the same old hot mess of bargain-basement SEO sites, brand-licensed sites for popular sources, Forbes contributor blogs, and the now corrupted village voice (see recent discussions on RSN). All undisclosed paid or COI editing. I've blocked the IPs and protected one of the redirect pages. No comment / not sure on Php13333332. Sam Kuru (talk) 01:18, 30 March 2025 (UTC)

• I'm going to close this. I reviewed the case yesterday and came closer to "Php is innocent". Slept on it and I'm still there. Re-report if issues resume and/or timing lines up nicer. Izno (talk) 17:51, 6 April 2025 (UTC)

----