Wikipedia:Sockpuppet investigations/PlikoraT/Archive

Add links
From Wikipedia, the free encyclopedia


PlikoraT

PlikoraT (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

16 September 2016[edit]

Suspected sockpuppets[edit]

 Looks like a duck to me for JorgeBigfoot and HummrTrukht for creation of FOL Logistics. PlikoraT has very little edit history, and was inactive, yet suddenly became active to move Draft:FOL Logistics into main article space, with an assertion that it passed WP:CCS and/or WP:N. That seems like duck-ishly unusual behaviour to me. I nominated both creations as CSD A7 / CSD G11, as I wasn't convinced that there was a good CCS there in either instance, and it seemed promotional. I can't see deleted revisions, obviously, but the second creation didn't seem like it had significantly improved over the first (from my limited recollection of the first). If both versions are quite similar, that would probably be a quack. Not tagged as requesting CU, leaving that to clerk/admin discretion, if you feel it's needed. Murph9000 (talk) 14:36, 16 September 2016 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

29 September 2016[edit]

Suspected sockpuppets[edit]


Spamming of healthwhoop.com (now blacklisted): [1], [2], [3], [4], [5], [6], [7], [8]. Given that there are other unrelated promotional edits (User:Indu11/sandbox, [9], Uebert Angel, TapJets) it is highly likely that these are undisclosed paid advocates. Please look for other accounts. MER-C 12:07, 29 September 2016 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

This case is being reviewed by GeneralizationsAreBad as part of the clerk training process. Please allow him to process the entire case without interference, and pose any questions or concerns either on his Talk page or on this page if more appropriate.

30 September 2016[edit]

Suspected sockpuppets[edit]

I think you might have missed a couple who edited articles shortly after they were created by one of the confirmed socks.


Another one WriterNeetin created Delhi School of Internet Marketing ‎[15] which was then expanded and referenced by the sockfarm [16]. - Brianhe (talk) 14:32, 30 September 2016 (UTC)[reply]

Note that this sockfarm and Chints247 have both been using the pseudosource The Indian Economist for promotion of Indian topics. Chints247 used the source here and this sockfarm used it in Delhi_School_of_Internet_Marketing here (I think--a now deleted revision). Brianhe (talk) 17:15, 30 September 2016 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

  • Amjithambro2511 is  Stale.
  • WriterNeetin is  Possible but  Behavioural evidence needs evaluation.
  • The remainder of the accounts are Red X Unrelated to each other and this master.--Bbb23 (talk) 17:29, 30 September 2016 (UTC)[reply]
  • information Administrator note Marking as closed. Mkdwtalk 22:33, 16 October 2016 (UTC)[reply]


30 September 2016[edit]

Suspected sockpuppets[edit]

SPA editing another sock's spam page agtx 20:03, 30 September 2016 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Added SPA on Leslie Glass [17], closely related to sockfarm created article Reach Out Recovery. - Brianhe (talk) 09:34, 1 October 2016 (UTC)[reply]

Jennifer.marko felt the need to contest the speedy deletion of TapJets at Talk:TapJets. MER-C 12:35, 1 October 2016 (UTC)[reply]
Just like RundelCrank32 contested Leslie Glass PROD... Brianhe (talk) 03:27, 2 October 2016 (UTC)[reply]
Added WoukerLuke, Reikerdrone (Draft:XXL Box compare to Special:Undelete/XXL Box); JasonReimen (Draft:Mobile Pro compare to Special:Undelete/Mobile Pro); RmpleDusseldorf [18]. MER-C 08:19, 2 October 2016 (UTC)[reply]
Added Justinmark who previously created DJ Sian that was later recreated by one of the recently blocked accounts. SmartSE (talk) 09:44, 4 October 2016 (UTC)[reply]
And Simon Mugava who recreated Uebert Angel. SmartSE (talk) 19:38, 13 October 2016 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments[edit]

 Clerk note: Added another SPA. GABgab 03:09, 1 October 2016 (UTC)[reply]

14 December 2016[edit]

Suspected sockpuppets[edit]


Firsttakepr uploaded an image [19] including a spamlink. After the link was removed Km111 restored it [20]

Firsttakepr uploaded an image [21] including a spamlink. After the link was removed Km111 restored it [22]

Firsttakepr uploaded an image [23] including a spamlink. After the link was removed Km111 restored it [24]

Both Km111 and Firsttakepr linkspammed coachtube [25] [26] [27] [28]

Both Km111 Waverspun30 [29] [30] created similar articles for Raising the Bar (event) duffbeerforme (talk) 04:30, 14 December 2016 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

19 December 2016[edit]

Suspected sockpuppets[edit]

SPI has three parts. Part 1 is since the last SPI

JessieRupo has copypasted User:RanturJason/sandbox/Smartbox into Smartbox. [31]. User:RanturJason is a sock from last SPI. Then patrolled by UnkleBrunt.

Part 2. Duck which was not part of the last SPI

AndrewKrushk created Draft:StyleWe which was published by Elsefter dayi at StyleWE to separate it from deleted version at StyleWe
Reaprtho created Fattitude from Draft:Fattitude, created by PlikoraT. This page was patrolled by User:MontTazlo, an Orangemoody sock.

Part 3. Based on Blocked sock Doosedouyrs

Doosedouyrs patrolled Jill Nulty, Smartbox (above), Phekoo, Michael McGuinness, All Public Art, AME Medical Group, Inc. - Urgent Care, 911 Restoration Inc.
These each have short term throwaway accounts editing them.

Phekoo [32]

HaiderPoert
BrettKrent User:BrettKrent/sandbox/Phekoo

Jill Nulty [33]

RemanoJaeinkaro
NuemantoKrinto
FikarouKrump
KrumpourK already blocked sock

Michael McGuinness [34]

Umert Krakko
UnkleBrunt

IEDM [35]

JhintoBrunt
UnkleBrunt
DrnukqwPrunt

AME Medical Group, Inc. - Urgent Care

RobbyNeuken

911 Restoration

911 Restoration Inc.
911Restoration
Draft:911 Restoration
Draft:Idan Shpizear

911 Restoration Inc.

Milestonemiri
Ountro Akura
Usamanau
Doosedouyrs

Draft:911 Restoration

Hydrophobic4278
ReumerKrantou

Draft:Idan Shpizear

NuekamSultan
UnkronKlusk

Older version of 911 Restoration

MilestoneSeoInfo
Keith Santos

Note two account names suggest a connection with Milestone SEO who have 911 Restoration as a client. [36]

All Public Art was created by another promotional sockfarm Wikipedia:Sockpuppet investigations/DrankJetter after being drafted by anothe SPA [37]. Account naming by both farms suggests they are the same.

Part 4. Other

Matt Lange

RinkuKalus
UnkronKlusk

Jasper Sanks

JosephKrump
DreamKron
UnkronKlusk

A lot of draft by one, create by another behaviour

Amongst other name similarities The usernames have an overabundence of Ks and lots of other overlaps. ramp rump rant runt. kora karo

FikarouKrump FikarouKrump ReumerKrantou RanturJason BruntJekker JhintoBrunt UnkleBrunt DrnukqwPrunt
PlikoraT RemanoJaeinkaro

All but Part 1 are probably stale. Might not be much use doing much with others, just documenting. duffbeerforme (talk) 10:57, 19 December 2016 (UTC)[reply]

Additional non stale accounts dedicated to the refspamming of Carsmind. Carsmind has recently been used as a reference in 11 articles and is only used in those 11. One instance is by a blocked sock.

BMjhantur [38]

The 9 other were introduced by SPAs whose sole edit (wit a few minor exceptions) has been to add this ref.

RonCarmichael [39]
RonnyJason [40]
ErkelMason [41]
DrantJake [42]
JacobKrummer [43]
ReutekKross [44]
ReiKerLoc [45]
JasonTrenk [46]
137.59.164.231 [47]

The last can't be seen due to the removal of unrelated copyvio but was most likely introduced by another samey SPA.

Nissan GT-R - [48]

There will be other connected accounts such as KunterBunter and RonaldClint. duffbeerforme (talk) 06:58, 20 December 2016 (UTC)[reply]

Forgot to add Tracie Martyn salon. Drafted by blocked sock User:KabalRai [49], puclished by RunterBrusk [50] and patrolled by Usamanau. (fits into part one)

Add others to the carsmind spammers. One was reverted, the other is new (since last edit here).

RuntKlemp [51]
JasonNorton [52]. duffbeerforme (talk) 07:19, 21 December 2016 (UTC)[reply]
Another stale one. Account naming matches. Created Michael McGuinness which was quickly followed up by Doosedouyrs (blocked sock) and UnkleBrunt. (Mentioned above but not listed). duffbeerforme (talk) 03:03, 4 January 2017 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

  •  In progress. You're bribing me with a barnstar? What happened to good old-fashioned money? This may take some time.--Bbb23 (talk) 01:01, 30 December 2016 (UTC)[reply]
  • Call me naive, but I'm not sure if institutionalized bribery is an entirely positive development for SPI. Maybe we should have an RFC on that. GABgab 01:19, 30 December 2016 (UTC)[reply]
  • It's not "institutionalized". Just you transferring money to my offshore account. It's not even a crime. You're paying me to do a service. Beats what the Foundation pays me. I just hope you're wealthy enough to afford me.--Bbb23 (talk) 02:09, 30 December 2016 (UTC)[reply]
  •  Clerk note: okay, buckle your seatbelts. I've been looking at this off and on for a few days, and I think I've got this worked out. There are several related and unrelated groups here.
Group 1 includes the oldest account, MilestoneSeoInfo (talk · contribs), which is already blocked. Milestone SEO and 911 Restoration are run by the same person, and indeed accounts related to Milestone have been pushing to have 911 Restoration's article in mainspace for five years, and have made no COI disclosure that I can find. (Edit: Milestonemiri disclosed on Smartse's talk page. Ivanvector (Talk/Edits) 18:12, 3 January 2017 (UTC)) I believe that these accounts clearly related to Milestone are a separate group from the other socks here, or less likely may be "good hand" accounts:[reply]
Group 2 is just this one account which appears that it might be related to a different PR firm, but hasn't done much of anything:
Group 3 are less obvious accounts related to the creations at StyleWe, StyleWE and Draft:StyleWe. The deleted article was created by socks in the larger farm here, then the extant pages were recreated by older sleeper accounts (including the oldest account not related to Milestone). StyleWE is a client of Dakota Digital PR.
Group 4 are the carsmind spammers, who as far as I can tell have done nothing else. Some of these are also CU-confirmed from above:
Group 5 includes the rest of the accounts named here. These accounts are behaving similarly to how I understand the Orangemoody farm operates: some identify declined drafts, AfC declines and deleted articles, polish them and move them to mainspace (sometimes by cutting and pasting), while others in this group go around "patrolling" the articles once moved, and it's noteworthy that several of the affected articles are about artists and performers. There is even one (Highedit) who appear to be removing and pushing for deletion of certain articles, another Orangemoody behaviour. There are some broken histories due either to cut-and-paste moves or multiple PR firms receiving press releases (i.e. Fattitude vs. Draft:Fattitude, All Public Art vs. Draft:All Public Art) that will need to be repaired. What's odd is that this group also created Draft:Idan Shpizear, whose subject is Milestone/911's CEO, but I do still think that that group is separate. Also adding these two which were reported in a different case and show the same pattern:
I also believe that some of the accounts that are CU-confirmed to DrankJetter also exhibit this same behaviour, such as (not an exhaustive list):
My conclusions are that group 1 is an unrelated SEO firm operating in good faith (with respect to sockpuppetry, at least) and group 2 can't be definitively connected. Group 5 is the main group which includes the behaviour of accounts from the previous investigation here and the archive at DrankJetter. Group 3 is related to the main group based on behaviour, and group 4 is related due to earlier technical evidence. I believe that this case and DrankJetter should be merged; Elsefter dayi (talk · contribs) is the oldest of the related accounts. I'm going to do a bunch of blocking here, but I am placing this  On hold so I can confer with clerks more familiar with Orangemoody to see what tagging and merging needs to be done here. Ivanvector (Talk/Edits) 16:11, 2 January 2017 (UTC)[reply]
Closing instead, I think I've done everything I can do here. Ivanvector (Talk/Edits) 03:33, 8 January 2017 (UTC)[reply]

02 January 2017[edit]

Suspected sockpuppets[edit]

JackKramer42 created Draft:Kosta Peric, which is nearly identical to Special:Undelete/Kosta Peric by User:RonaldClint.

RaultKrump and JackKramer42 have very similar userspace edits to some previous socks, followed by the creation of a promotional "article". JoshRagnor created Draft:Lincoln Square, London, which is nearly identical to Lincoln Square, London by RaultKrump. RonaldJackson created Draft:Adrok, which is very similar to Adrok Group by RaultKrump. MER-C 07:58, 2 January 2017 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

I've added two more accounts to check, one which did a cut-and-paste move of Draft:Adrok to Adrok Group, and the other which added an orphan tag to the article. Ivanvector (Talk/Edits) 16:45, 2 January 2017 (UTC)[reply]
I've added two more just now which are stale (reported by duffbeerforme above) and which are now blocked. Krumploker created Draft:Michael McGuinness and Umert Krakko did a cut-and-paste move to Michael McGuinness, at which point it was worked on by other confirmed socks. Not tagging, again, pending follow-up above. Ivanvector (Talk/Edits) 14:11, 4 January 2017 (UTC)[reply]
  •  Confirmed - Group 1:
Thanks, those two are now blocked, along with DrDenMark (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) that I dug up from mining those accounts' contribs. I've seen enough to be convinced that PlikoraT and DrankJetter are the same sockfarm: both cases have confirmed accounts that have spambombed links to various websites, as well as having checkuser-confirmed accounts doing the cut-and-paste draft moves and orphan tagging as I noted above (DrankJetter has RalphDront (talk · contribs) and RundelCrank32 (talk · contribs), for example). These cases will need to be merged but I don't have time to do it at the moment; any other admin clerk may do so if I don't get back to it first, so I'm switching this to admin status. The oldest account on this page is Elsefter dayi (talk · contribs) but I have not checked all of the accounts in the other case, and at any rate there may be older accounts not yet discovered and so trying to rename to the oldest account might be a moot point anyway. Ivanvector (Talk/Edits) 13:59, 9 January 2017 (UTC)[reply]
Merge done, hopefully I didn't make too much of a mess of it. On re-checking I have my doubts about Elserfter dayi and Andrewkrushkk from the case above, so I am leaving the merged case under PlikoraT. It's going to take me some time to work out the tagging so I'm putting this back on hold. Ivanvector (Talk/Edits) 13:55, 11 January 2017 (UTC)[reply]
Ok, all done here. Ivanvector (Talk/Edits) 23:33, 14 January 2017 (UTC)[reply]

21 April 2017[edit]

Suspected sockpuppets[edit]

Recreated Reach Out Recovery (edit | talk | history | protect | delete | links | watch | logs | views) previously created by RonKarlmichal. SmartSE (talk) 12:03, 21 April 2017 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments[edit]

But are editing exclusively from a since-blocked proxy. I do not see any obvious technical connection for Onealgo. Data in the CU logs suggest a  Possible match between the group of socks blocked in January and Reutrolantri. T. Canens (talk) 01:42, 23 April 2017 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/PlikoraT/Archive&oldid=1076212414"