Wikipedia:Sockpuppet investigations/Btw Santhosh/Archive

Suspected sockpuppets
All users have the single purpose of promoting Santhosh Kumar / Btw Santhosh. Tol (talk &#124; contribs) @ 07:00, 30 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Master nuked, for accounts mentioned + . DatGuyTalkContribs 10:52, 30 July 2023 (UTC)

Suspected sockpuppets
Users from this farm have been creating articles on a hacker Santhosh Kumar / Draft:Santhosh Kumar. Once that got protected, they seem to have now switched to trying their luck with Draft:Hacktivist Vanguard (Indian Hacktivist) / Draft:Hacktivist Vanguard (Indian Hacktivist Group) (and possibly others), apparently a group set up by the said Kumar. The first (that I'm aware of) was XPosBot, but they got blocked because of their username, and CONFLIXERS picked up the baton; I'm sure they're the same user, as their user pages are very similar, and the newer account was set up only two days after the older got blocked. But more to the point, I'm saying I think they're both Btw Santhosh.

BTW, three years ago also created Santhosh Kumar, although that's so long ago that I don't think it's part of this campaign. It is apparently part of the farm. I'm just mentioning here in case there's any connection, which I think unlikely.

Requesting CU to confirm, as the Hacktivist topic is a degree removed from Kumar, and also for a scan of others waiting in the wings. -- DoubleGrazing (talk) 09:00, 14 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Came across this from another angle. See below. DatGuyTalkContribs 15:22, 14 January 2024 (UTC)

Suspected sockpuppets
Pro forma, all ✅ to each other ( was created directly by CONFLIXERS through Special:CreateAccount). might be just instead but I don't see the point in making the distinction. DatGuyTalkContribs 14:37, 14 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * due to cross-wiki disruption. DatGuyTalkContribs 14:47, 14 January 2024 (UTC)
 * Correction: This is behaviourally likely to be . Moving there and adding who is . DatGuyTalkContribs 15:18, 14 January 2024 (UTC)

Suspected sockpuppets
Very similar user pages. I warned User:Santhosh Rajput about the misleading user page here. User:BOMBBITA has used a dragon gif at the bottom of their user page, which I believe no one else uses other than me. Requesting CU based on the behavioral evidence, as I remember seeing a very similar user page a couple of times recently. Jeraxmoira🐉 (talk) 18:25, 19 January 2024 (UTC)


 * User page is similar to what XPosBot had initially. Jeraxmoira🐉 (talk) 18:28, 19 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I'll call these ✅ to the previous batch and proven to :  DatGuyTalkContribs 09:51, 20 January 2024 (UTC)

Suspected sockpuppets
New account, whose first two edits had to do with this Hacktivist Vanguard thing, which is has seen a lot of socking from different farms, but most recently (AFAIK) from the Btw Santhosh one, so thought I'd flag this up here just in case. -- DoubleGrazing (talk) 11:21, 8 February 2024 (UTC)


 * Huh? I didn't check the CU box. Soz! -- DoubleGrazing (talk) 11:22, 8 February 2024 (UTC)
 * PS: On a different point, this user has created Draft:Rahhat Shah Kazmi, which was previously created several times under different titles. I had a look but couldn't see any blocked accounts anywhere in the history, but obvs the histories of deleted drafts/articles are not visible to me. I guess it could be that this user is just a new hired gun and not a sock, at least not from this farm? -- DoubleGrazing (talk) 11:37, 8 February 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * The following are single-purpose accounts for publicising Hacktivist Vanguard, or in the case of ShingaChu a semi-single purpose account.

They look to me like sockpupets or meatpuppets associated with Hafzal Murbani. They may or may not also be Btw Santhosh, but either way I think a CU to compare them with one another, and to look for possible sleepers, would be welcome. JBW (talk) 20:03, 11 February 2024 (UTC)


 * Hafzal Murbani is now globally locked, having been locally blocked on Faeroese Wikipedia for abusing multiple accounts, and on Hausa Wikipedia for a reason which Google translates as "immigrants". (????) However, a CU would still be welcome, because of the other accounts. JBW (talk) 23:49, 11 February 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * to each other and to past sock accounts:


 * , . Other accounts are stale. Closing. Thanks, Spicy (talk) 17:13, 18 February 2024 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Block evasion. New SPA created 10 February. 15 minutes after creation, first edit was to add 13 copies of "group" press release, posted to 13 different junk sites, to Draft:Hacktivist Vanguard:. This is the same press release used heavily in deleted Hacktivist Vanguard and Hacktivist Vanguard (Hacktivist Group), and added this time to a parallel draft Draft:Hacktivist Vanguard, created in September before the master was blocked and the articles were deleted following strong consensus at AFD. Following day, first made a few precocious edits to Mir Sarwar, all marked as minor Then rewrote Draft:Hacktivist Vanguard in a single edit:, created a second nearly identical draft at Draft:Hacktivist Vanguard (Hacker Group), both using image uploaded by.
 * And a third stab, at Draft:Hacktivist Vanguard (Indian Hacker Group). Wikishovel (talk) 18:28, 11 February 2024 (UTC)

New SPA, uploaded non-free logo File:Hacktivist Vanguard.jpg to Commons as "own work", with the same spammy description used in the original article and the two new drafts. This identical to the non-free logo uploaded to Commons three times by master, and deleted three times over licensing. Wikishovel (talk) 16:23, 11 February 2024 (UTC)

An anon editor also worked extensively on Draft:Hacktivist Vanguard on 6 Feb, adding "This section will be updated periodically to reflect the group's evolving history and its impact on the cybersecurity landscape.", with no AfC template, essentially settling for a permanently parked draft to promote a one-person, zero-notability "hacker group". Wikishovel (talk) 16:27, 11 February 2024 (UTC)

Adding two more socks, and, SPAs who created  and worked on  Draft:Hacktivist Vanguard respectively. Wikishovel (talk) 16:32, 11 February 2024 (UTC)

Just noticed that User:Hafzal Murbani was indeffed and globally locked for sockpuppetry at FOwiki by User:WikiBayer, and previously indeffed at HAwiki by User:Gwanki. Wikishovel (talk) 17:35, 11 February 2024 (UTC)


 * This is Special:CentralAuth/Muhammad_Bilal_Muzzamil. He is blocked on Wikidata, Fowiki, SSWIKI, HAWiki, and ... .I habe added MahmudHM1 to the request please check.

other socks
 * Ubukwe Ahiya (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Kaodcisd (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Jaiiy uuu (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Hazim Rozak Bump (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Geho Horashama (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Gayuobs Yeoo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Gerehap Ritz Ywoo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Mitra Valmeoo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Gaisoebd Hdiwodb (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Giria Ywoo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Arhan Gautam Shan (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Tiya Chandra 28288 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Aakansha Drivedi Bharat 66 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Mukul Suressh (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Music Violet (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Arjit Kumar Biswas 254 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
 * Garpiwosb7 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser) and more--WikiBayer (talk) 17:56, 11 February 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Merged case to Btw Santhosh. All non-stale accounts have been blocked and locked. Closing. Thanks, Spicy (talk) 15:28, 30 March 2024 (UTC)

Suspected sockpuppets
We have a brand new SPA creating yet another version of Draft:Hacktivist Vanguard. I believe this topic has been attempted by at least Btw Santhosh's farm as well as 's, but I had to pick one so went with Btw S. DoubleGrazing (talk) 18:15, 22 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to राहुल शास्त्री, technically to previous accounts, but behaviour makes it clear enough., , closing. Thanks, Spicy (talk) 18:12, 29 March 2024 (UTC)

Suspected sockpuppets
Block evasion: new SPA created 15 April. An hour later, recreated Draft:Hacktivist Vanguard at Draft:Team Hacktivist Vanguard. Wikishovel (talk) 16:10, 15 April 2024 (UTC)

New SPA, created 16 April. Games autoconfirm, then recreates Rachana Shah, G5'd a day earlier. Requesting checkuser. Wikishovel (talk) 15:42, 20 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments
Please see my comments at User talk:Bbb23.--Bbb23 (talk) 15:45, 20 April 2024 (UTC)
 * Techrd2000cork is ✅ to . Some proxy use noted.
 * Brosscreator is technically to this case. Their technical data is more consistent with WP:Sockpuppet investigations/Bikrookanpurgangster but it's not wholly distinctive so . Spicy (talk) 16:29, 20 April 2024 (UTC)
 * has been documented in the 13 May 2024 that was filed here and moved to Sockpuppet investigations/Bikrookanpurgangster. Closing this as there is nothing left to do. Dreamy Jazz talk to me &#124; my contributions 17:29, 18 May 2024 (UTC)

Suspected sockpuppets

 * ( original case name)

Right after deletion that I nominated, its being created again so I just think this user is sock or employed by same person. HarryD (talk) 08:44, 21 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Note to clerk: A CU check has already been completed on Sockpuppet investigations/Btw Santhosh w.r.t User:Brosscreater. Jeraxmoira🐉 (talk) 09:35, 21 April 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Closing as duplicate. Sir Sputnik (talk) 15:16, 21 April 2024 (UTC)

Suspected sockpuppets
Obvious block evasion. New SPA created 7 April. A minute after creation, first two edits were poorly sourced puffery about Hacktivist Vanguard at IIT Bombay:,. Third edit just now was, as usual, to add Hacktivist Vanguard to List of hacker groups, with the usual rock-bottom blog sources:. Checkuser might be a good idea at this point. Wikishovel (talk) 15:47, 2 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * , leaving open in case anyone wants to check for sleepers, or verify its not a different sock. ScottishFinnishRadish (talk) 15:51, 2 May 2024 (UTC)
 * CU evidence is not clear. This account can stay without tags. Close. Dreamy Jazz talk to me &#124; my contributions 17:30, 18 May 2024 (UTC)