Wikipedia:Sockpuppet investigations/Commanderofthescript/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

All shared interests in here, here, here, here, here, here, here and here. SwisterTwister  talk  19:30, 2 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - whiffs of editing-for-hire. I've added a couple more accounts to check, and suggest checking against Sockpuppet investigations/Ishq Hawa Mein if possible (there should be at least one non-stale account). Ivanvector (Talk/Edits) 16:42, 4 October 2017 (UTC)
 * and are ✅ to each other.
 * and are  the same editor and  related to the first two.
 * and are  the same editor and  related to the first two.


 * It's all rather as there is proxy use and each editor is using multiple devices (or a service to obfuscate their UAs). I'm familar with the Ishq Hawa Mein promotional farm and I don't think this is related.-- Jezebel's Ponyo bons mots  23:12, 4 October 2017 (UTC)
 * I'm taking the likely editing-for-hire and possible use of services to evade detection as intentionally deceptive, and have indeffed all of the accounts. Ivanvector (Talk/Edits) 13:11, 5 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Nearly identical recreation of Commander's Amr Shady as Draft:Amr Shady CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  17:23, 6 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . . Primefac (talk) 17:34, 6 October 2017 (UTC)
 * I'm not sure which one of us beat the other to it, but the account is and one of us is about to delete the draft. Ivanvector (Talk/Edits) 17:36, 6 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Recreated Amr Shady with exactly the same content as Commanderofthescript. Already blocked; requesting CU for sleepers. Ivanvector (Talk/Edits) 20:04, 10 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * per me. Ivanvector (Talk/Edits) 20:05, 10 October 2017 (UTC)


 * From the previous report is more or less ✅ to be
 * In other news, and  and  are technically  the same user, but probably different from the other two. See also  and . In this group there's a few crossovers with Sockpuppet investigations/عثمان خلیل. -- zzuuzz (talk) 22:26, 10 October 2017 (UTC)
 * Hmm, well that's kind of a surprising result, considering the recreated article was nearly exactly the same, byte-by-byte. I see only two possibilities really:
 * whoever's trying to promote this article has hired both groups at the same time, and maybe also provided copy; or
 * the two groups are really the same user or group, editing on different devices or deliberately obfuscating Checkuser, as previous socks have done.
 * The action is the same in both cases: . I don't see behavioural evidence for a merge with عثمان خلیل though. Ivanvector (Talk/Edits) 14:49, 11 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I've already blocked this user for UPE but considering that they recreated Amr Shady (all be it with different content) it seems sensible to list them here and see whether CU can turn up any other accounts. SmartSE (talk) 12:45, 18 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , although I think this is a different user. Erin93 is not a new account and was active during previous CU checks, but it would be useful to know whether or not there is a technical connection. Ivanvector (Talk/Edits) 13:29, 18 October 2017 (UTC)
 * Erin is ❌ to Commanderofthescript. Meatpuppetry seems more likely than sockpuppetry. On the other hand, and  are ✅. ~ Rob 13 Talk 13:42, 18 October 2017 (UTC)
 * Thanks. Would you have picked up any links to Sockpuppet investigations/عثمان خلیل (mentioned in the previous archive)? Just asking because off-wiki info I've recieved makes it likely that Erin93 would be unrelated to the previous socks, but could be related to via that sockfarm. Sorry for not mentioning this earlier. SmartSE (talk) 14:19, 18 October 2017 (UTC)
 * I didn't find any such links between the proposed sock here and that sockfarm. ~ Rob 13 Talk 14:20, 18 October 2017 (UTC)
 * - Please compare to Erin93 and other accounts on Ibrahim Al-Haidos, such as  and Amirshahat socks (such as ). Thanks,  GABgab 14:48, 18 October 2017 (UTC)
 * Actually, Leodikap may be just another Amirshahat sock, too... GABgab 15:05, 18 October 2017 (UTC)
 * ❌. Katietalk 01:41, 19 October 2017 (UTC)


 * has been archived already, but should definitely be split away from this SPI. I've received various info off-wiki to support this and subsequently found more users that seem linked to the three in the archive. SmartSE (talk) 16:20, 19 October 2017 (UTC)
 * is there anyway you could email me with your rationale? Would you like a separate case created? Thanks, GABgab 18:29, 27 October 2017 (UTC)
 * I suspected in the previous report with Gogig1234 that use of services to evade detection is a hallmark of this sockfarm, but if you have other evidence that Gogig1234 really is a separate case, I have no problem splitting them. However:


 * - all of these users have already been checked and found variously "possibly" or "[un]likely" to Commanderofthescript. Please check for relationships within this group:
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)
 * Ivanvector (Talk/Edits) 13:29, 3 November 2017 (UTC)

Hopefully this will clarify. These users have been on similar ranges and even on the same IP, in (country A): On a nearby IP, no coincidence: Then, in (country B) on another continent: on one range. And on another range in (country B): No user has edited from more than one country. The last two accounts are as near to confirmed as can be stated. The middle group are less confirmed, plus it's possible there's a proxy involved but I'm not very convinced. Commanderofthescript is in (country C) on a third continent. From what I can tell, User:عثمان خلیل is/was in (country A). -- zzuuzz (talk) 15:36, 3 November 2017 (UTC)
 * Perfect, I think this is just what we needed. I'll leave this for GAB since there may be off-wiki communication I don't know about, but it looks to me like there are three groups here separate from Commanderofthescript. Note that Pappig and Zeeshan pappig are already confirmed to each other and Katie found them strongly "likely" to عثمان خلیل. Ivanvector (Talk/Edits) 16:49, 3 November 2017 (UTC)
 * I should've pinged (pang? pung?) you 3 weeks ago. Did you have anything off-wiki that affects what we can see here? Ivanvector (Talk/Edits) 13:53, 23 November 2017 (UTC)


 * The gist of the communication was Smartse's indication that Gogig1234 (and maybe Erin93) are meatpuppets of COTS. If so, it makes sense to keep this case together. What makes it tricky is that there are Gogig123 socks that are unrelated to COTS. GABgab 15:30, 23 November 2017 (UTC)
 * I the two older Amirshahat socks, and  the final group. Everyone is now tagged, including the master and previous socks. Closing. GABgab 20:07, 28 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Both sock and this account have both edited Draft:Steven Swadling -- Jonnycakez's edit and Gogig1234's edit. Both are not the page author, which is a bit strange. Requesting CU to see if 2 and 2 technically add up. ! dave 13:13, 9 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

You might want to check the archives. This 'another continent' thing appears not new, and there is a deliberate attempt to confuse CU/meatpuppetry. ! dave 14:15, 9 January 2018 (UTC) — Berean Hunter   (talk)  14:21, 9 January 2018 (UTC)
 * I did and I also checked the CU log which is where I derived the IPs for Gogig1234 because they are stale for CU purposes. I have no problem if a clerk wants to relist for another CU opinion.
 * Having been involved in the previous cases, I can confirm the CU results are different to any previously seen (this is actually a fourth continent). That doesn't rule out meatpuppetry of course.. -- zzuuzz (talk) 14:23, 9 January 2018 (UTC)
 * Good thing there are only seven continents.--Bbb23 (talk) 14:39, 9 January 2018 (UTC)
 * You sure about that? GABgab 01:55, 10 January 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
They appear ❌ as they are on different continents. — Berean Hunter   (talk)  14:09, 9 January 2018 (UTC)
 * Case closed with no action.  Vanjagenije  (talk)  22:16, 30 January 2018 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Recreation of 's Farouk Yahia as Farouk Yahia (singer). Also including an older account for records and obvious overlapping edits on Hany Shaker with, etc... CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  15:38, 19 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The two are blocked and tagged. CLosing.  Vanjagenije  (talk)  22:31, 30 January 2018 (UTC)