Wikipedia:Sockpuppet investigations/Cricket Butterfly/Archive

Suspected sockpuppets
Looking at various Indian-related films, I found a common pattern as it related to user:Tintin Phoneix. Looking at Commando 3, it was also edited in June of this year and December last year by similar username styles (user: Action Titan and user:Cricket Butterfly). There are a few other pages with cross edits (The user interaction results are interesting) but summarizing the best evidence is that Tintin Phoneix writes excessive quotes for critical receptions. Note that Action Titan made a similar addition for critical reception to the page Anna Bond, with follow up edits by Tintin Phoneix only 15 minutes later. User:Cricket Butterfly also created the page Ghost (2023 film) which was edited by Tintin Phoneix 4 minutes after Cricket Butterfly’s last edit and only 16 minutes after the page was originally created. The similar usernames, editing style, and cross editing of same pages makes me believe these accounts are connected, especially given the level of SPI activity in film-related pages lately. Note that Tintin Phoneix and Action Titan also both edit from Android mobile, and while Cricket Butterfly's edits are not tagged as being from Android, it is the older account and marked as mobile edit. (FYI for CU - note the spelling for Phoneix is NOT Phoenix which I misspelled several times while compiling this information). CNMall41 (talk) 21:28, 17 December 2023 (UTC)
 * Also note that of the four pages created by Cricket Butterfly, all of them were edited by Titan Phoneix on the same day of creation. --CNMall41 (talk) 21:33, 17 December 2023 (UTC)
 * Adding user:Yethin Nanba with similar username style. Some of their page creations also include Titan Phoneix editing shortly after creation. Also mobile edits. --CNMall41 (talk) 21:41, 17 December 2023 (UTC)
 * , is it possible to block these accounts as Tintin Phoneix is still editing?--CNMall41 (talk) 04:56, 20 December 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ The other two are stale but given the naming and intersection I'd guess they're probably also socks. Izno (talk) 17:55, 18 December 2023 (UTC)
 * Blocked Cricket Butterfly and the two confirmed above. Deor (talk) 20:43, 21 December 2023 (UTC)

Suspected sockpuppets
User:Tintin Phoneix (Sock of Cricket Butterfly) blocked on December 21, 2023. User:56Kite creates account on December 23, 2023. Both are editing from an Android mobile device which is common for this sock farm as well as the sock farm for Nauman335. I am unsure of which farm this would belong to at this point with so many film-related socks and UPE going on, but brought it up because of the Android editing. The username would also be more common to the Nauman335 socks. User:56Kite's first edit was to Kaiva (2023 film), a page heavily edited by SOCK Tintin Phoneix prior to their block. Both Tintin Phoneix and 56Kite seem to focus on the reception and plot sections of film-related pages as well. Interaction tools seem to be down at the time I am filing this so did some manual history check and see that 56Kite also edited Idaten Jump as one of their initial edits, a page that was edited by both Cricket Butterfly and Tintin Phoneix. Next page I checked was Kaatera which was edited by 56Kite after the block of Tintin Phoneix who also edited the page. CNMall41 (talk) 06:32, 11 January 2024 (UTC)
 * Actually, interaction tools just came back up and Tintin Phoneix and 56Kite have edited many of the same pages. --CNMall41 (talk) 06:36, 11 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅; also what looks like a sleeper, . Closing.  Girth Summit  (blether)  09:11, 11 January 2024 (UTC)

Suspected sockpuppets
Last sock blocked on the 11th of January, Zoro Kumar creates account on the 12th. Similar styled usernames and editing from Android phone. Adding recption section to Boxer (2015 film) similar to already blocked sock Tintin Phoneix (example is here for another film). CNMall41 (talk) 18:44, 14 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Dreamy Jazz talk to me &#124; my contributions 22:09, 14 January 2024 (UTC)
 * ✅ Dreamy Jazz talk to me &#124; my contributions 22:09, 14 January 2024 (UTC)
 * Dreamy Jazz talk to me &#124; my contributions 22:10, 14 January 2024 (UTC)

Suspected sockpuppets
New accounts associated with Cricket Butterfly based on the following:
 * Account Devil Alby created on January 16, 2024, account Haddock Archibald created on January 17, 2024. Same naming styles and editing same pages according to the editor interaction analyser.
 * Above listed interactions took me to Indian Police Force (TV series) to see the edits between Devil Alby and Haddock Archibald (since they were withing 2 minutes of each other). This led me to find Account Jennifer M Penty who also edited the page a few hours before the other two. Analyser shows that account editing same pages as Haddock Archibald (note these two accounts using the same OS).
 * Devil Alby shows similar editing and cross editing as sock Tintin Phoneix (blocked sock of Cricket Butterfly – the majority of which socks have similar naming styles).
 * Devil Alby also shows similar editing and cross editing as sock 56Kite (now blocked sock of Cricket Butterly).
 * All accounts seem to be editing plots and reception information on film-related pages known for sock activity. Last known sock of Cricket Butterfly is user:Zoro Kumar which was banned on January 14, 2024, two to three days prior to the creation of the new accounts listed.
 * Final evidence I found which caused me to file this SPI is the editing of page Aadi Lakshmi. The last four edits at the time of this filing were made by Haddock Archibald and Devil Alby. Prior to that, blocked sock 56Kite had edited the page without only two edits between (one by an experienced user and the other by an IP known to be associated with the Indian film related sock farms).
 * Note that one sock is editing from Android OS which is normally associated with Nauman335 sock farm. However, the most recent SPI for Nauman335 shows that the accounts are now using multiple devices so these could also be connected to that farm. CNMall41 (talk) 02:45, 4 February 2024 (UTC)
 * User:Thalapathy Leo (same username style as Cricket Butterfly and their socks), creates account on December 18, 2023. Caught my attention from an edit they made on Leo (2023 Indian Film), a page previously heavily edited by Tintin Phoneix (now blocked sock of Cricket Butterfly). User interaction analyser shows cross editing on many of the same film-related pages. One such page (Animal (2023 Indian film), also being edited by user:Haddock Archibald. User:Thalapathy Leo also editing Bheeshma (2020 film) which was edited by both Tintin Phoneix.

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * -  Girth Summit  (blether)  18:03, 4 February 2024 (UTC)
 * and are ✅ to one another and to past socks.  looks different, and is ✅ to .  looks different again, but is doing a lot of inappropriate loutsocking, and is ✅ to the following accounts:
 * The editing pattern looks highly suspect, and I'm not prepared to AGF with so much account swapping and logged-out editing. Blocking all. Girth Summit  (blether)  18:14, 4 February 2024 (UTC)
 * I managed to tie Dr. Kaynaat to a confirmed sock of, so that resolves how to tag them. Closing. Girth Summit  (blether)  18:20, 4 February 2024 (UTC)
 * The editing pattern looks highly suspect, and I'm not prepared to AGF with so much account swapping and logged-out editing. Blocking all. Girth Summit  (blether)  18:14, 4 February 2024 (UTC)
 * I managed to tie Dr. Kaynaat to a confirmed sock of, so that resolves how to tag them. Closing. Girth Summit  (blether)  18:20, 4 February 2024 (UTC)
 * I managed to tie Dr. Kaynaat to a confirmed sock of, so that resolves how to tag them. Closing. Girth Summit  (blether)  18:20, 4 February 2024 (UTC)

Suspected sockpuppets
Accounts overlap with Jomontgeorge, Cricket Butterfly, and possibly Nauman335.


 * Double iSmart, created by now blocked sock Milli’s Boy, also edited by three new\spa accounts with similar usernames (Anjithkumars04, Arun0022, and Aryaraj12).
 * Note that SPI was filed for Arun0022 here in another film-related sock farm (CU pending). Created Draft:Thandel 2024 under disambiguation due to it previously being deleted for UPE.
 * GarvitChouhan2005 is another account who edited Double iSmart and has a similar username as the other three who edited. They have also edited a TON of the pages that other socks have, most recently those by Arun0022.
 * OG (upcoming film) edited by GarvitChouhan2005, Arun0022, and similar usernamed accounts (Prudhvi17, Siva chaitanya42 – note within the same day). This was a page previously edited by NaanReady (now blocked sock of Jomontgeorge).


 * NOTE - Also emailing private evidence of additional accounts likely involved. CNMall41 (talk) 05:28, 6 February 2024 (UTC)
 * , did you find the email sent to the CU email address? There is some additional information with more experienced users involved which would likely help tie everything together. --CNMall41 (talk) 21:59, 20 February 2024 (UTC)
 * And, I am likely to post it publicly at this point as it seems even more convincing with recent edits I have seen. --CNMall41 (talk) 22:15, 20 February 2024 (UTC)
 * , I just added user:Garvit2005 to the list which is also similar to the username GarvitChouhan2005, both of which edited Draft:War 2 within 24 hours of each other. That draft also has a lot of SPAs an IPs which are likely associated but will leave that up to you if you feel they should be included in a CU. --CNMall41 (talk) 18:51, 23 February 2024 (UTC)
 * @CNMall41 I'd put those two as the same person or at least closely connected. They're using different devices but they're on the same very small range which can't be a coincidence given their shared interests. HJ Mitchell &#124; Penny for your thoughts?  20:27, 23 February 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Hi DreamRimmer, I Have been block by Editing the wikipedia.
 * Note: I have received an email from User:Milli's Boy with the following content.

Please check this

I Want your Help in this matter, If Possible please do the needful!

Thanks in Advance. <b style="color:black; font-family: Tahoma">DreamRimmer</b> (talk) 13:12, 6 February 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * From a purely technical perspective, I can't connect any of these accounts. I haven't checked every account in the list and gone as wide as possible on every range but on the checks I've done I've seen no overlap except that a couple of the accounts are on a huge and very busy range but with different UAs. I'll leave it open for another CU. Perhaps someone with more experience or expertise will find something I missed. <b style="color: teal; font-family: Tahoma">HJ Mitchell</b> &#124; <span style="color: navy; font-family: Times New Roman" title="(Talk page)">Penny for your thoughts? 22:35, 17 February 2024 (UTC)
 * It's a fairly consistent hallmark of organized sockmasters that once one of their socks is named, they stop using it. None of the unblocked accounts above have edited since they were reported, which is a pretty good indicator that they are sockpuppets. This has been left open too long for a new check to be useful; closing with no further action. Ivanvector (Talk/Edits) 15:15, 22 April 2024 (UTC)

Suspected sockpuppets
Filing under MASTER Cricket Butterfly but in the evidence below it may overlap or belong to another.
 * Archery minded account created on February 10, 2024.
 * Caught my attention for addinOG (upcoming film) to Shaam (actor) on February 24th. Note that Shaam was added to OG by 2A02:C7C:50C2:5C00:20E6:8DB5:9331:A929 on February 25th, approximately one day after being edited by Archery minded. Note that OG was created by an IP likely as LOGOUTSOCK, and heavily edited by user:NaanReady (sock of Jomontgeorge), Garvit2005 (sock of Cricket Butterfly), Doomsday9917 (sock of RAPO23), GarvitChouhan2005 (sock of Cricket Butterfly), Arun0022 (sock of Naveen Areti), and Falimy (sock of Cricket Butterfly) - (ALL of these in less than a year so it is a sock target and likely UPE).
 * Another account with similar username style (Manvith 007) created on January 13, 2024 also editing OG. User interaction tools shows Manvith 007 and Archery minded editing quite a few pages that are sock targets, one of which is Hanu Man which was heavily edited by Falimy until their block on the 5th of February (coincidentally editing on that page was picked up by Manvith 007 on the same day).
 * Speaking of similar usernames, Manvith 007 edited the page Sujeeth which was previously edited by user:Super Manvith who was blocked previously for ignoring community concerns. That account may be past the ability of a CU but listing above regardless.
 * I went one step further and searched SPI archives for stylings of names that included Manvith and found this which could be connected. CNMall41 (talk) 04:56, 26 February 2024 (UTC)
 * IP now editing same articles directly after Archery minded. Adding to list for CU. --CNMall41 (talk) 22:21, 26 February 2024 (UTC)
 * , Thanks again for the hard work. I did some more digging and believe that Manvith 007 is connected to Manvith Marupudi. Similar username to those in that investigation and editing same topics. The user interaction tool shows a ton of same page editing despite Manvith 007 only having 187 edits. Should I file under that SPI? --CNMall41 (talk) 06:40, 1 March 2024 (UTC)

, Thanks for the work on this. I know it is long. Are you able to review the above statement about Manvith 007 and advise? Wondering if this can be a quick CU with the other farm or if I should file a new SPI for that?--CNMall41 (talk) 17:37, 14 March 2024 (UTC)


 * I did read your statement, but I thought the evidence was too thin to connect the account to anything without technical evidence. If there's new evidence, a new SPI should be filed. Also worth noting that manvith translates to "human", so users having it in their username isn't necessarily a solid indicator. <span style="font-family:Papyrus, Courier New">The Wordsmith Talk to me 17:49, 14 March 2024 (UTC)
 * , thank you. To clarify, you don't see enough to justify a CU for this SPI or for both this and master Manvith Marupudi? Wondering if I should file an SPI under Manvith Marupudi since it is likely connected there or if that was something you looked at and don't think there is enough to connect that one independent of this?--CNMall41 (talk) 16:37, 18 March 2024 (UTC)
 * I did take a look at the behavioral evidence presented as well as doing my own independent analysis, I found it too thin to determine that the accounts were connected. It can sometimes be difficult to distinguish between a sockpuppet and two different people who have an interest in Indian cinema/media. With no technical evidence and little behavioral evidence, it seems more likely than not that Manvith 007 is a different person. If you're convinced otherwise, the best option would be to wait for more evidence that looks sock-like based on future editing patterns, and then file a new SPI when you have more conclusive evidence. If their editing is problematic in other ways (like spamming, adding unsourced material, edit warring etc) that can be handled through the normal channels instead. <span style="font-family:Papyrus, Courier New">The Wordsmith Talk to me 19:13, 18 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Archery minded looks a heck of a lot like ; blocking. Manvith 007 looks different, and I don't see anything technical linking them to any other account we have data for.  Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  10:15, 29 February 2024 (UTC)
 * IP has been schoolblocked, insufficient evidence to connect Manvith 007 to the rest. Closing. <span style="font-family:Papyrus, Courier New">The Wordsmith Talk to me 20:33, 12 March 2024 (UTC)

Suspected sockpuppets
Took a minute to determine if this was a sock for Cricket Butterfly or Nauman335 since both farms are likely the same and cross edit. RamKrishna1975 created account on February 24, 2024, a day after SOCK GarvitChouhan2005 was blocked. Same username styling and both from same operating system (Android app). Most obvious is Ajay Devgn filmography where RamKrishna1975 and GarvitChouhan2005 both edited, also noted another account with only a single edit (AwesomeDavid10) having same username style. Another is Lakshya (2004 film) where both have edited. CNMall41 (talk) 21:43, 8 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * is ✅ to and .  has been inactive long enough that there is very little data;  is what I'd call it, and with only a single edit I'd be unwilling to block on behavior. Vanamonde93 (talk) 00:00, 11 March 2024 (UTC)
 * <span style="font-family:Papyrus, Courier New">The Wordsmith Talk to me 20:27, 12 March 2024 (UTC)

Suspected sockpuppets
Filing under Cricket Butterfly as most likely, but may also connect to Nauman335 sock farm as we have seen with a few others. New accounts - Anil 2196 created on March 17, 2024 and Albert Minto created on March 21, 2024. Same operating system, but that aside, the most telling is their editing on the page Singham Again which is a common target of Cricket Butterfly and last sock edited was RamKrishna1975 who was blocked on the 11th of March.
 * Anil 2196 working on Draft:Syedhwan which was originally created by IP:49.205.112.96, who also edits same topic Kavya Thapar (which is also an Anil 2196 target). Coincidentally, Kavya Thapar was a target of Milli's Boy, another blocked sock of Cricket Butterfly so these socks are just picking up the work where the others left off.
 * user:Albert Minto is active at Devara: Part 1 which was a common target of user:Archery minded, another now blocked sock of Cricket Butterfly. Other pages they have edited of Cricket Butterfly socks include Kalki 2898 AD, OG (upcoming film), and Vettaiyan. CNMall41 (talk) 17:55, 25 March 2024 (UTC)
 * , thanks for the check. If you feel frisky, there is IP information available at Draft:Syedhwan which is likely LOUTSOCKing and may tie Anil 2196. If not, no big deal as I know they will be back for more. Thanks again. --CNMall41 (talk) 18:36, 27 March 2024 (UTC)
 * I've looked at those IP addresses now. There's no narrower overlap I'm afraid. <b style="color: teal; font-family: Tahoma">HJ Mitchell</b> &#124; <span style="color: navy; font-family: Times New Roman" title="(Talk page)">Penny for your thoughts? 19:06, 27 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Albert Minto is ✅ to GarvitChouhan2005 from February and RamKrishna1975 from above. It's that Anil 2196 is the same person. The overlapping range is a /14 which would be huge anywhere but in the part of the world you can infer that these accounts are from that's enormous. I'll block and tag the former and leave the latter for behavioural evaluation. <b style="color: teal; font-family: Tahoma">HJ Mitchell</b> &#124; <span style="color: navy; font-family: Times New Roman" title="(Talk page)">Penny for your thoughts?  18:04, 27 March 2024 (UTC)
 * Anil 2196 was blocked separately a few days after this report, so there seems to be no more to do here. Ivanvector (Talk/Edits) 15:16, 22 April 2024 (UTC)