Wikipedia:Sockpuppet investigations/Katine67/Archive

Suspected sockpuppets
-- MarioGom (talk) 22:33, 5 September 2022 (UTC)
 * This is a UPE business (I can send off-wiki evidence of this).
 * All timecards are consistent with US office hours, mostly weekdays.
 * Katine67, Star7924, Hero921, and TheRealSerenaJoy signal they are professional writers, public relations, marketing professionals, or copywriters:
 * Katine67's bio describing themselves as a digital marketing consultant.
 * Hero921 describes themselves as a copywriter for 30 years.
 * Star7924 is a public relations professional and professional writer.
 * TheRealSerenaJoy user page has a section in their user page with a list of [organic] article creations, this is digital marketing jargon.
 * 10sne1 described in a talk page how they are publishing commissioned work.
 * Other user page similarities:
 * 10sne1 and TheRealSerenaJoy signature colors and font in user page.
 * Compare user pages for WikiSzeman and HedgeFundReporter: e.g. learning as I go along
 * 10sne1 casually edited Katine67's as if it was their own . Described in a talk page how they are publishing commissioned work.
 * Page or topic overlaps:
 * Most accounts overlap on /, except WikiSzeman and Star7924.
 * 10sne1 and Hero921 overlap at and . HedgeFundReporter also spammed RepRisk.
 * / were edited by Star7924, BlakesMa, WikiDidi99, PoliticMurray, and PluckyOriginal.
 * PluckyOriginal and TheRealSerenaJoy overlap on.
 * Behavior:
 * Editing style and edit summaries are quite characteristic, with some quite unique matches, e.g. TheRealSerenaJoy/WikiDidi99, 10sne1/Hero921 , Katine67/TheRealSerenaJoy.
 * Note that WikiSzeman also used 50.254.88.92 to reinstante some link spam after it was reverted. I don't think there was any attempt at CU evasion there, so CU might be effective.

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Fantastic investigative work, I have to say. Pilaz (talk) 00:55, 6 September 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * GeneralNotability (talk) 01:04, 6 September 2022 (UTC)
 * Findings:
 * PluckyOriginal is ✅ to, who has edited the Kelley article. I also see multiple attempts to log into , whose userpage fits the pattern.
 * Hero921 and PoliticMurray are ✅ to one another. I'm calling them a weak to the PluckyOriginal group (same semi-common UA, geolocation is a little ways from the first but within a reasonable margin of error)
 * TheRealSerenaJoy and 10sne1 are ✅ to one another and to the above groups, similar deal - same UA, geo's a little off of the first group but pretty close to the Hero group.
 * BlakesMa and Star7924 are ✅ to one another - I have failed logins to BlakesMa immediately followed by a successful login to Star. This was on a colo/webhost, so can't tell you how they relate to the other groups.
 * HedgeFundReporter and WikiDidi are a weak likely to each other and the other groups.
 * WikiSzeman and Katine are and I didn't stumble upon any login attempts elsewhere.
 * I'd say there is a reasonable chance that there are multiple individuals operating the accounts here, for what it's worth. GeneralNotability (talk) 01:39, 6 September 2022 (UTC)
 * Between MarioGom's analysis, the technical findings, and just a look at the contrib histories of the accounts involved, I feel pretty darn confident that everyone here is at least UPE and pretty likely to all be related to each other. the lot. GeneralNotability (talk) 01:42, 6 September 2022 (UTC)