Wikipedia:Sockpuppet investigations/Marek.kapicak/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These two users used exactly the same non-trivial ACPERM gaming technique (see contributions and the deleted contributions, they're clearly not a new editor) to post their respective spam pages. Obvious, but as usual with UPE it is worth looking for more spammers. MER-C 15:03, 15 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
After some find-and-replace wizardry, here's a list: --Blablubbs&#124;talk 17:56, 17 May 2021 (UTC)
 * - per filer; someone was kind enough to show me screenshots of the deleted contribution histories, and there is indeed a fairly unique pattern here. --Blablubbs&#124;talk 11:25, 17 May 2021 (UTC)
 * ✅ these two. I don't get what's going on here, and I'd like another CU to look in particular at the /64. There's a whole lot of accounts with only a few edits -- and none on the /64, just logging in from there -- but almost every one is the creation of a biography. Most of them only edit the article they created. None are blocked. --jpgordon&#x1d122;&#x1d106; &#x1D110;&#x1d107; 16:58, 17 May 2021 (UTC)
 * ✅ Gropdown, Leoprema, LiuCharlene, Leuchtturm 5, Eromdaneel, YDeemron, Raúl Maya, Opay.990, Pgbh, Nepstar1, Wikiuser20181003, Fant2, Klizrasw, SEMIdayez, Beloddree, Maygol Bandehali, Quantumexpert, L.yoval, ThriveUp, Nadeeka Dissanayake, Challer900, Silfgrove, Paploo.Kulkarni, Tbase26, Lamsonflam, KCL Robert, Sandeepshr, Ananishc, Mrlampert, Ananish, Nermcain, Jenny.jiangke, Swetak.Pradhan, RenomZali, Oelpoast, Lodetome91, Marek.kapicak, Bedra pumin, Sefgriod, Oesalzity, Mmannino0, Erryjames78, Zingabell, AlPasal25, Seolnoot, Ediosmith, Atlantic1111, LCKS, Serincrome, Samantajames, Alghamdisaaleh, MalboMalbo, Observer36 and Froplemna. If someone cares to put that in a CU template, be my guest. I blocked them all except the first 5 already done. -- Amanda  (aka DQ) 17:36, 17 May 2021 (UTC)
 * Moved to oldest, tagged, closing. Per, G5 date is 14 April 2021. --Blablubbs&#124;talk 17:58, 17 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Identical TTPs. CU was very productive last time, so requesting again. MER-C 16:06, 4 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Yup, same gaming technique (BEANS!). for a sleeper check. --Blablubbs (talk) 21:27, 4 September 2021 (UTC)
 * The following accounts are ✅ to each other and technically to Marek.kapicak: Wsioldrean, EricKvane, Werindrave, Treysingleton, Mjkboston, AveryJo, Delareolip, Essenlason, Qerdelock, Dpleverston, Olaproven, Sedomlene, Revikumaar, Haman Kulde, Henrytofah, Remtoise, Acohenmd, Ericcrock, DesioLasam, GeneralEditors, Swerloks, Murgle, Whwells, SDelofe, Aubreymaturinsurprise, Ffarolrep and Zackyles. I've blocked and tagged them all. Closing. Callanecc (talk • contribs • logs) 10:24, 5 September 2021 (UTC)
 * Just noting as well that between MER-C and I we've reviewed contribs and deleted pages created in violation of the previous block. Callanecc (talk • contribs • logs) 11:29, 5 September 2021 (UTC)
 * CU-templates for future reference:
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)
 * --Blablubbs (talk) 11:09, 6 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

As before. MER-C 14:35, 16 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
 
 * - same editing pattern, endorsing CU for a sleeper check because it's been effective in the past. Thanks, Spicy (talk) 15:06, 16 October 2021 (UTC)
 * Took a look at this. I'd say that is  to ✅ to . Leaving the rest of the check for another more experienced CU as I was unable to find further accounts, but I'm pretty sure I missed something. I would look further but I need to do IRL stuff. Dreamy Jazz talk to me &#124; my contributions 15:11, 16 October 2021 (UTC)
 * - (following up) ~TNT (she/her • talk) 21:16, 16 October 2021 (UTC)
 * As above, would say is  to . I note proxy use/evasion across the board.  often worth geolocating IP addresses when you can't find accounts (use  as it also checks against shodan/spur). Clerk,  for tagging, but already blocked.  (or proxy use masking) ~TNT (she/her • talk) 21:23, 16 October 2021 (UTC)
 * Thanks for the follow up check. Dreamy Jazz talk to me &#124; my contributions 21:27, 16 October 2021 (UTC)
 * Thanks - Dreamy Jazz tagged as proven, which I think is sensible given the behaviour. Closing. Spicy (talk) 21:27, 16 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

As before. MER-C 19:11, 18 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - same behaviour; please check for sleepers as it has been effective in the past. Thanks, Spicy (talk) 19:39, 18 December 2021 (UTC)
 * - -- TNT (talk • she/they) 23:01, 18 December 2021 (UTC)
 * is to
 * is ✅ to
 * . Noting that there appears to be account compromise attempts going on here -- TNT (talk • she/they) 23:06, 18 December 2021 (UTC)
 * Thanks, closing. Spicy (talk) 23:10, 18 December 2021 (UTC)
 * Thanks, closing. Spicy (talk) 23:10, 18 December 2021 (UTC)

Suspected sockpuppets
Pro-forma, blocked and tagged based on behaviour, logging here for documentation. Spicy (talk) 09:34, 11 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Closing. Thanks, Spicy (talk) 09:34, 11 April 2023 (UTC)
 * I'll add, who is ✅ to . --Blablubbs (talk) 12:00, 11 April 2023 (UTC)

Suspected sockpuppets
Edit history on Draft:FSD Pharma revealed this account. See the entry on User:Vladlmed above. UtherSRG (talk) 15:53, 11 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - account is likely . Spicy (talk) 23:08, 12 April 2023 (UTC)
 * It seems the sockmaster has a tendency to keep old accounts at hand, so blocking for good measure. Closing. DatGuyTalkContribs 11:25, 13 April 2023 (UTC)

Suspected sockpuppets
Most recent editors of Draft:Praveen Moman, which a previous sock had worked on. UtherSRG (talk) 13:53, 29 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Add who is a behavioral match to the archive. MER-C 13:50, 30 March 2023 (UTC)
 * - to compare these accounts and check for others given the history of extensive socking. Thanks, Spicy (talk) 16:02, 30 March 2023 (UTC)
 * CU data is due to use of proxies. .   Girth Summit  (blether)  12:07, 31 March 2023 (UTC)
 * - Draft:Praveen Moman, Draft:Volcanoes Safaris and Draft:Mount Gahinga Lodge are all about the same company, with the last one being particularly spammy. Esme Stewart and EveLaura should be blocked as suspected to Marek.kapicak. : I would like to know more about the behavioral similarities for Welingolmi. If there are too many beans, would you mind emailing me? Thank you. MarioGom (talk) 12:04, 15 April 2023 (UTC)
 * Another clerk already clarified the missing bits about Welingolmi. MarioGom (talk) 13:01, 15 April 2023 (UTC)
 * These were also reported at Sockpuppet investigations/Elxxvs, which I have closed. MarioGom (talk) 12:07, 15 April 2023 (UTC)
 * I've blocked the accounts per 's assessment; closing.  Girth Summit  (blether)  11:24, 20 April 2023 (UTC)

Suspected sockpuppets
Recreated Praveen Moman‎‎ (now Draft:Praveen Moman‎‎) UtherSRG (talk) 16:17, 22 May 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * This is likely to be another spammer. MER-C 16:31, 23 May 2023 (UTC)
 * Are you saying "another spammer" as in not connected to Marek, or "another spammer" as in "yet another Marek sock"? - UtherSRG (talk) 10:52, 30 May 2023 (UTC)
 * Unlikely to be connected: Marek has a characteristic behavior. MER-C 16:11, 30 May 2023 (UTC)
 * I ran some checks against previously blocked accounts which have edited Praveen Moman and/or Draft:Praveen Moman, and along the way, compared to the notes we've got for Marek.kapicak. Nothing looks like a match, so my recommendation is to just treat this as UPE and don't worry about who they're a sock of.I also (strongly) suggest that Praveen Moman and Draft:Praveen Moman be histmerged.  At this point, they both exist, and both have deleted revisions, so it's a pain to get your head around the real history.  Merging them all into a single chronological history would simply future investigations.  I'd also suggest salting Praveen Moman when the histmerge is done. RoySmith (talk) 16:59, 22 June 2023 (UTC)
 * I've performed the merge as requested. - UtherSRG (talk) 15:48, 23 June 2023 (UTC)