Wikipedia:Sockpuppet investigations/Marianwolfe86/Archive

29 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

During AfC, Marianwolfe86 created the draft Richard A. Kimball, Jr. After it was declined, Itscamilla continued the edits. (history). The article was accepted but immediately was listed at AfD. During the AfD two accounts, Donnatar (Special:Contributions/Donnatar) and Uruquart (Special:Contributions/Uruquart), responded to the AfD although those accounts had not done any previous edits. Articles_for_deletion/Richard_A._Kimball,_Jr. The editing accounts, Marianwolfe86 and Itscamilla, may have a COI because both of those appear to had edited few articles and only articles for companies and executives. These two could be different persons working for a PR company. The accounts that responded to the AfD are more likely to be socks. (This is my first SP notification -- let me know if I could have done anything differently. Thx.) LaMona (talk) 19:23, 29 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Marianwolfe86 is . Other three should be compared to each other (Itscamilla heavily edited Richard A. Kimball, Jr. while the other two appeared only to vote "keep" at the AfD ).  Vanjagenije  (talk)  00:43, 30 July 2015 (UTC)
 * Group 1 - The following accounts are ✅:
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * Group 2 - The following accounts are ✅ and to Group 1:
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)
 * All accounts blocked and tagged. Closing.--Bbb23 (talk) 23:20, 30 July 2015 (UTC)

31 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

While cleaning up spam, I noticed a bunch of account externally linking "Richard A. Kimball Jr" on a variety of articles. It looks like some SEO spamming is going on. Since all of the previously listed accounts have a connection to the Richard A. Kimball, Jr., I thought I would list the accounts I ran into here for confirmation of them being sockpuppets and to also hunt down other sleepers.

Links of accounts adding in external links: Accounts are also spamming links to "Ted Virtue":
 * Jmalone47:
 * Flawson22:
 * Sammycarls:
 * Martinwolfejr:
 * Jjthomasian:
 * Themanzack:
 * Kimmynelson67: [https://en.wikipedia.org/w/index.php?title=House_call&diff=prev&oldid=649024045
 * Lapamnikita:
 * Garethwams:
 * Pgary93:


 * Jjthomasian:
 * Kimmynelson67:
 * Lapamnikita:
 * Mejameskirk:
 * Kvinrog:
 * Cinandrews:
 * Thejakeroo:
 * Stephmeyer88:
 * Garethwams:
 * Pgary93:
 * Carollinathomas:

I know that some of these accounts are stale. -- Gogo Dodo (talk) 06:58, 31 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I would support a CheckUser to see if it is one person making several names to fly under the radar or possibly employees or other people connected to him. I strongly suspect this person is not familiar with how Wiki works or to my less suspicion, intentional. SwisterTwister   talk  17:09, 31 July 2015 (UTC)
 * The same AfD appears to be spawning new socks by the hour: User:Ikhulor, User:Baltvilks, User:Normannsdottir, User:Alexanderkurov, User:WaltherGeo LaMona (talk) 15:30, 3 August 2015 (UTC)
 * Are those accounts connected to this SPI? They're listed in a different one, Sockpuppet investigations/Baltvilks. —David Eppstein (talk) 21:35, 3 August 2015 (UTC)
 * Sorry, I got confused. Yes, this one belongs in Sockpuppet investigations/Baltvilks. LaMona (talk) 00:15, 4 August 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've declined the CU request. All of the accounts are .--Bbb23 (talk) 01:45, 1 August 2015 (UTC)
 * My apologies. I misremembered the log archiving length.  I thought it was longer than what it is. Next time I'll remember! -- Gogo Dodo (talk) 03:32, 1 August 2015 (UTC)


 * What those accounts have to do with Marianwolfe86? Explain the connection, please.  Vanjagenije  (talk)  20:11, 3 August 2015 (UTC)
 * Sorry, no connection. I got confused between ongoing investigations. LaMona (talk) 00:16, 4 August 2015 (UTC)
 * We can't run a CU because all accounts are stale. Feel free to block them on behavioral evidence. I/m closing this case.  Vanjagenije  (talk)  00:25, 4 August 2015 (UTC)  Vanjagenije   (talk)  00:25, 4 August 2015 (UTC)
 * I blocked all of the accounts and also the sockmaster. -- Gogo Dodo (talk) 04:03, 4 August 2015 (UTC)

06 November 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Continued spamming of Richard A. Kimball, Jr. as all previous socks. And creation of new Richard Kimball articles. See contribution history, deleted contributiins and talk page discussions, Also, additions to the same articles:
 * sock, and Marchingnews at Peter_George_Peterson;
 * sock and Marchingnews at Midas List;
 * sock and Marchingnews about Datapalooza;
 * sock and Marchingnews on early Kimball immigration

I have indefinitely blocked account per WP:DUCK — Cactus Writer (talk) 22:10, 6 November 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * As the account is blocked and no further action is requested I'm closing the report.-- Jezebel's Ponyo bons mots 22:43, 6 November 2015 (UTC)

25 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

DonnatarCastle created the articles Richard A Kimball Jr. which is/seems to me a puff piece for Kimball. DC also created PM360 which was used to big-up Kimball and his company HExl Healthcare.

PM360Editor added links to PM360 to several articles including Richard A Kimball Jr..

Healthcarenews2016 created HExl Healthcare and edited Kimball's article.

They appear to have created a little walled garden of promotion for Kimball and his business interests, presumably sharing the load so as to avoid the taint of association between the articles and to avoid the editor being tagged as promotion-only. Bazj (talk) 12:42, 25 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The three accounts are very . They would be ✅ if they weren’t hiding behind proxies. Blocked, tagged, closing.--Bbb23 (talk) 16:30, 25 January 2016 (UTC)

Suspected sockpuppets

 * Non-stale accounts->


 * Stale accounts->


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Healthcare Joe created Richard A Kimball Jr, an obviously evasive copy of the master's previous Richard A Kimball Jr. and Richard A. Kimball Jr. As soon as HJ's account was tagged for COI the other socks piled in. TheNewsHerald2000 also created HEXL Advisors, a close match for HExl Healthcare one of the master's other fixations. Multiple socks edited Tuxedo Park: The Gift of Nature for (talk)  06:54, 30 July 2016 (UTC)
 * Adding Sandy merc whose edit on Accretive Health fits the pattern., also the addition of Kimball to List of Brookings Institution scholars. for (talk)  07:03, 30 July 2016 (UTC)


 * The revision history of Daily fantasy sports throws up a number of other editors with similar low-levels of contributions suggesting they may also be burner accounts, User:Staggerwing63 (though the talk page suggests they were just a passing spammer),User:Gamblreview, and User:Wendywelsh87.
 * The revision history of Holly Peterson (Kimball's ex) also reveals, in addition to Philnews2016, Michaelstangland who may be another sock, or just coincidentally obsessive.
 * The contributions of the previously blocked sock Marchingnews2015 confirm the link from the sock group to many of the articles edited by the new socks. for (talk)  07:35, 30 July 2016 (UTC)
 * , as well as the obvious risk of sleeper accounts,
 * the large number of new socks
 * the new topics of fixation (Tuxedo Park: The Gift of Nature, Daily Fantasy Sports Sharks, Justin B. MacMahan), and
 * the fact that many of Marian's new contributions are being deleted without any link to the sock-behaviour,
 * all leave a low level of confidence that the list of socks reported is exhaustive. Regards, for (talk)  07:25, 1 August 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I am having trouble understanding the charges against me on this matter. Are you saying that because some topics bear similarities to other articles they are indeed the same person? I am pretty sure you can find such coincidences across many wiki topics. Can you please explain if there is any content notability issues or is this just a sockpuppetry issue which may indeed be a problem with the server or internet provider? I do not understand why you are taking down articles that took time to put together due to technical issues that are beyond the editors control. TheNewsHerald2000 (talk) 10:28, 2 August 2016 (UTC)

Why are you deleting an article that has no notability issues? I made this post directly from a new static connection and there is no Sockpuppetry. Can we please focus on the notability issues rather than the technical which may be in error. 06:27, 3 August 2016 (UTC)TheNewsHerald2000 (talk)

Clerk, CheckUser, and/or patrolling admin comments

 * I've asked the reporter to indicate the reason(s) why he's requesting CU attention. I can make an educated guess, but it would be better for the reason(s) to be stated explicitly.  —  Rich wales (no relation to Jimbo) 06:10, 1 August 2016 (UTC)
 * for sleeper check. —  Rich wales (no relation to Jimbo) 13:42, 1 August 2016 (UTC)
 * In the last checks I satisfied myself as to the probable location of the master but also found that the socks often used proxy servers, which were unrelated to their real location.
 * The three non-stale accounts listed here are superficially . However, although, Themarchoftime2016 and TheNewsHerald2000, based on their location and their use of proxies, at least one of which is identical to one of the proxies used last January, are probably operated by the master. Wendywelsh87, on the other hand, is apparently in fact unrelated. She is editing from a legitimate ISP on a different continent. No other accounts were found that match any of the three accounts.--Bbb23 (talk) 17:23, 1 August 2016 (UTC)
 * Based on a post to my Talk page about TheNewsHerald2000's recreation of the Kimball article using yet another article title, Richard A Kimball Jr. - Healthcare Expert, I've rechecked TheNewsHerald2000. Although the account continues to use webhosts to edit, including one more used before by the master, it has also used IPs that pinpoint his probable true location, which matches the master's. I've therefore blocked and tagged TheNewsHerald2000 based on a combination of technical and behavioral evidence. I've also deleted the article per G5. I've done nothing with Themarchoftime2016 as the account has not edited since June 2016.--Bbb23 (talk) 14:24, 1 September 2016 (UTC)


 * Bbb23 seems to have dealt with this pretty thoroughly, and there seems to be nothing more to do, so I am closing the investigation. Every account is either blocked or hasn't edited for several months, so that no further action is needed. The editor who uses the pseudonym "JamesBWatson" (talk) 10:44, 14 September 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Creating articles about Richard A. Kimball, Jr. and Justin B. MacMahan, per past socks, and editing the page titles in similar ways to get around the fact that these titles are salted against recreation. McGeddon (talk) 09:57, 30 September 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
relentless promo of Richard Kimball is a hallmark of this sockfarm; if it's not one user then it's coordinated meatpuppetry. Please block this account. Ivanvector (Talk/Edits) 00:31, 21 October 2016 (UTC)
 * Ivanvector - ✅.  ~Oshwah~  (talk) (contribs)   00:34, 21 October 2016 (UTC)
 * Tagged and closed. Ivanvector (Talk/Edits) 00:36, 21 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

A new SPA promoting Richard Kimball again, at a new, salt-dodging title of Rick (Richard) Kimball Jr. McGeddon (talk) 09:44, 18 October 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Simply a clarification. see:


 * Articles for deletion/Richard A. Kimball, Jr.
 * Articles for deletion/Richard A Kimball Jr. - Healthcare Expert
 * Articles for deletion/Richard Kimball (pianist / composer)

--Shirt58 (talk) 11:11, 18 October 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
-, but please check for sleepers versus the July 30 investigation. Previous investigations have shown that this user likes to create many accounts at the same time. Ivanvector (Talk/Edits) 00:34, 21 October 2016 (UTC)
 * Jerwincrico is probably ❌, but the technical data in this case is often messy; I would rely on behavior.
 * As an aside, Justthefacts2000 is very to .--Bbb23 (talk) 01:27, 21 October 2016 (UTC)
 * sorry, I wasn't clear in my statement. The behaviour is convincing enough to block Jerwincrico, also I thought a sleeper check was warranted. Ivanvector (Talk/Edits) 03:39, 21 October 2016 (UTC)
 * Ivanvector - ✅.  ~Oshwah~  (talk) (contribs)   04:05, 21 October 2016 (UTC)
 * Case closed.  Vanjagenije  (talk)  07:29, 21 October 2016 (UTC)