Wikipedia:Sockpuppet investigations/Nanseera Tracey/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Per WP:DUCK. Ten days ago, Keemfame20 submitted a promotional Autobiography at Draft:Keem Fame Rich. Earlier today, M7822 created a different but also promotional article which is now at Draft:Keem Fame Rich2. The fact that the two articles were created so closely together and the fact that M7822 made exactly 10 edits to become auto-confirmed before publishing the article indicate that the accounts are at least coordinating with each other for promotional purposes. GPL93 (talk) 15:05, 16 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - there may be many more accounts here. Dreamy Jazz talk to me &#124; my contributions 22:35, 16 December 2021 (UTC)
 * Group 1 all share two different single IPs:
 * Group 2 all used one of the IPs used by Group 1:
 * Group 3 all used the other IP used by Group 1:
 * Group 4 used a single different IP to all other accounts (except M7822):
 * Other technical information for the accounts was all similar for Groups 1-3, with most accounts being active at around the same time. I consider Groups 1 to 3 technically ✅. Group 4 uses slightly different technical information, but with the link through M7822 Group 4 is likely to be the same as Groups 1 to 3.
 * Due to the large number of accounts, this is either a well-intentioned school project (which technical evidence seems to not point towards) or more likely some kind of paid editing group. The ACPERM gaming seen by a number of these accounts may suggest this. Dreamy Jazz talk to me &#124; my contributions 22:48, 16 December 2021 (UTC)
 * Will likely come back to this case to decide if CU blocks are necessary. Dreamy Jazz talk to me &#124; my contributions 23:02, 16 December 2021 (UTC)
 * @Dreamy Jazz I'm not sure what made you think it might be a school project, but I do note that the accounts were created at various intervals over the course of 14 months. Sometimes it was months between creations, but there's a couple of pairs (Nyazazic/Tugenda1990 and Seledon/M7822) that were just a few minutes apart.  That doesn't sound like a school project to me. -- RoySmith (talk) 02:45, 18 December 2021 (UTC)
 * It doesn't to me either. -- The SandDoctor Talk 06:55, 18 December 2021 (UTC)
 * The reason that I suggested a school was that it was one of the few reasons why many accounts might be created from the same IP using similar devices. I don't think it's likely and I think some kind of paid editing is more likely. Dreamy Jazz talk to me &#124; my contributions 11:17, 18 December 2021 (UTC)
 * On further review, I think CU blocks for all are necessary. I waited to apply CU blocks because I was unsure about blocking without having a chance to review the accounts (as I needed to do things IRL). Now that I've had some time to review the edit histories of the accounts in further detail, I think CU blocks are appropriate here given that it is likely to be a paid editing organisation focusing on Uganda. Although no overlap occurs, the ACPERM gaming which is seemingly demonstrated by (and others) suggests this is more coordinated than multiple people using the same IP. Dreamy Jazz talk to me &#124; my contributions 16:35, 18 December 2021 (UTC)
 * I think a review of the creations needs to be performed, as the style of editing by the accounts suggests to me paid editing (so tagging with possible undisclosed paid where appropriate may be needed). Dreamy Jazz talk to me &#124; my contributions 16:37, 18 December 2021 (UTC)
 * I played around a bit and I think this is all the pages created by all of the accounts named in this SPI:
 * Group 3 all used the other IP used by Group 1:
 * Group 4 used a single different IP to all other accounts (except M7822):
 * Other technical information for the accounts was all similar for Groups 1-3, with most accounts being active at around the same time. I consider Groups 1 to 3 technically ✅. Group 4 uses slightly different technical information, but with the link through M7822 Group 4 is likely to be the same as Groups 1 to 3.
 * Due to the large number of accounts, this is either a well-intentioned school project (which technical evidence seems to not point towards) or more likely some kind of paid editing group. The ACPERM gaming seen by a number of these accounts may suggest this. Dreamy Jazz talk to me &#124; my contributions 22:48, 16 December 2021 (UTC)
 * Will likely come back to this case to decide if CU blocks are necessary. Dreamy Jazz talk to me &#124; my contributions 23:02, 16 December 2021 (UTC)
 * @Dreamy Jazz I'm not sure what made you think it might be a school project, but I do note that the accounts were created at various intervals over the course of 14 months. Sometimes it was months between creations, but there's a couple of pairs (Nyazazic/Tugenda1990 and Seledon/M7822) that were just a few minutes apart.  That doesn't sound like a school project to me. -- RoySmith (talk) 02:45, 18 December 2021 (UTC)
 * It doesn't to me either. -- The SandDoctor Talk 06:55, 18 December 2021 (UTC)
 * The reason that I suggested a school was that it was one of the few reasons why many accounts might be created from the same IP using similar devices. I don't think it's likely and I think some kind of paid editing is more likely. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 11:17, 18 December 2021 (UTC)
 * On further review, I think CU blocks for all are necessary. I waited to apply CU blocks because I was unsure about blocking without having a chance to review the accounts (as I needed to do things IRL). Now that I've had some time to review the edit histories of the accounts in further detail, I think CU blocks are appropriate here given that it is likely to be a paid editing organisation focusing on Uganda. Although no overlap occurs, the ACPERM gaming which is seemingly demonstrated by (and others) suggests this is more coordinated than multiple people using the same IP. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 16:35, 18 December 2021 (UTC)
 * I think a review of the creations needs to be performed, as the style of editing by the accounts suggests to me paid editing (so tagging with possible undisclosed paid where appropriate may be needed). Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 16:37, 18 December 2021 (UTC)
 * I played around a bit and I think this is all the pages created by all of the accounts named in this SPI:
 * Due to the large number of accounts, this is either a well-intentioned school project (which technical evidence seems to not point towards) or more likely some kind of paid editing group. The ACPERM gaming seen by a number of these accounts may suggest this. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 22:48, 16 December 2021 (UTC)
 * Will likely come back to this case to decide if CU blocks are necessary. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 23:02, 16 December 2021 (UTC)
 * @Dreamy Jazz I'm not sure what made you think it might be a school project, but I do note that the accounts were created at various intervals over the course of 14 months. Sometimes it was months between creations, but there's a couple of pairs (Nyazazic/Tugenda1990 and Seledon/M7822) that were just a few minutes apart.  That doesn't sound like a school project to me. -- RoySmith (talk) 02:45, 18 December 2021 (UTC)
 * It doesn't to me either. -- The SandDoctor Talk 06:55, 18 December 2021 (UTC)
 * The reason that I suggested a school was that it was one of the few reasons why many accounts might be created from the same IP using similar devices. I don't think it's likely and I think some kind of paid editing is more likely. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 11:17, 18 December 2021 (UTC)
 * On further review, I think CU blocks for all are necessary. I waited to apply CU blocks because I was unsure about blocking without having a chance to review the accounts (as I needed to do things IRL). Now that I've had some time to review the edit histories of the accounts in further detail, I think CU blocks are appropriate here given that it is likely to be a paid editing organisation focusing on Uganda. Although no overlap occurs, the ACPERM gaming which is seemingly demonstrated by (and others) suggests this is more coordinated than multiple people using the same IP. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 16:35, 18 December 2021 (UTC)
 * I think a review of the creations needs to be performed, as the style of editing by the accounts suggests to me paid editing (so tagging with possible undisclosed paid where appropriate may be needed). Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 16:37, 18 December 2021 (UTC)
 * I played around a bit and I think this is all the pages created by all of the accounts named in this SPI:


 * Cindy Magara
 * Danze Deejahn Edwin
 * Danze Edwin
 * Draft:Keem Fame Rich2
 * Draft:Next Media Services
 * Draft:Nxt Radio (Uganda)
 * Draft:Rocket Health Clinic
 * Draft:Sarah Kagingo
 * Emmaneul Wabwire
 * Emmanuel Wabwire
 * Faraja Africa Foundation
 * Fernanda Pumar
 * Fernanda Pumaz
 * Futsal Association of Uganda
 * Gabriella Lomm
 * Gabriella Lomm Mann
 * Geofrey Kayemba
 * Giosue Bellagambi
 * Godfrey Ssolo Kayemba
 * Gucci Tanga
 * Imokola John
 * Isaac Mwesigwa
 * Jimmy Lwanga
 * Julius Ssekitoleko
 * Kabaddi Federation of Uganda
 * Keem Fame Rich
 * Lawrence Muganga
 * Mazima
 * Mirna Bzdigian
 * Next Media Services
 * Nile Post
 * Nina K. Mirembe
 * Nxt Radio (Uganda)
 * Peter Kasiko Waiswa
 * Peter Waiswa
 * Prof Bio-research Company
 * Promota Kay2
 * Rehemah Kasule
 * Rehmah Kasule
 * Rio Paul
 * Rocket Health Care
 * SEE TV
 * SEE TV UGANDA
 * Sabiiti Muyanja
 * Sanyuka TV
 * Sarah Kagingo
 * Semboga Roy
 * Sheilah Gashumba
 * Talent Group Africa
 * Top Bloggers Uganda
 * Tubayo
 * Zambaali Bulasio Mukasa


 * -- RoySmith (talk) 02:50, 21 December 2021 (UTC)

<span style="color:;"> 
 * I’ve gone through the creations and tagged a few more for UPE, and kicked a few others into draftspace., just to make sure I'm reading this right: The oldest account is actually Nanseera Tracey by over a year. My plan is to move the case to Nanseera Tracey and tag everyone as CU-confirmed to them. Alternatively, I could do Group 1-3 as confirmed to them, and for Group 4 M7822 confirmed to Nanseera Tracey per group 2, and Seledon as confirmed to M7822, with proven alt-master as Nanseera Tracey? Thoughts? Thanks, -- Jack Frost (talk) 19:26, 21 December 2021 (UTC)
 * M7822 is ✅ to Seledon, just to provide clarity here. I'd be happy to say that this also makes Seledon ✅ to Nanseera Tracey through M7822, and thus dual-tags probably isn't needed for Seledon. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 00:26, 22 December 2021 (UTC)
 * Moved case from Sockpuppet investigations/Keemfame20 to Nanseera Tracey as the oldest account. Accounts tagged. Closing. --Jack Frost (talk) 03:56, 22 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Edits. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 14:59, 18 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Pro forma. ✅ to previous socks. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 14:59, 18 January 2022 (UTC)

Suspected sockpuppets
Benithamuk created Next Media Services (now at Draft:Next Media Services). Sumuhnart submitted this draft.

Sumuhnart also created Next Media Services Uganda which in poor man's undelete looks extremely similar/same like the article originally created by Benithamuk.

Also, Sumuhnart recent creation Juliet Zawedde  (now at Draft:Juliet Zawedde) looks like a typical UPE-piece: article has refs but they are just a lot of spammy content dupes. – NJD-DE (talk) 21:51, 6 September 2022 (UTC)


 * Probably the most obvious tell is one I just realized now:
 * Original case was for Keemfame20. Socks repeatedly spammed autobios on a person called "Keem Fame Rich".
 * Sumuhnart created an article about "Kajoba Hakim popularly known as Keem Fame Rich". – NJD-DE (talk) 21:56, 6 September 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

These CU-uncovered accounts look like UPE, some of them quacking a bit, some a lot louder. Here some details: – NJD-DE (talk) 19:06, 7 September 2022 (UTC)
 * Draft:Emmanuel Wabwire ‎created by, moved to article space by.
 * Socks show interest in "Next Media Services" (see above), created Draft:Next Media Park.
 * , and  are connected definitely: all added category Category:Uganda Christian University alumni to multiple articles. Didn't see an obvious article overlap. However, page creations look like UPE and they seem to create articles always with bare refs like previous socks. E.g. Sarah Mulindwa or User:Dazolima/Nathan Ssewaali created by Dazolima.
 * Itelmang created Moshions with bare refs only. Looked like a UPE-creation also with fluffy PR-pieces and interviews.

Clerk, CheckUser, and/or patrolling admin comments

 * that article is identical. - For a sleeper check given how many were found in December (though don't look too hard, if the data's tricky just block  and be done with it). --Jack Frost (talk) 12:21, 7 September 2022 (UTC)
 * Sumuhnart is ✅ All of these are ✅  -- RoySmith (talk) 13:30, 7 September 2022 (UTC)
 * - please indef all accounts listed above. Having reviewed the behaviour, I'm quite confident this is all the same person/UPE op. They're all gaming autoconfirmed in a similar manner and creating promotional articles. Thanks, Spicy (talk) 00:57, 10 September 2022 (UTC)
 * Concur. --Blablubbs (talk) 07:39, 10 September 2022 (UTC)
 * G5'd some spammy creations. Archiving. --Jack Frost (talk) 00:55, 11 September 2022 (UTC)