Misplaced Pages

Revision as of 22:10, 16 November 2024

Sunuraju

Sunuraju (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

For archived investigations, see Misplaced Pages:Sockpuppet investigations/Sunuraju/Archive.

06 November 2024

– A checkuser has completed a check on relevant users in this case, and it is now awaiting administration and close.

Suspected sockpuppets

• Faymas (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Israrhashim1 (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Camilear (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Crunchyjeet (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Asad Siddiqui23 (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tanveer.Solangi (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Yigitergun01 (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Hanif.Aslam (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 2404:3100:1C26:FF2A:FE:32FF:FEA7:4118 (talk · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Based on information privately emailed to paid-en-wp@wikipedia.org by @Saqib:, the previous SPI report, and recent editing behavior, I believe these accounts are connected. In the very least MEAT but likely SOCK. The November 2 SPI filing showed "technically unrelated" but also suspicions that they could be a network of people working together. The email evidence would be useful for this case. In full disclosure, I was forwarded that evidence privately and believe that evidence shows a connection to a much larger group of editors. @Girth Summit: as well since they were involved in the previous SPI filing. I am including a WALLOFTEXT of behavioral evidence as I believe they are avoiding CU detection based on their knowledge with SPI with previous filings under another sock farm.

• User:Sunuraju created Kabhi Main Kabhi Tum, a page previously G5d from the StayCalmOnTrees Sock farm (previously Nauman335). The day it was created, it was sent back to draft space and is now at Draft:Kabhi Main Kabhi Tum. User:Sunuraju worked on the draft until November 5 but then today, user:Israrhashim1 did two edits to the draft, approximately 1.5 hours prior to Sunuraju coming and resubmitting the draft. Appears to be working in tandem. This was also part of the last SPI filing for another named user.
• Today, User:Sunuraju edits the page Sunn Mere Dil (now at draftspace). The page was created by User:Israrhashim1 on October 27 and then edited between November 4 and 6th by user Faymas. Two minutes after I sent this to draft, user Faymas is back editing the draft. Now all three editors in the same topic area, one of whom has few edits (see last bullet point below), are working on the same page/draft. NOTE - The page was created by Israrhashim1 and then that user moved to draft space (appears based on edit summary they meant to create it as draft). The draft was then edited by Faymas until eventually moved to mainspace by Faymas, then edited by Sunuraju within 24 hours of that move.
• November 4, user Faymas edits the page 9th Hum Awards, a page created by Israrhashim1 on September 28. While it is not uncommon for users to edit the same pages, it is suspicious that the editing pattern does appear to be tied to each other.
• As of this filing, user Faymas has 43 total edits, 28 of which are to the same pages edited by Israrhashim1. CNMall41 (talk) 06:06, 6 November 2024 (UTC)

This all appears to be part of the same StayCalmOnTrees sock farm although they are likely very careful about how they are going above it, likely because of the MANY filings of that sock group. Here is some additional that shows a connection: Faymas editing Jo Bichar Gaye on November 5th. Page created by now blocked sock of SCOT, user:Qwef1234. Eight of the 43 total edits from Faymas are to pages created by Qwef1234. --CNMall41 (talk) 06:12, 6 November 2024 (UTC)

• Adding new account above. Today, Faymas moved Draft:Sunn Mere Dil to Sunn Mere Dil, the same page edited by only Faymas, Sunuraju, and Israrhashim1. After the draft was moved, editor Camilear (created on October 25) made edits to the page. User Camilear also re-created Alisha Parveen on November 1, a page previously deleted at AfD where a keep vote from Skt34 was later found to be a SOCK of Nauman335 (StayCalmOnTrees).
• User Camilear then moves redirect Amar Nayak to Draft:Amar Nayak and requests speedy deletion. Page already exists under Amar Kumar Nayak (same but under name variation). That page was then edited in the same time frame by user Crunchyjeet who is also editing Draft:Amar Nayak. Looks like coordinated editing. --CNMall41 (talk) 18:19, 6 November 2024 (UTC)
• Adding more behavioral evidence as based on the email sent, I believe accounts are being careful not to use same IPs. Faymas creates page Ali Raza (actor) on November 11. This was previously declined as draft which was created by globally blocked user:Alzahra-ali.
• November 9-11, user Faymas editing many pages related to Green Entertainment, including recreation of the Green Entertainment page that was deleted a few months back purusuant to and AfD discussion. Green Entertainment was the main focus of StayCalmOnTrees socks. Also on November 11, Sunuraju requests on the Faymas talk page about creating pages for Green TV. --CNMall41 (talk) 18:53, 11 November 2024 (UTC)
• November 10, 2024 - Unusual activity for a newer user Faymas (10 day old account with 237 edits) to move a draft to mainspace that was edited by the other named users in this report (Sunuraju, Israhashim1), despite that draft being declined at least three times prior. --CNMall41 (talk) 20:39, 11 November 2024 (UTC)
• Adding a few more users that could be sock or could be meat. User:Asad Siddiqui23 created on November 5th, created dozens of redirects for shows related to Hum TV, a network heavily promoted by the StayCalmOnTrees SOCK farm (under Nauman335 prior to the merge of the two SPI cases). User also added these redirects and other Wikilinks to Hum TV. Looking at some of the added pages, they are all recently edited by the accounts Tanveer.Solangi, Yigitergun01, and Hanif.Aslam. All three are using the same type of device and app to edit (Android), which if you look through the StayCalmOnTrees SPI is the same device used by many of the socks. --CNMall41 (talk) 23:09, 11 November 2024 (UTC)
• Today (the 11th), Sunuraju creates Draft:Gentleman (Pakistani TV series), a page previously G5d as part of the StayCalmOnTrees sock farm (when it was Nauman335). --CNMall41 (talk) 23:14, 11 November 2024 (UTC)
• User Sunuraju also asks about recreation of Draft:Pagal Khana, one that was G5d as part of the StayCalmOnTrees sock farm. --CNMall41 (talk) 23:18, 11 November 2024 (UTC)
• Maybe not necessary at this point but adding the creation of Nadaan (TV series) which was started last month as a draft by ip 2404:3100:1C26:FF2A:FE:32FF:FEA7:4118. Moved to mainspace by Faymas on the 11th and then edited by Sunuraju on the 12th. Checking the ip history, there were a total of four edits, one to page Ullu Baraye Farokht Nahi which was also edited recently by Hanif.Aslam and Taveer.Solangi (the two accounts added to this SPI earlier today). That IP takes you down another rabbit hole which I will not list as this is already a larger WALLOFTEXT. --CNMall41 (talk) 07:30, 12 November 2024 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• User:Camilear is trying to impersonate User:Cameron11598. It’s evident they are evading a block. I’ll leave Sunuraju a message about this SPI and hope they respond to the allegations above. Personally, I believe the overlap between Sunuraju and the other accounts on obscure articles provides enough evidence to warrant a block for undisclosed paid editing. Jeraxmoira🐉 (talk) 19:50, 6 November 2024 (UTC)

i am one of the not sockpuppets, I was not aware that Kabhi Main Kabhi Tum was created one of sockpuppet farm of user who got blocked and thought created Kabhi Main Kabhi Tum on wiki because of drama was huge hit across on South Asia by , I had mistakes at my early life at wikipedmia during my 14 year career and i had gramamr issues --Sunuraju (talk) 09:06, 8 November 2024 (UTC)

Even they have involved me also, they all are thinking that i am sock of other account, some are thinking that i created page of Alisha Parveen which was deleted by discussion, but even as i can say its more than one year passed and even one of the admin has declined the deletion of that pages because this page was now created by me and, i dont know previously who created the page, for now she has sufficient reference to make this page live, then also some users are thinking I am sock, You can check IP range, I can clearly say that there is no comparision between my edits and the edits which done by other three users, and if CU team still think that i did anything wrong then you can block my account, but from my side i have not done any wrong edits to any of the pages. Camilear (talk) 09:33, 8 November 2024 (UTC)

i had joined to Misplaced Pages in 2010 before my 16th birthday Sunuraju (talk) 09:37, 8 November 2024 (UTC)

Comments within minutes of each other is not suspicious. I am sure that based on the private evidence emailed to Misplaced Pages users have been careful not to use anything that would alert a CU which is why behavioral evidence was listed (and emailed). While we are here, can you both disclose any connection you have with user:Captain Assassin!?--CNMall41 (talk) 17:53, 8 November 2024 (UTC)

I dont have any connection. Camilear (talk) 17:57, 8 November 2024 (UTC)

i didnt have connection with Captain Assassin Sunuraju (talk) 01:47, 10 November 2024 (UTC)

• I joined Misplaced Pages in 2010 for added Malayalam films then korean actors and other things, I had grammar issues and I thought add draft of paksitani dramas for helping people — Preceding unsigned comment added by Sunuraju (talk • contribs) 2024-11-14T02:29:06 (UTC)

@Girth Summit:, @Izno:, Thank you for all your work here. Glad to see additional accounts were uncovered. I do have private evidence I can email that has already been emailed to the "paid" email address. I can send it to you via email link as well so as not to OUT, but I believe after you see if you will see how this is also related to a user (Captain Assassin!) and that these socks are trying to make an attempt to avoid the CU process (hence the likely proxies or other devices - could be using an Agent Changer). Either way, I would be glad to provide even more evidence of how Sunuraju is connected via behavioral evidence if it helps. --CNMall41 (talk) 22:10, 16 November 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

• Thank you for this CNMall. I was wondering how the editor ended up on my talk. It looks like Draft:Pagal Khana was a redirect, script-tagged as a result of my close of Misplaced Pages:Articles for deletion/Green Entertainment. @Yamla: had protected the redirect after some socknanigans but I didn't see the Nauman connection when I closed the AfD. Thanks, sock, for the self outing. Star Mississippi 01:57, 12 November 2024 (UTC)
• Well, Camilear is  Confirmed to Blacose, who is blocked as a sock from the Arshifakhan61, and locked as an LTA, so that's something. Still trying to sift through the others. Girth Summit _(blether) 11:38, 13 November 2024 (UTC)
•  In progress - Girth Summit _(blether) 11:40, 13 November 2024 (UTC)
• Faymas looks an awful lot like StayCalmOnTress - I can't say confirmed, but very  Likely, technically, blocking. Girth Summit _(blether) 12:15, 13 November 2024 (UTC)
• Crunchyjeet is  Confirmed to THECMPL. That account is softblocked as a promotional username (I believe it stands for Crunchy Media Pvt Ltd). While such users are invited to create new accounts with policy-compliant usernames, the block notice gives instructions about COI and PAID disclosures, which have not been adhered to by this user, so I have blocked them for UPE. Girth Summit _(blether) 12:34, 13 November 2024 (UTC)
• Asad Siddiqui23 is  Technically indistinguishable from recently blocked socks from the Helloo 68 case. Those socks have edited about Hum and ARY TV channels, as has Asad Siddiqui23. Blocking as suspected to that case. Girth Summit _(blether) 12:54, 13 November 2024 (UTC)
• Tanveer.Solangi is an odd one. They are  Confirmed to Alfabarvo (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), and exceedingly  Likely to Hanif.Aslam, which itself is somehow related to Localvin (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). These accounts are odd - each has been created a long time before they were used: Tanveer.Solangi created in March 2014, first edit 3 October 2024, no edits to other projects; Hanif.Aslam created February 2014, a few edits on Urdu Wiki about that time, then nothing until 21 October when they started on Commons and came here the following day; , and 22 October here; Alfabarvo created May 2024, two edits here on that day and then nothing until September; Localvin created May 2024, one edit here and then nothing until October of this year. These accounts are all operating on an IP range that has had a StayCalmOnTress sock on it in the past, but there are enough technical difficulties for me to doubt any direct connection; there's obviously something dubious going on however, and they have had overlaps on a couple of articles using different accounts which makes it look like this is at the very least an improper use of alternate accounts, so I will block these without tags. Girth Summit _(blether) 13:28, 13 November 2024 (UTC)
• There is no technical evidence connecting Yigitergun01, Israrhashim1 or Sunuraju to one another, or to any other accounts that I can see. I will leave this open should anyone want to make a behavioural evaluation or consider WP:MEAT issues. Girth Summit _(blether) 13:39, 13 November 2024 (UTC)

  I don't see a need or desire to block Yigitergun01. Edits are somewhat subpar but that's not an SPI thing anyway. And also the behavior isn't a match to the likely sockmaster on that page. Izno (talk) 03:58, 16 November 2024 (UTC)

  Regarding Sunuraju: Between the recent bump in activity and the association with as many socks here, I think there is a reasonably valid concern they may be editing for pay at this point (apparently coming to that conclusion somewhat independently from Jeraxmoira). The other possibility is just that we're getting a larger quantity of articles//editors in the clear area of interest they've had since before the recent bump in activity (in fact, since day 1, and in 2010 we weren't really into the modern era of UPE yet). So I can go either way here. Real evidence to seal their connection would probably require offwiki sleuthing, and that's definitely not my forte nor should it be in generally anyone's interest. They also don't really match the flavor of socks in this area, even if we ignore the CU result and assume they are one for whatever reason. So I guess I'm generally inclined not to block them as part of SPI. Izno (talk) 04:41, 16 November 2024 (UTC)

• Open SPI cases
• SPI cases awaiting administration
• SPI cases CU complete