Misplaced Pages

:Sockpuppet investigations/Heres The Dealio/Archive: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Sockpuppet investigations | Heres The Dealio Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 06:01, 25 November 2021 editGreyvessel (talk | contribs)Extended confirmed users504 editsm fixTag: Reverted← Previous edit Revision as of 06:02, 25 November 2021 edit undoLe Marteau (talk | contribs)Extended confirmed users, Pending changes reviewers, Rollbackers7,189 editsm Reverted 1 edit by Greyvessel (talk) to last revision by TamzinTags: Twinkle UndoNext edit →
Line 13: Line 13:
*'''Tools''': <span class="plainlinks"> • • </span> <small>''Auto-generated every hour.''</small> *'''Tools''': <span class="plainlinks"> • • </span> <small>''Auto-generated every hour.''</small>


A bit of an unusually impressive case, while patrolling recently created redirects, I've come across a slew of helpful redirects created by accounts with <15 edits and which have extremely similar behavior on their user and talk pages, always having a short statement like "Hey" or "Sup" on both. The barnstarworthy accounts proceed to make 10 test edits to their sandbox, and then create a single previously missed redirect, followed by no other activity. I suspect that this is someone who decided that their contributions would be easier to appreciate if they preemptively spread them across multiple accounts. Note that there's more accounts involved than the two listed here, but because the delightful pages are inexplicably deleted, I can't find the first few examples of such behavior that I came across (once it clearly became a pattern I started taking notes). Accurate redirects that I've come across include ] (pointing at ]), ] (pointing at Jimmy Carter), ] (pointing at ]), and a perfect one that I can't specifically remember pointing to Adam Levine. Note that this user is my hero and I hope to emulate their greatness if I ever become an admin one day. <sub>signed, </sub>] <sup>]</sup> 20:07, 14 June 2019 (UTC) A bit of an unusual sock case, while patrolling recently created redirects, I've come across a slew of attack redirects created by accounts with <15 edits and which have extremely similar behavior on their user and talk pages, always having a short statement like "Hey" or "Sup" on both. The suspicious accounts proceed to make 10 test edits to their sandbox, and then create a single blatant attack redirect, followed by no other activity. I suspect that this is either meatpuppeting or someone who decided that their vandalism would be harder to catch and revert if they preemptively spread it across multiple accounts. Note that there's more accounts involved than the two listed here, but because the attack pages are promptly deleted, I can't find the first few examples of such behavior that I came across (once it clearly became a pattern I started taking notes). Attack redirects that I've come across include ] (pointing at ]), ] (pointing at Jimmy Carter), ] (pointing at ]), and a homophobic one that I can't specifically remember pointing to Adam Levine. <sub>signed, </sub>] <sup>]</sup> 20:07, 14 June 2019 (UTC)


====<big>Comments by other users</big>==== ====<big>Comments by other users</big>====

Revision as of 06:02, 25 November 2021


Heres The Dealio

Heres The Dealio (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

14 June 2019

Suspected sockpuppets


A bit of an unusual sock case, while patrolling recently created redirects, I've come across a slew of attack redirects created by accounts with <15 edits and which have extremely similar behavior on their user and talk pages, always having a short statement like "Hey" or "Sup" on both. The suspicious accounts proceed to make 10 test edits to their sandbox, and then create a single blatant attack redirect, followed by no other activity. I suspect that this is either meatpuppeting or someone who decided that their vandalism would be harder to catch and revert if they preemptively spread it across multiple accounts. Note that there's more accounts involved than the two listed here, but because the attack pages are promptly deleted, I can't find the first few examples of such behavior that I came across (once it clearly became a pattern I started taking notes). Attack redirects that I've come across include Plastic smile (pointing at John Kerry), Retarded fish frog (pointing at Jimmy Carter), Absurdly delusional (pointing at Lavar Ball), and a homophobic one that I can't specifically remember pointing to Adam Levine. signed, Rosguill 20:07, 14 June 2019 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • I haven't checked any of these, but this is someone I first noticed a couple of months ago. I assume that it's one LTA or another, but so far, I've just been deleting the malicious redirects (if nobody has already done it) and blocking. CU hasn't been very useful because they're on a big mobile carrier, if I recall correctly, and I haven't been able to come up with a reasonable rangeblock. FWIW, I wouldn't bother with tags. —DoRD (talk)​ 16:04, 16 June 2019 (UTC)

18 July 2019

Suspected sockpuppets


Duck editing, types a short message on their user page, messes around in the sandbox, and then makes an attack redirect. signed, Rosguill 14:56, 18 July 2019 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

01 February 2020

Suspected sockpuppets

Create redirects with "nasty" titles targeting existing articles. Put "Hi" on their userpages. Play around with their sandboxes.--Bbb23 (talk) 19:28, 1 February 2020 (UTC) Bbb23 (talk) 19:28, 1 February 2020 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Bbb23, see Misplaced Pages:Sockpuppet investigations/Heres The Dealio. This troll has been around for a while now. Sro23 (talk) 23:31, 2 February 2020 (UTC)
@Sro23: You are absolutely right. You have a better memory than I. I can confirm the two cases technically. Please merge this case into the earlier one and tag accordingly. Thanks!--Bbb23 (talk) 00:10, 3 February 2020 (UTC)

27 February 2020

Suspected sockpuppets

All of these accounts appear to be edited and created by one person whose sole purpose is to create attack pages as can be seen in Should be in school, Amazing flopper and Too much plastic. Check for sleepers should be conducted too. —Nnadigoodluck🇳🇬 09:07, 27 February 2020 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

22 October 2021

Suspected sockpuppets

As reported by Sdrqaz, all accounts create a user page with just "hi" on (see deleted of Majorniceguy for an example), makes a number of edits to their sandbox and then creates and redirects a page (e.g. French Laundry ambassador).

Logging for the record, unsure if there are older accounts. I have checked Inthestall and Recyclelady and found them to be very  Likely, leaning  Confirmed ~TheresNoTime 22:35, 22 October 2021 (UTC)

Surprised that Recyclelady and Inthestall didn't pop up, they looked like twins of each other. Liz 23:54, 22 October 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. Thank you, TNT. Looking through my CSD log and edits to AIV, I've found a few more that fit this modus operandi. In chronological order: Chargemeup (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Sandandown (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Warmbrowngoo (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Hoopstarslim (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Holderplacer (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). While Chargemeup is stale (and the oldest account), the others should not be. All have been indefinitely blocked as regular administrative actions. Sdrqaz (talk) 23:27, 22 October 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

29 October 2021

Suspected sockpuppets

  • Same autoconfirmed gaming in sandbox as previous socks: and then disruption
  • Same username pattern as previous socks ("Floorwithdoor", "Tableglass"). Requesting checkuser to check for sleepers.

Thanks, Giraffer 18:17, 29 October 2021 (UTC)

@GeneralNotability, I think I found another – Paperzeed. Giraffer 18:22, 29 October 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

03 November 2021

Suspected sockpuppets

Identical behaviour to previously confirmed sock, and similar username pattern. Requesting CheckUser to find others given history of batch-creation. firefly ( t · c ) 18:26, 3 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

This case is being reviewed by Tamzin as part of her training as a clerk. Please allow her to process the entire case without interference. You may pose any questions or concerns either on her talk page or on this page.

09 November 2021

Suspected sockpuppets

 Looks like a duck to me. Please check for sleepers. Sdrqaz (talk) 20:35, 9 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

10 November 2021

Suspected sockpuppets

Created attack page redirect right after being autoconfirmed by making useless user sandbox edits. Similar behavior to suspected sock Carsonshoe. EDM fan 2 (talk) 20:58, 10 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments