Wikipedia:Sockpuppet investigations/Katine67/Archive

Katine67

Katine67 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

05 September 2022

Suspected sockpuppets

10sne1 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
WikiSzeman (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Star7924 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
BlakesMa (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Hero921 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
WikiDidi99 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
TheRealSerenaJoy (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
HedgeFundReporter (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
PoliticMurray (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
PluckyOriginal (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Tools: Editor interaction utility · Interaction Timeline · SPI Tools

This is a UPE business (I can send off-wiki evidence of this).
All timecards are consistent with US office hours, mostly weekdays.
Katine67, Star7924, Hero921, and TheRealSerenaJoy signal they are professional writers, public relations, marketing professionals, or copywriters:
- Katine67's bio describing themselves as a digital marketing consultant [1].
- Hero921 describes themselves as a copywriter for 30 years [2].
- Star7924 is a public relations professional and professional writer. [3]
- TheRealSerenaJoy user page has a section in their user page with a list of [organic] article creations [4], this is digital marketing jargon.
- 10sne1 described in a talk page how they are publishing commissioned work [5].
Other user page similarities:
- 10sne1 and TheRealSerenaJoy signature colors and font in user page [6][7].
- Compare user pages for WikiSzeman and HedgeFundReporter: e.g. learning as I go along [8][9]
10sne1 casually edited Katine67's as if it was their own [10]. Described in a talk page how they are publishing commissioned work [11].
Page or topic overlaps:
- Most accounts overlap on Jill Kelley/Talk:Jill Kelley, except WikiSzeman and Star7924.
- 10sne1 and Hero921 overlap at RepRisk and Socially responsible investing. HedgeFundReporter also spammed RepRisk [12].
- Frank Pavone/Priests for Life were edited by Star7924, BlakesMa, WikiDidi99, PoliticMurray, and PluckyOriginal.
- PluckyOriginal and TheRealSerenaJoy overlap on Raritan Yacht Club.
Behavior:
- Editing style and edit summaries are quite characteristic, with some quite unique matches, e.g. TheRealSerenaJoy/WikiDidi99 [13][14], 10sne1/Hero921 [15][16], Katine67/TheRealSerenaJoy [17][18].
Note that WikiSzeman also used 50.254.88.92 to reinstante some link spam after it was reverted. I don't think there was any attempt at CU evasion there, so CU might be effective.

-- MarioGom (talk) 22:33, 5 September 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Fantastic investigative work, I have to say. Pilaz (talk) 00:55, 6 September 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

In progress GeneralNotability (talk) 01:04, 6 September 2022 (UTC)[reply]
Findings:
- PluckyOriginal is Confirmed to ChesterGreen (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), who has edited the Kelley article. I also see multiple attempts to log into Strand01 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), whose userpage fits the pattern.
- Hero921 and PoliticMurray are Confirmed to one another. I'm calling them a weak Likely to the PluckyOriginal group (same semi-common UA, geolocation is a little ways from the first but within a reasonable margin of error)
- TheRealSerenaJoy and 10sne1 are Confirmed to one another and Likely to the above groups, similar deal - same UA, geo's a little off of the first group but pretty close to the Hero group.
- BlakesMa and Star7924 are Confirmed to one another - I have failed logins to BlakesMa immediately followed by a successful login to Star. This was on a colo/webhost, so can't tell you how they relate to the other groups.
- HedgeFundReporter and WikiDidi are a weak likely to each other and the other groups.
- WikiSzeman and Katine are Stale and I didn't stumble upon any login attempts elsewhere.
I'd say there is a reasonable chance that there are multiple individuals operating the accounts here, for what it's worth. GeneralNotability (talk) 01:39, 6 September 2022 (UTC)[reply]
Between MarioGom's analysis, the technical findings, and just a look at the contrib histories of the accounts involved, I feel pretty darn confident that everyone here is at least UPE and pretty likely to all be related to each other. Blocked and tagged the lot. GeneralNotability (talk) 01:42, 6 September 2022 (UTC)[reply]