Elbatli (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• ZanciD (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Nassimela (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Ginbopewz (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Fabiobengario (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Misasory (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Yüsiacı (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

These accounts all follow the same pattern: brief spurts of low-quality rapid-fire AfD !votes punctuated by long periods of inactivity. The interaction tool finds quite a bit of overlap, such as Wikipedia:Articles for deletion/Caylee Cowan(actress) (keeps from Nassimela, Elbatli, and ZanciD), Wikipedia:Articles for deletion/Wired Productions (article created by Fabiobengario; keeps from Misasory, Ginbopewx, ZanciD, and Elbatli), and Wikipedia:Articles for deletion/Vaibhav Vinay Maloo (keeps from Elbatli, ZanciD, Ginbopewz, and Yüsiacı), among others. All accounts use the source editor almost exclusively, and the timecards seem pretty similar. I can go into more detail if it'd be helpful, but these accounts are all clearly up to no good (probably UPE), and given the AfD overlap they're likely connected (either sock or meat). I'd be interested to see what CU can come up with. Extraordinary Writ (talk) 07:25, 11 October 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress --Blablubbs (talk) 18:01, 13 October 2022 (UTC)[reply]
• Had to double-check with another CU. Here goes:
  • ZanciD, Yüsiacı, and Nassimela all look to be on proxy. Notwithstanding that, I'd call the original group  Possilikely (a mix between possible and likely). Additionally:
  • Mehmet-mk2 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is  Likely (via Yüsiacı) and interested in Caylee Cowan
  • عابث (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and Melosa220 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) are  Likely (via Nassimela), and their xwiki edits (more Caylee Cowan stuff) make it clear that they are also part of this group.
• Coupled with behaviour, I'm convinced. Will block. --Blablubbs (talk) 19:23, 13 October 2022 (UTC)[reply]
•  Blocked and tagged. Closing. --Blablubbs (talk) 19:28, 13 October 2022 (UTC)[reply]

• Moresdi (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Follows the same pattern of rapid-fire low-quality AfD !votes combined with minor edits with the source editor. Similarities in language include "promotional context" (compare [1] with [2]), "significant coverages" (compare [3] with [4]), and "Delete Lack of significant coverage" (compare [5] and [6]). Requesting CU since it was useful last time. Extraordinary Writ (talk) 07:02, 3 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• CU tells me that they're in the same country as the previous socks, but not a lot more than that. Behaviourally though, and taking timings into account, I'm blocking as suspected. I don't see any other accounts. Girth Summit _(blether) 10:24, 3 November 2022 (UTC)[reply]

• Nasin3030 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

As before, we have 1) large numbers of edit-count-inflating minor edits with the source editor, 2) long periods of sleeper-esque inactivity, 3) the creation of dubious UPE-like articles (OpenSooq, Hayvi Bouzo, Arash Derambarsh, etc.), and 4) rapid-fire AfD !voting. There's overlap with the previously-blocked sock Moresdi at Wikipedia:Articles for deletion/Pratik Gauri, and note also the similarity between "The content of this article is based on that in its Persian equivalent." from Nasim3030 and "The content of this article is based on its Hebrew equivalent." from Elbatli. Extraordinary Writ (talk) 21:15, 4 November 2022 (UTC)[reply]

One more thing just for the record: I've noticed a lot of overlap, language similarities, etc. between this group of socks and Fatzaof, who was blocked for UPE last year (happy to go into more detail if anyone would like). Usually I don't bother mentioning long-since-stale accounts, but since it looks like Fatzaof was blocked per a paid-en-wp report, it might be worth looking at it (OTRS Ticket#2021030910010632) just in case there's anything relevant there. Cheers, Extraordinary Writ (talk) 21:22, 4 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Possible, from a technical perspective - same geolocation again. Hard to AGF here, given the shared interest in AfD subjects - blocking as suspected. Girth Summit _(blether) 21:51, 4 November 2022 (UTC)[reply]

• Alimovvarsu (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Alimovvarsu turned up to !vote keep at Wikipedia:Articles for deletion/Pratik Gauri (2nd nomination), which was started because the first AfD had been tainted by other Elbatli socks; there's also overlap with previous socks at Wikipedia:Articles for deletion/Wired Productions (six other socks!) and Wikipedia:Articles for deletion/Hakki Akdeniz. Follows the same pattern of low-quality edit-count-inflating source-editor edits combined with rapid-fire AfD !voting. Similarities in language include: "does not meet any criteria for notability" vs. "does not satisfy any criteria for notability" and "sources provided by ″황83보″" (with the username oddly in quotation marks) vs. sources provided by "Ahmed"". Extraordinary Writ (talk) 06:49, 12 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Inconclusive. There is a very good chance that they are on proxy, but I can't be entirely certain.  Blocked and tagged as suspected, closing. --Blablubbs (talk) 11:01, 12 November 2022 (UTC)[reply]

• AmirŞah (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

This is a bit of an odd one, but there's clearly something fishy going on with AmirŞah (formerly known as Brayan ocaner). Most importantly, the language-related similarities to Elbatli socks are simply overwhelming: to take just a few examples, we have "provided by above voters" ([7] vs. [8]), which is unique; "passing a mention" ([9][10] vs. [11][12]); "demonstrate notability of subject" ([13] vs. [14]); "clearly doesn't meet any notability guideline" ([15][16][17] etc. vs. [18]); and the fairly uncommon typo "and ect." instead of "etc." ([19][20] vs. [21][22][23]). Those are pretty hard to explain away. AmirŞah also follows what I've previously described as a "pattern of low-quality edit-count-inflating source-editor edits combined with rapid-fire AfD !voting", and his column in the editor interaction tool shows a great deal of overlap, including on low-traffic articles about Iranian film. The odd thing here is that AmirŞah will often nominate a spammy page for deletion only for Elbatli socks to !vote keep en masse: see here (2+ socks), here (2+ socks), here (4 socks), here (2 socks), here (6+ socks), etc. I can't say I understand what that's all about (possibly either a way of gaming the NPP system or an Orangemoody-esque extortion racket), but regardless it's more evidence that these accounts are not acting legitimately. Extraordinary Writ (talk) 08:02, 13 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress - -- RoySmith (talk) 21:13, 13 November 2022 (UTC)[reply]
•  Unrelated. I know many (all?) of the previous investigations have some back with uncertain results. This isn't that. It's a distinctly different pattern. I'm going to close this, which doesn't preclude an admin from taking action if there's other reasons to do so. -- RoySmith (talk) 21:42, 13 November 2022 (UTC)[reply]

• Antonyvlas (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• AndrewYuke (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Yandeńo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

All three of these accounts turned up to !vote keep at Wikipedia:Articles for deletion/Pratik Gauri (2nd nomination), which was started because the previous AfD had been tainted by Elbatli socks. They all follow the same characteristic pattern of long periods of inactivity, rapid-fire edit-count-inflating source-editor edits, and rapid-fire AfD !voting. All of them are also now apparently copying AfD !votes nearly verbatim from more established users, likely to avoid the language-related giveaways that got previous socks blocked. For Antonyvlas, see [24]; for AndrewYuke, see [25]; for Yandeńo, see [26]. Anthonyvlas is interested in Iran-related topics like previous socks, while the other two create UPE-ish articles (e.g. Jordi Koalitic and Melania Dalla Costa) similar to those created by previous socks. Clearly not legitimate accounts, and given the AfD overlap I think they're likely related (whether through sockpuppetry or meatpuppetry) to Elbatli et al. Extraordinary Writ (talk) 18:57, 18 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk endorsed - behaviour seems in line with previous accounts, please CU to confirm. Thanks, Spicy (talk) 20:53, 18 November 2022 (UTC)[reply]
•  Possible or slightly better. Given behaviour and how prior results have turned out I’m inclined to block but will see if anyone else disagrees. firefly ( t · c ) 21:05, 18 November 2022 (UTC)[reply]
  • Firefly for what it's worth, I don't disagree. Spicy (talk) 21:14, 18 November 2022 (UTC)[reply]
• That works - blocking and tagging as suspected. Closing. firefly ( t · c ) 21:19, 18 November 2022 (UTC)[reply]
• Post-close comment - I have just blocked the following account as another suspected sock:
  • AmirŞah (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• They were the account that originally nominated Pratik Gauri for deletion, before multiple sockpuppets arrived to !vote keep (a common UPE tactic). When the socks were blocked and I renominated the article, more socks arrived to !vote keep, and AmirŞah made a very dubious NAC to keep the article (which I have reverted). This made me suspicious, and on closer inspection I see them getting involved in other AfDs where Elbatli socks are active, e.g. relisting Wikipedia:Articles for deletion/Levi C. Maaia, or closing Wikipedia:Articles for deletion/Davide Ricci Bitti as keep. This seemed suspicious, so I ran a check - it's not conclusive, and I won't go into details, but technically they look very much like the socks listed above. Girth Summit _(blether) 12:06, 19 November 2022 (UTC)[reply]
•  In progress - reopening this, there are more socks. Girth Summit _(blether) 12:23, 19 November 2022 (UTC)[reply]
• CU data is again inconclusive, but the following are all alike in the same ways the previous ones were. They are all overlapping on the same articles, some writing content and others manipulating deletion discussions. I don't know whether it's one person, or a bunch of UPE editors, but I am blocking all.
  • Mazda3new (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • Salmoosh (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • Wadsioni (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • Maskedidiot99 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • 황83보 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• That's all I see at present, but I will be very surprised if more don't crop up. Reclosing. Girth Summit _(blether) 12:37, 19 November 2022 (UTC)[reply]