GermanKity (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• DMySon (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

The GermanKity account was blocked on suspicions of undisclosed paid editing in 2021. It was almost certainly connected to a larger sock farm, as noted here (CU indicated a possible match) and here (Blablubbs suggesting "a very likely relationship" to another group of socks), but for today I'd like to focus on the GermanKity account in particular. The connections between GermanKity and DMySon are clear, as explained below:

• Let's start with the unusual phrase "references to till date". This phrase has been used by DMySon thrice ([1][2][3]) and by GermanKity twice ([4][5]). As this search shows, the phrase has never been used by anyone else in the history of Wikipedia.
• Next up: "hence failed WP:___" (e.g. WP:GNG, WP:ORGIND, etc.). This form has been used twice by DMySon ([6][7]) and four times by GermanKity ([8][9][10][11]). Again, per this search, never before has such a phrase been used in the history of Wikipedia.
• Take the very particular sentence "References do not show notability of the ____." It's been used once by DMySon ([12]), thrice by GermanKity ([13][14][15]), and, when written in this way, never before at any other AfD.
• "Un-referenced article fails": compare [16] by DMySon ("Un-referenced article fails WP:GNG.") with [17] by GermanKity ("Un-referenced article fails WP:NSCHOOL and WP:ORG"). As this search shows, this phrase has only been used thrice in Wikipedia history: once by DMySon, once by GermanKity, and once here by another user (who's likely also a sockpuppet, but that's a story for another time).
• In edit summaries, both accounts use the word "reff" (with two f's) to denote a reference: see [18] and [19]. I can't say I've ever seen that before.
• The phrase "Previous deletion log", with a link to the page's deletion log, has been used once by DMySon ([20]) and once by GermanKity ([21]). Capitalized and linked in this way, the phrase has never been used before on Wikipedia; see [22]
• Take the phrase "no indication of notability. fails WP:GNG". (Note the unusual capitalization.) As this search shows, this phrase has been used just twelve times: twice by DMySon, seven times by GermanKity, twice by blocked socks who are CU-connected to GermanKity (see here), and only a single time by an unrelated user.
• Both accounts have made requests for a number of permissions, including pending-changes reviewer, AfC reviewer, and new pages reviewer. Unsurprisingly, these requests have a great deal in common: compare [23] (GermanKity; "I wanted to help Wikipedia by reviewing pending Drafts.") with [24] (DMySon; "I want to help Wikipedia as an AFC reviewer.") and [25] (GermanKity; "Please check my deletion logs XFD, PROD, Draftify, CSD.") with [26] (DMySon; "Please also check my Deletion logs. CSD Log, PROD, XFD and Draftify.") There's also a peculiar incident here, in which GermanKity "accidentally" responds to a request that DMySon had made before quickly self-reverting. Perhaps it was a genuine mistake, but another possibility is that somebody forgot which sockpuppet account he was using.
• Just one more: the very particular phrase "notability is not inherited from the available references". Per this search, the phrase has been used only five times in total: thrice by DMySon ([27][28][29]), once by GermanKity ([30]), and once ([31]) by another account created just three days after DMySon's, which I suspect is also a sockpuppet (but, again, that's a story for another time).

I apologize if I've gone a bit overboard with the evidence, but I felt it was important to be thorough here, particularly since CU is likely stale. I can provide more evidence if necessary (involving further language similarities and shared activity patterns), but the information I've provided above is, in my view, more than enough to justify a behavioral block. Thanks in advance. Extraordinary Writ (talk) 23:55, 16 April 2022 (UTC)[reply]

Thanks for taking a look, GeneralNotability. While you're here, would you mind checking Jeni Wolf (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)? The writing style is very similar to DMySon's (compare Jeni Wolf's "Lack of significant coverage which are independent of the subject" [32] with DMySon's "Lack of significant coverage which are reliable and independent of the subject" [33] – a phrasing that no other user has ever used before. See also "un-referenced article fails, which has only every been used thrice: once by GermanKity, once by DMySon, and once by Jeni Wolf.), and Jeni Wolf has shown up at AfD to support DMySon's position here and here. By the way, do you see any technical similarities to the Sanketio31 case? JeepersClub is tagged as a Sanketio31 sock, so if DMySon equals GermanKity and GermanKity equals JeepersClub, it might be worth looking into a possible connection. Just a thought. Cheers, Extraordinary Writ (talk) 22:47, 17 April 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

It's also worth noting that [nil ] and GermanKitty have a lot of overlap, and DMySon is the primary reviewer for their spammy articles: Jerred Price, Raaheela Ahmed, as an example. MickyShy's userpage is nearly identical to GK's (see the bottom), as is DMySon's. CUPIDICAE💕 13:56, 17 April 2022 (UTC)[reply]

• Not a ton of useful stuff for CU to say here. No data available for GermanKity, some log data available from the possibly-related JeepersClub family. DJSRD geolocates to the same general area as DMySon, but different ISP. MickyShy is all over the map, including geolocations both near DMySon and JeepersClub log data (suspect this is just poor geo accuracy rather than any sort of spoofing). I'm inclined to think they're the same person based on the aforementioned behavioral evidence and general gut feeling, but I'd appreciate a second pair of eyes. GeneralNotability (talk) 17:01, 17 April 2022 (UTC)[reply]
• Agreed with GN – behaviour is convincing (thank you for the excellent filing). Not sure mulling over the NagalimNE/Sanketio connection again is going to be the best use of time here.  Blocked and tagged, closing. --Blablubbs (talk) 13:03, 3 May 2022 (UTC)[reply]

• MickyShy (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

MickyShy participated in 25 AfDs. Five of those were with DMySon and in all five they came in to support DMySon: [34][35][36][37][38]. One of them also with Jeni Wolf. Same capitalization in edit summaries [39], [40]. Mvqr (talk) 15:58, 27 April 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress - -- RoySmith (talk) 16:59, 28 April 2022 (UTC)[reply]
• After a bunch of staring at data for GermanKity, DMySon, MickyShy, and Jeni Wolf, I'm pretty much where GeneralNotability was in 16 April 2022. I'd say they're all  Possilikely (a mix between possible and likely) to each other. Could be one person. Could be multiple people at a PR firm. Could just be multiple people living in the same general area writing about topics of interest to people who live there.  Behavioural evidence needs evaluation -- RoySmith (talk) 18:23, 28 April 2022 (UTC)[reply]
• Between the CU result, evidence in filing, this (cf. the filing from 16 April 2022), this, this and some other similarities, I'm satisfied they're part of this group.  Blocked and tagged, closing. --Blablubbs (talk) 13:41, 3 May 2022 (UTC)[reply]

• JoyStick101 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Thefinaldestiny (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• DMySon (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Thefinaldestiny's vote reason at Riju Jhunjhunwala AfD shares same words and wikilink formats as JoyStick101's previous vote at Swati Bathwal AfD. The link dump in their vote is also similar to JoyStick101's link dump at Swati Bathwal AfD. Their article creations seem very similar to JoyStick101's in the sequence of steps. Non-mainspace edits of both accounts (Thefinaldestiny, JoyStick101) are exclusively AfD votes, draftify-ing via script or Twinkle deletion noms.

In both AfDs, these accounts voted the same as DMySon and using very similar rationales. See for eg JoyStick101 and DMySon where votes have a similar format of links, cookie-cutter source descriptions and WP:THREE invocation. JoyStick101 and DMySon have also voted using similar words in another previous AfD. DMySon removed PROD from Jungo Plus and School Chalo Abhiyan, two of JoyStick101's creations.

Thefinaldestiny's first edit in two years was to create a common.js that was exactly same as JoyStick101's common.js, as updated the day before. This copy is exactly the same as first two lines of User:DMySon/common.js. I understand that formatting similarity may be from copying the code from the respective script pages, but the selection and order of the scripts is same as well.

I don't have any idea about connection to GermanKitty, but have added here since there was an open report here about DMySon already. Hemantha (talk) 18:22, 2 May 2022 (UTC)[reply]

I don't know how common this is, but User:Jeni Wolf/common.js and MickyShy's initial common.js are also exactly same as the above accounts', with the same two scripts. Hemantha (talk) 18:27, 2 May 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

JoyStick101 was on my radar as well; I can provide more behavioral evidence if that would be helpful. I wasn't previously familiar with Thefinaldestiny, but I agree with Hemantha that that account is likely also connected to this group. Extraordinary Writ (talk) 18:33, 2 May 2022 (UTC)[reply]

I am wondering why i was not notified by any of the editors involved in this discussion? This is a personal attack by a group of editors (It might be possible they all are one person or a group) who want to trap me. This investigation was created on 17 April 2022 by User:Extraordinary Writ without any further notice to me. Now i am surprised that i was not aware about this discussion from the first day but how the other users Hemantha and Mvqr came to know about this discussion? Are they notified by the creator of this investigation?

Furthermore i want to say that i am not aware about the editors Mickyshy, Jeniwolf, Joystick, etc.. If i involved in any of the discussions where these editors are involved, it might be accidently. The above explanations do not have valid points. Any editor can easily copy and paste of other editor's activity. And i don't know how many editors are following my pattern. DMySon (talk) 12:56, 3 May 2022 (UTC)[reply]

This AFD may be of interest. DMySon reviewed an article created by Joystick, which I nominated for deletion. DMySon proceeded to close the AFD as keep, hours after it had been opened and before anybody commented. – ².O.^Boxing 18:56, 3 May 2022 (UTC)[reply]

•  In progress - Girth Summit _(blether) 18:02, 3 May 2022 (UTC)[reply]
• This is tricky - there are some wide ranges involved. However, Thefinaldestiny is  Confirmed to HemantChauhan.23, who created Draft:Riju Jhunjhunwala:
  • HemantChauhan.23 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• They are also technically indistinguishable (all on the exact same IP with the same UA) from the following accounts:
  • Rajji12 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (who edited about Riju Jhunjhunwala in their sandbox)
  • Unscrypted (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (who hasn't edited yet, but was created on the same IP a few hours after FinalDestiny's !vote in the AfD discussion
  • Soumya.dev (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (a very old account, whose password was reset from the same IP a few hours after Unscrypted was created
• Also on the same IP/UA (but separated by a few days) as the above is:
  • Siddharthwayoflife (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• I can't confidently tie any of these back to the blocked accounts, but they're  Possilikely (a mix between possible and likely) to MickyShy.
• JoyStick101 is no more than  Possible to any of the listed accounts. Same country, but they don't overlap on any IP ranges. I'm not going to do any blocking here just yet - I'd appreciate it if someone else could perform a behavioural evaluation, and if we're confident that BADSOCK has been crossed with regards to the confirmed/indistinguishable accounts, we can take action. Girth Summit _(blether) 18:42, 3 May 2022 (UTC)[reply]
• Blocked JoyStick101. Haven't had time to look at the others yet. --Blablubbs (talk) 22:14, 3 May 2022 (UTC)[reply]
• Blocked Thefinaldestiny too. --Blablubbs (talk) 08:46, 4 May 2022 (UTC)[reply]
• HemantChauhan.23 and Rajji12 are fairly obviously related per the Riju Jhunjhunwala connection (cf. [41]) although some of the behaviour seems a little different. Combined with the CU result however, it's clearly at least MEAT, so I've  Blocked and tagged those too. No action on Soumya.dev and Unscrypted because I have nothing to evaluate – we can revisit if they start editing. Siddharthwayoflife also has "COI energy", as the youths would say, but more the in-house marketing division kind ([42][43]), so I think the connection is spurious. Closing. --Blablubbs (talk) 09:04, 4 May 2022 (UTC)[reply]

• Albert191 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Celia143 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Robert187 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Strong page-overlap, piecewise editing and edit-summary style, and username similarity among these three, which popped up on my radar for other reasons. As I was about to file an SPI for them, I noticed they overlapped with DMySon, who was tagged as GermanKity, so here we are in this SPI. DMacks (talk) 20:35, 7 May 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Hello, SPI folks,

Oshwah, editor Kbv2024 has been asking today to restore an article created by User:Albert191 that was deleted yesterday. Any chance that they are part of this SPI group? Liz ^{Read! Talk!} 23:45, 8 May 2022 (UTC)[reply]

•  Clerk endorsed - I'm not entirely sure this is DMySon/GermanKity (the MO seems different) but these 3 accounts are clearly connected to each other through the username patterns, edit summaries and overlap on obscure articles. Endorsing CU to confirm and check for others - appears to be UPE. Thanks, Spicy (talk) 20:42, 7 May 2022 (UTC)[reply]
•  In progress... ~Oshwah~^{(talk) (contribs)} 23:09, 7 May 2022 (UTC)[reply]
• After popping around a few ranges, attempting to identify any connecting patterns, similarities, and other information, I am left with some mixed results:

 Confirmed to one another:

Robert187 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Celia143 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Otherwise, I'm going to have to call it  Possilikely (a mix between possible and likely) that these are all socks of one another, earlier socks, and the sock master. They all geolocate to around the same area, but what makes it difficult is that they all go between networks with extremely wide ranges, often crossing over the same ones. I'll also note that these users, as well as the previous sock users, all are likely editing from public workstations (such as in a media center, coffee shop, library, etc), and almost exclusively so. Each time I'd pull up a range by one of these (and previous) users to investigate technical details, I would find that nearly all users in that same range were borderline  Technically indistinguishable, as their user agents were all the same, and on different (new or older) versions of Operating Systems.

In the end, I do feel that there's enough circumstantial, technical, and behavioral similarities between these accounts, as well as the previous socks, to block and tag them. Hence I am doing so, and closing out this SPI report. ~Oshwah~^{(talk) (contribs)} 23:51, 7 May 2022 (UTC)[reply]

• Orlandofoster (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

UPE concern. History of piecewise summaries and editing. See also interaction analyzer 0xDeadbeef (T C) 12:11, 16 May 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress - Girth Summit _(blether) 16:39, 17 May 2022 (UTC)[reply]
• They're  Confirmed to Celia143, who for the record (since I don't see this spelled out explicitly in the archive) is also confirmed to Albert191, and also to:
  • Christina989 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• I can't say for certain that this group is connected to this master; the others are already blocked and tagged as suspected, so I will tag these as such. Closing. Girth Summit _(blether) 16:44, 17 May 2022 (UTC)[reply]

• Inspect61 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Manto yadav (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Source Wide (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Spkabil (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Edusite456 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Zim Cout (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Worldsolarpower (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Umakant Bhalerao (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Michael_goms (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Anthony Masc (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Wikibablu (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Aaliyahshaikh01 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Siddhart_pandey (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Jessy_lever (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

A lot of concerns have been shown against these accounts. Firstly here and then a COIN discussion here. Accounts reported above (1-5) are most likely their socks and some have received the block (just to confirm with a checkuser).

Zim Cout, Worldsolarpower popped up on this AfD, Wikipedia:Articles for deletion/Vaidehi Taman, so are UPEs anyway. Their pattern is similar to DMySon (politics, Uttar Pradesh) and per WP:BEANS can't write further here.

There is another WP:MEAT group led by Umakant Bhalerao, operating similar to DMySon's interests (politics, geography, etc.) and their reviewing style/timecard match hints that they are most probably employed by German Kity company, so listing Umakant Bhalerao and their probable socks Michael_goms, Anthony Masc, Wikibablu, Jessy_lever, Aaliyahshaikh01, and Siddhart_pandey after this and this discussion here. Please do a through checkuser against these accounts and I strongly suspect there are probably many more such accounts (probably with reviewing rights). Balchandra Upendra (talk) 13:05, 28 May 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• I haven't had the time to look at all of these accounts in detail, but as someone who's spent an awful lot of time looking at potential GermanKity socks, I think that some of these might be related (for instance, Spkabil has been on my radar for a while; see Wikipedia:Articles for deletion/Okeanos Group), but many of the claims are quite a bit more tenuous (for instance, Umakant Bhalerao's writing style seems to be distinct from DMySon's, although I've only taken a cursory look). I think we need a bit more evidence than "similar interests and overlap" to justify running checks against fourteen accounts, particularly since one is stale, four are already blocked, and one has nearly eight thousand edits. At this point, I'd recommend closing this SPI without action, without prejudice against refiling if more detailed behavioral evidence can be presented. Extraordinary Writ (talk) 18:53, 28 May 2022 (UTC)[reply]
• I realise that there are wiser heads than mine here. Extraordinary Writ is are very well positioned with regard to GermanKity and MER-C is so far ahead of me in UPE that I feel in awe.
  What I would say is that the report that started at ANI and arrived at COIN appears to have been well thought out (I am ignoring any putative motive for the report), such that "Something Ought To Be Done" though I acknowledge that this SPI report may not be that "something" and there may be better ways of handling it.
  I understand well the point made about the submitter's paucity of edits. I ask whether that is the most pressing part of this SPI report to be examined? I do understand the concept that rival paid editing farms can seek to eradicate their competition by SPI reports and other means. It appears to me that the SPI team is wel positioned to handle that concept. Whether that is done in the public areas of Wikipedia or not is up to policy and pragmatism. 🇺🇦 Fiddle^Timtrent Faddle^Talk to me 🇺🇦 22:02, 28 May 2022 (UTC)[reply]

  @MER-C Thank you for your further comments below. I agree that the filing is incoherent, and I see how much extra work our hard working clerks will have to do on this, especially to split it (presumably) into the separate investigations that you have highlighted. As an ordinary editor who despises sock puppetry and UPE I want express my thanks for your decision not to close this at this stage. It may be that this SPI is the key that locks the door against a UPE farm.

  I would suggest that there is sufficient going on here for the submitter to be investigated on the WP:BOOMERANG principle if nothing else. There is a nasty f]avour of spoiled duck about this filing. May I suggest respectfully to the clerks that they add Balchandra Upendra (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) to the CU list? 🇺🇦 Fiddle^Timtrent Faddle^Talk to me 🇺🇦 17:13, 29 May 2022 (UTC)[reply]

  To me this looks like OP is a part of a sockfarm that may or may not be GermanKity's. This could may as well be a conflict between two sockfarms. 0xDeadbeef 00:27, 30 May 2022 (UTC)[reply]

• See, I personally thought this one was obvious [my comment on the Okeanos Group AfD makes that clear enough] but I've been told to shut up about ducks time and time again around here. casualdejekyll 22:47, 28 May 2022 (UTC)[reply]

• And this filed by a user with 22 edits? Hmmm. MER-C 14:55, 28 May 2022 (UTC)[reply]

• • I blocked Inspect61 as part of the same set of sock as Source Wide.
  • Edusite456 was blocked as part of Wikipedia:Sockpuppet investigations/John Rayn
  • I blocked Manto yadav as a sock of Wikipedia:Sockpuppet investigations/Xenen1970
• This is an incoherent filing. I'm not going to close this because it is clear OP is a sock of someone. MER-C 16:53, 29 May 2022 (UTC)[reply]

  Regarding Manto yadav, see [44]. Odd. MER-C 18:14, 30 May 2022 (UTC)[reply]

• Closing. If someone wants to re-report any of these while providing actual evidence, I have no objections. This isn't saying "these aren't socks", or "these aren't spammers" – it isn't even saying "these aren't GermanKity". However, dragging this out is unlikely to make the diffs magically appear, and I can't endorse a discretionary check on the filer or anyone else without evidence tying them to a specific second account, however justified such a check may be – that's just not how SPI works. If you're looking for that, navigate to Special:EmailUser and insert the name of your favourite CU. Also, two more general notes:
  1. While third party input is encouraged, this is not a vote. Statements are most useful when accompanied by probative evidence, and statements about the merits of the filing are likely to be given little weight if not accompanied by such.
  2. "I would say X, but I've been told not to say X, so I'm not saying X" is still just a way of saying X, just a very verbose one.
• --Blablubbs (talk) 20:07, 30 May 2022 (UTC)[reply]

• BrutBrother (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

BrutBrother (formerly known as Worldsolarpower) was reported here in the mass filing from 28 May, which Blablubbs closed (with refiling allowed) due to a lack of detailed evidence. I'd like to provide some of that evidence now. As noted before, BrutBrother !voted keep in this AfD of an article that DMySon had marked as reviewed; both share interests in Uttar Pradeshi politicians. I'd add that the BrutBrother account was created on 24 Sept. 2017, just days before GermanKity's. The account then lay dormant until 11 May 2022, just days after DMySon's block. It has already jumped into new-page-patrol-related activities characteristic of previous socks, such as a large number of draftifications. The clincher here is that BrutBrother is apparently doing his best to imitate me, a user with whom he's never interacted: he copied large numbers of user scripts from my common.js file and has recently started reusing my (distinctively worded) AfD !votes almost verbatim (compare [45] with [46]; [47] with [48]; [49] with [50]). The only explanation I can think of is that he's trying to avoid the language-related giveaways that have gotten previous socks caught. (Very sneaky.) There's clearly something afoot here, and a connection to this group seems the most likely possibility. CU might be useful. Extraordinary Writ (talk) 06:25, 23 June 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk endorsed - worth a check for comparison to the archive & to see if there are any others - going by the history I wouldn't be surprised if we encounter messy ranges and/or proxy use, but regardless of the CU results this is clearly not a legitimate account. Thanks, Spicy (talk) 11:06, 23 June 2022 (UTC)[reply]
•  In progress - -- RoySmith (talk) 18:09, 23 June 2022 (UTC)[reply]
• BrutBrother is  Confirmed to DMySon. I rechecked most of the accounts in the archive and don't see any others which match this pattern, so it's possible that DMySon was incorrectly identified with this case. I've blocked the account, but I'll let a clerk figure out how the tagging should go. -- RoySmith (talk) 18:24, 23 June 2022 (UTC)[reply]
• Thanks. Tagged as confirmed to DMySon, suspected to GermanKity. This account is actually slightly older than GermanKity but since it's only a difference of a few days and the case has a substantial history under this name, I'm not going to bother with moving and retagging. Re. the relationship between DMySon and the other accounts, the behavioural evidence makes it pretty clear that these accounts are related to each other in some way, whether that's SOCK or MEAT. Closing. Spicy (talk) 21:12, 23 June 2022 (UTC)[reply]

• Nupamjo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• BrutBrother (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

BrutBrother, or I should say DMySon, are back as Nupamjo, with another old sleeper account. Pattern is almost similar like BrutBrother followed. Both (BrutBrother and Nupamjo created their account in 2017 (like GermanKitty), with a difference of one month). Both became inactive for almost 5 years and came back when DMySon received a block. Nupamjo resumed editing on 5 July 2022, once BrutBrother was blocked on 23 June 2022. Nupamjo followed BrutBrother's pattern, submitted a lot of politicians stubs (this time, different state just to avoid match) and then some geo stubs (like DMySon) on draftspace, see User talk:Nupamjo and User talk:BrutBrother for accepted drafts.

Once this done, they became a type of reviewer, and back to their old ways - a number of draftifications and speedy tags on daily basis in similar timezone. I stongly suspect this account is another DMySon's sock - in any case, they are a spammer as they once used this account to create a spam page, Ravindra Gautam (journalist). 217.165.89.226 (talk) 00:10, 22 August 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

In this non-clerk's non-expert opinion, there's no need to rename the case: this isn't the first time we've seen a slightly older account, and it likely won't be the last since older sleepers keep getting revived—we don't want to keep having to rejigger things again and again, particularly since there's a lengthy history under the present name. Extraordinary Writ (talk) 06:00, 5 September 2022 (UTC)[reply]

•  In progress - -- RoySmith (talk) 12:05, 31 August 2022 (UTC)[reply]
•  Confirmed -- RoySmith (talk) 12:10, 31 August 2022 (UTC)[reply]

  PS, Nupamjo appears to be the oldest account. -- RoySmith (talk) 12:11, 31 August 2022 (UTC)[reply]

• CBDDG (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Everything here lines up with what we've seen from previous GermanKity socks. The account creation dates match (just a few weeks older than the most recent sock, Nupamjo), and there are similar long sleeper-esque periods of inactivity, the most recent of which ended just days after the most recent block in this case. There's significant overlap with at least three different socks (GermanKity, DMySon, and MickyShy) at the spammy Coforge article, and there are edit-summary similarities (compare "...based on un-reliable resources..." with "based on non reliable resources") as well as the usual interests in draftification, deletion, and the like. Sounds like a duck to me; CU would be useful to confirm and/or look for sleepers. Extraordinary Writ (talk) 06:17, 5 September 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress - -- RoySmith (talk) 16:34, 5 September 2022 (UTC)[reply]
•  Likely based on the CU data, I'll block as suspected. I didn't attempt to find any sleepers. -- RoySmith (talk) 16:43, 5 September 2022 (UTC)[reply]

• Lambakarna (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

The clincher here is Special:PermaLink/1108787836, attempting (apparently) to import DMySon (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)'s common.js file directly—I can't think of any reason why a non-sockpuppet would want to do that. Moreover, the account follows this sockfarm's usual pattern (long periods of inactivity + a sudden interest in new-page-patrol-related actions). The one thing that gives me pause is that this is a really old account, far older than any of the other socks we've seen, but I think a plausible explanation is that this individual is simply running out of accounts and is reüsing increasingly old ones. (Another possibility is that the account was compromised, but this seems unlikely to me.) I've also sent an email to the paid-en-wp queue with additional information; please take a look at that as well. Extraordinary Writ (talk) 21:29, 6 September 2022 (UTC)[reply]

• Interesting, thanks. The tricky thing here is that since we're now catching these accounts so early, there's not a ton of evidence to look at (which is a good problem to have!). One thing worth noting is that the Babel boxes on Social-Informers's user page (ru-N, en-5) are identical to what used to be on GermanKity's user page, which is telling because (I assume) these accounts geolocate to a place where Russian speakers aren't exactly abundant. Note also that DMySon marked at least one of Social-Informers's creations—Tarun Dhanrajgir—as reviewed. On balance I do think this group is connected (whether as sock or meat) to GermanKity, but I understand if someone would prefer to categorize them separately. Extraordinary Writ (talk) 03:20, 7 September 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk endorsed - I haven't seen the private evidence, but I think the behavioural evidence (especially the commons.js file) and the fact that this account began engaging in the same type of activity immediately after the last sock was blocked is enough to justify a check. Thanks, Spicy (talk) 21:52, 6 September 2022 (UTC)[reply]
•  In progress GeneralNotability (talk) 01:53, 7 September 2022 (UTC)[reply]
• Lambakarna geolocates to the right city for GermanKity, but I don't have overlapping ranges or (non-common) useragents. They are also  Confirmed to the currently not-blocked Social-Informers (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), which looks like a merc account if I've ever seen one. I also see a few logged-out edits to past DMySon articles.
• Also, while checking old accounts for comparison data, I stumbled upon USFashionGeek (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Touchwithus (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Twisterdel (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (yes Twisterdel AfD'd a DMySon article, no I don't know why), all  Confirmed to Nupamjo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki).
• I'm going to block everyone listed above, but I'd appreciate a second opinion on the relationship of the Lambakarna group and will leave them untagged for now. GeneralNotability (talk) 02:16, 7 September 2022 (UTC)[reply]
• Based on the evidence above, if it's not socking, it seems to be meatpuppetry. I've dual-tagged Lambakarna and Social-Informers. Lambakarna is older than the current master, but per the various discussions about this in the archive, I'm not going to move the case. The MO involves reviving old sleeper accounts, and if we kept renaming the case every time an older one was found, we'd have moved it and retagged all the accounts half a dozen times by now. (Also, "GermanKity" is just cuter than "Lambakarna"). Thanks, Spicy (talk) 04:01, 7 September 2022 (UTC)[reply]

• DFXYME (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• DMySon (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Usual interest in geo location stubs of Uttar Pradesh, a review of Faraz Haider (musician) by User:DMySon ([51]), use of "reff" ([52], [53] vs. [54]), acting like a reviewer and some overlaps:

• User:GermanKity and User:DFXYME edited Nitya Mehra
• User:MickyShy, User:Celia143, User:Albert191, User:Robert187, User:DFXYME, all edited their client's page: Nicholas Graham
• User:NarangD, User:DMySon, and User:DFXYME edited Milk Mantra. Also, DMySon reviewed the company's founder page ([55])

Seems pretty WP:DUCK. Checkuser should help as it helped in the previous attempt. 86.98.88.64 (talk) 13:36, 9 September 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Seems pretty likely to me—also compare DFXYME's "non-reliable resource" with CBDDG's "non reliable resources. Extraordinary Writ (talk) 21:07, 9 September 2022 (UTC)[reply]

•  In progress - Girth Summit _(blether) 12:03, 10 September 2022 (UTC)[reply]
• GermanKity socks use quite a few different IP ranges. All of this account's non-stale contributions are from a range which has been used by GK socks in the past. The UA is the same (very generic) one that GK habitually uses. As such, it's certainly possible, but not conclusive. Certain elements of their editing history convince me that this account is connected to the others however, so I am going to block and tag as suspected. Girth Summit _(blether) 12:07, 10 September 2022 (UTC)[reply]

• KrutaX (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• BBSTOP (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• JasperKnight (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• DefenderBoy27 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

• KrutaX draftified Somashekhar SP three times. After KrutaX was p-blocked for misusing the draftification process, fellow sock Twisterdel (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) showed up to nominate the page for deletion. (As noted above, this page was created by yet another sock, DMySon.)
• BBSTOP made this comment with the unusual phrase "reliable news references"; DMySon used precisely the same phrase here. "From reliable resources" here has been used by DMySon here, here, and here, by JoyStick101 here, by Jeni Wolf here, etc. This account was created only a week after that of DefenderBoy27.
• JasperKnight uses the odd spelling "reff" (here and here), which has been pointed out in this SPI several times before (cf. DMySon; GermanKity).
• DefenderBoy27 created Nandita P. Palshetkar, which was defended at AfD by BBSTOP and previously-blocked sock Nupamjo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). DefenderBoy27 also created Jayanth Sharma (overlap with GermanKity and Social-Informers (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)) and Shalini Passi (overlap with DMySon), and there's further overlap with DMySon at Ketan R. Patel. This account was created only a week before that of BBSTOP. This !vote is 100% identical to this one by JoyStick101; no one else has ever used such phrasing before.
• All accounts follow the general pattern associated with this sockfarm: long periods of inactivity combined with a strong interest in new-page-patrol-related activities (draftifications, tagging CSD, PROD, AfD, etc.). There's also another giveaway that applies to all four accounts, but I'd prefer to keep it in my back pocket for WP:BEANS reasons—I'd be happy to explain by email to any interested clerk or CU if the evidence above isn't adequate. CheckUser (both for confirmation and for sleeper checks) will probably be useful. Extraordinary Writ (talk) 19:52, 10 September 2022 (UTC)[reply]
  • It's a shame that CU can't be more decisive here, but c'est la vie, I suppose. If we're proceeding solely on behavioral evidence, there's probably not enough here to block JasperKnight: the evidence isn't ironclad, plus that account hasn't edited in several months anyway. I'm also not too concerned about whether KrutaX is blocked since the p-block seems to have put that account out of commission. I do think the language-related similarities with regard to BBSTOP and DefenderBoy27 are pretty hard to explain away, so my view is that a behavioral block for those two would be warranted. Extraordinary Writ (talk) 18:10, 14 September 2022 (UTC)[reply]
    • I've replied by email, MarioGom. Cheers, Extraordinary Writ (talk) 19:36, 24 September 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

This case is being reviewed by MarioGom as part of the clerk training process. Please allow him to process the entire case without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.

•  In progress - -- RoySmith (talk) 19:54, 10 September 2022 (UTC)[reply]
• All these accounts are  Possible, but it's really just they're all in the same large country and there's some overlap on very wide IP ranges. In other words, pretty much ignore the CU results and  Behavioural evidence needs evaluation -- RoySmith (talk) 20:08, 10 September 2022 (UTC)[reply]
•  Additional information needed - I'll gladly review these additional beans, especially for JasperKnight and KrutaX. Either here, or by email. MarioGom (talk) 16:56, 24 September 2022 (UTC)[reply]
•  Awaiting administrative action - Presented evidence, editing style, and additional evidence submitted by Extraordinary Writ is convincing. Please, indef all reported accounts. Any patrolling admin is welcome to request additional evidence by email. While there is no PII, the details are effective enough that we better not spill the WP:BEANS. MarioGom (talk) 22:08, 24 September 2022 (UTC)[reply]
• Blocked, closing. MER-C 09:36, 25 September 2022 (UTC)[reply]

• DanielCraze (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• DFXYME (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Another obvious sock. DanielCraze (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) account was created on 27 February 2018. User:DFXYME started Prof Pankaj Choudhary ([56]) which was deleted once they were blocked. DanielCraze recreated the page, Pankaj Choudhary (professor), a few days ago. 86.98.10.192 (talk) 14:44, 24 September 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Behavior of this one is more like Wikipedia:Sockpuppet investigations/Marek.kapicak. MER-C 18:01, 24 September 2022 (UTC)[reply]
•  In progress... ~Oshwah~^{(talk) (contribs)} 22:07, 2 October 2022 (UTC)[reply]
• Definitely  Possible. Though they used different ranges and ISPs, they both geolocate quite closely. Given the evidence, I'm convinced enough to block and tag. Closing SPI... ~Oshwah~^{(talk) (contribs)} 23:00, 2 October 2022 (UTC)[reply]

• NextStepfor (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

This sockfarm seems to have a vendetta against the Somashekhar SP article, which DMySon created: Twisterdel nominated it for deletion, and KrutaX tried to move-war it out of mainspace. Today, the NextStepfor sleeper account showed up for the sole purpose of again nominating it for deletion. That account was created in late 2017 (a similar timeframe to previous socks), gamed autoconfirmed with helpful edits like this one, created a spammy article, and went into hibernation until now. Clearly not a legitimate account, and given the Somashekhar shenanigans I think it's probably GermanKity. As usual, requesting CU to confirm and look for others. Extraordinary Writ (talk) 07:51, 2 October 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Thanks Extraordinary Writ - I just came here to file the same report. The original AfD was ill-founded and the second one the same - given it is a single-purpose account I got the impression that it was a grudge against the individual by a sock. Curb Safe Charmer (talk) 18:30, 2 October 2022 (UTC)[reply]

•  In progress... ~Oshwah~^{(talk) (contribs)} 22:07, 2 October 2022 (UTC)[reply]
• Definitely  Possible, as the ranges used geolocate to the same country as past socks. The behavioral evidence is convincing; blocking and tagging. Closing SPI... ~Oshwah~^{(talk) (contribs)} 22:20, 2 October 2022 (UTC)[reply]

• ClickWiki (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• R-H-Luke (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• LGF 56 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• JennyAnd (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• MichaelDosa (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Vatsal0506 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Modus operandi is same, old accounts (registered in 2017 or 2018), long hibernation, and then suddenly they become a reviewer.

• Also, we have to keep an eye on this group's old deleted articles - they are trying to recreate them like Vaidehi taman was created today by R-H-Luke (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (already deleted after a clear consensus: Wikipedia:Articles for deletion/Vaidehi Taman) and another account LGF 56 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) created Afternoon Voice (soft deleted before), founded by Vaidehi Taman, and then suspicious editing by JennyAnd (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) - even though the page is not indexed on search engine yet (probably their long-term client).
• ClickWiki (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (registered in 2017 as expected) edited Vaidehi taman so overlaps with User:R-H-Luke.
• I strongly suspect that MichaelDosa (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) belongs to this group as they created Dr M Angamuthu with "Dr", a characteristic feature of this group like they have use "Prof" in title and many times use lowercase surname like in case of Vaidehi taman. ClickWiki was quick to join that page, so another overlap. Btw, they were registered in 2018 (same time period) and created this spam Apollo Sugar Clinics Ltd previously.
• Clickwiki's tag to ONG & ONG is also very suspicious (probably an attempt to charge more to their old client). It was created by this group's sock User:DMySon, [57].
• Vatsal0506 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) registered in 2017, became active to create a spam, Abhinav Kumar (Trivago guy). Clickwiki expanded this page, so clearly they related. Worth it to check Adoreabhi (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) because they suddenly popped up on a marketing person's page in October 2022 (they last edited in February 2022). There are probably more in their vault, so please check if we can find more. 76.71.110.46 (talk) 20:07, 3 October 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Checked ClickWiki per their retaliatory SPI, they are  Confirmed to USFashionGeek and a couple others. The rest still need checks. GeneralNotability (talk) 03:15, 4 October 2022 (UTC)[reply]
•  In progress - -- RoySmith (talk) 19:54, 4 October 2022 (UTC)[reply]
• I took a look at the remaining accounts. From the CU data, the best I can say is they all geolocate to the same large country, but that's almost meaningless. I'm also unclear on the status of the various accounts we've got tagged as confirmed to GermanKity. From what I can see from the notes we've got, they're all confirmed to DMySon, but I don't see any data that that actually confirms them back to GermanKity. I'm inclined to think we should rename this case to DMySon, and then we'd have a much clearer chain of data. -- RoySmith (talk) 20:18, 4 October 2022 (UTC)[reply]

• I am not sure about R-H-Luke, but behavioural evidence leaves little doubt that the others are connected, either sockpuppets or meatpuppets paid by the same paymaster. Vatsal0506 has been blocked by Bbb23, ClickWiki by GeneralNotability, and the rest by me. I am not closing this investigation in case someone else may like to do more checking on R-H-Luke. JBW (talk) 21:48, 4 October 2022 (UTC)[reply]
• OK, I have now looked at some deleted history which I hadn't seen before, and it is clear that R-H-Luke is also part of the same UPE/Sock collection, so I shall block that account, and I am closing this investigation too. JBW (talk) 21:54, 4 October 2022 (UTC)[reply]
• Tagged, archiving. Spicy (talk) 17:06, 15 October 2022 (UTC)[reply]

• SpeakNeak (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

The SpeakNeak account was created on 2017-10-10 (cf. ClickWiki (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), 2017-10-07; NextStepfor (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), 2017-10-08) and largely remained dormant until last week. It immediately jumped into new-page-patrol-related activities (AfD and CSD) and used the phrase "from reliable resources", which, as noted in the archive, has been used by many previous socks. Requesting CU to confirm and/or look for others. Extraordinary Writ (talk) 06:59, 8 November 2022 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress. --Blablubbs (talk) 09:46, 8 November 2022 (UTC)[reply]
• Not inconsistent with past socks, but nothing conclusive, and  No sleepers immediately visible. I'm convinced by behaviour.  Blocked and tagged. Closing.. --Blablubbs (talk) 09:49, 8 November 2022 (UTC)[reply]

• Tictictoc (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Everything here lines up with the pattern described in the archives: rapid-fire AfD !votes, a strong interest in NPP-related activities, large numbers of edit-count-inflating minor edits, dubious articles, etc. In terms of language similarities, we have "reff" in this edit summary (see the archives) as well as "Lack of Independently reliable references" here, which perfectly matches "lack of independently reliable references" by GermanKity here, the only other time that phrase has been used in Wikipedia history. The (on-wiki) private evidence from Wikipedia:Sockpuppet investigations/GermanKity/Archive#10 September 2022 (which I'm happy to share with clerks/CUs if necessary) also suggests that this account is a sock. Requesting CU just in case there's anything to be gleaned from SpeakNeak (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and/or the logs. Extraordinary Writ (talk) 23:39, 9 January 2023 (UTC)[reply]

Plenty of the blocked accounts in the archive predate both GermanKity and Tictictoc (e.g. BBSTOP and Lambakarna), so that doesn't really tell us anything. CU has been inconclusive in past as well, so I'm not too worried about that either; at this point I'd be inclined to block based on the behavioral evidence alone, but I'd appreciate a second opinion before doing that. Extraordinary Writ (talk) 00:35, 10 January 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Tictictoc was created well before GermanKity, so I would have been surprised if they were a sock. However, the behavioral evidence was dubious enough to, in my opinion, warrant a check. The result is  Unlikely. Reaper Eternal (talk) 00:24, 10 January 2023 (UTC)[reply]
• As your 2O @Extraordinary Writ:, I wouldn't be opposed to blocking as WP:DUCK. --TheSandDoctor ^Talk 05:14, 10 January 2023 (UTC)[reply]
  • Thank you TheSandDoctor: blocked; tagged; closing. Extraordinary Writ (talk) 06:36, 10 January 2023 (UTC)[reply]

• JackFrost987 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Uses ([58][59]) the edit summary "reff", which is discussed in the archives; created the dubious Teachmint article that was marked as reviewed by previously-blocked sock DMySon (see also the AfD); and otherwise fits the pattern followed by GermanKity socks, including a previously-noted giveaway that I can describe privately if the other evidence isn't sufficient for a check. Extraordinary Writ (talk) 01:49, 31 January 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• JackFrost987 is  Possible, but it's really nothing more than being in the same large country. -- RoySmith (talk) 02:44, 3 February 2023 (UTC)[reply]
• Blocked, tagged, closing. MER-C 11:13, 18 February 2023 (UTC)[reply]

• POTLY (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Nick Jamie2 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Misterrrrr (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

This report is related to the current Biotique AfD, which has participation from several new and new-ish accounts making similar, low-quality !votes in support of keeping the article (including the accounts named above) that several AfD regulars (including me) appear to agree is promotional and should be deleted.

The edit history of the Biotique article includes creation by POTLY on 15 December 2022 [60] and now-blocked Tictictoc reverting the removal of content [61] on 31 December 2022.

Both POTLY and Nick Jamie2 appear to have gamed autoconfirmed status (POTLY made a series of sandbox edits on 25 February 2019 [62], as did Nick Jamie2 on 9 February 2021 [63]), similar to behavior described in the 02 October 2022 section of this report. Similar to behavior noted in the 05 September 2022 section of this report, POTLY had a period of inactivity between 25 February 2019 and 19 September 2022, and Nick Jamie2 was inactive between 9 February 2021 and 15 November 2022 (one edit - a speedy deletion nom), and then was inactive until 9 January 2023.

In the Biotique AfD, Misterrrrr (previous account names: सोला का डोला and Patnaite) has engaged in "link dump" behavior, previously noted in the 02 May 2022 section of this report. However, their elaborate Userpage [64] also appears similar to previous Phoenix man sock Userpages, e.g. [65], [66]. Behaviors described in the 07 July 2021 section of the Phoenix man SPI archive seem similar to Misterrrrr, e.g. name changes, seeking an advanced permission (e.g. they followed up with TheSandDoctor about declined autopatrol permission [67]), and a focus on creating articles about "NPOL candidates" (noted in the previous discussion link by usernamekiran).

CU requested to confirm and/or check for sleepers. Thank you, Beccaynr (talk) 20:48, 28 January 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• I'm not a CU or clerk, but I endorse running a CU. I came across Mister during their early edits. From their first username (it is Hindi), I thought it was a throw away account, but later they renamed it. From day one, I realised they were not a new editor. I'm aware CU is not for fishing, but filer's observations are well reasoned, hence endorsement. —usernamekiran (talk) 22:09, 28 January 2023 (UTC)[reply]
• POTLY and Nick Jamie2 both look pretty GermanKity-esque to me: the long periods of inactivity, precocious interest in new page patrol, sandbox shenanigans, and UPE-ish AfD behavior are all telltale signs for this sockfarm. I'll also note that Nick Jamie2 uploaded files related to Purushottam Chakraborty, an article created by previously blocked sockpuppet DMySon. I'm not so convinced, though, about Misterrrrr, who edits by mobile, uses very different language, and just generally seems much less mature than GermanKity. Maybe he's a sock of someone else (I'm not too familiar with Phoenix man) or maybe he's just an overenthusiastic youngster, but I don't think he's a GermanKity sock. Oh, and just for the record, I reported Isihu, who was also behaving suspiciously at the Biotique AfD, over at Wikipedia:Sockpuppet investigations/Ameerah1, although I don't think there's a connection. Extraordinary Writ (talk) 00:09, 29 January 2023 (UTC)[reply]
• Thank you, Salvio giuliano, and I had been about to comment that LordVoldemort728 has a similarly elaborate Userpage [68]. LordVoldemort728 and Misterrrrr also communicate with each other on their respective User Talk pages, and a warning was issued to LordVoldemort728 about canvassing [69], and they discussed Misterrrrr's claim of being a news writer on Misterrrrr's User Talk page [70]. It seems possible that Misterrrrr could have copied the style of LordVoldemort728 for their Userpage. Beccaynr (talk) 00:41, 29 January 2023 (UTC)[reply]
• Misterrrrr's first edit (2 days after account creation) was to Draft:Alina Alam, created by blocked sock User:Jamalahmadpk, adding a link to another article created by same sock [71].

After Bhupenddra Singh Raathore was tagged for notability and other issues, they nominated it for AFD, let two other new accounts vote "keep, WP:GNG", then when a "delete" was added actually based on policy (and after I commented there on the suspicious creation and keep votes), they attempt a "speedy keep, nomination withdrawn" [72]. Note also the attempt to leave my comment out of the AFD discussion on closure. That AFD was then rightly sent to deletion review by @Curb Safe Charmer:, and the closure attempt was vacated. 2A01:4C8:522:ABAC:2565:A4A4:FD1C:7FA1 (talk) 07:06, 29 January 2023 (UTC)[reply]

• It was interesting to see that Misterrrrr's edit to Draft:Alina Alam was just after it had been moved to mainspace by Fifthapril, a sock of Mathieu Vouillamoz, so that connection may also be worthy of investigation. Curb Safe Charmer (talk) 09:07, 30 January 2023 (UTC)[reply]

• LordVoldemort728 recently nominated Dipsita Dhar at AfD - it was previously kept after a nomination by Dixiku, now blocked as a suspected sock of Sanketio31 (a sock farm that makes low quality AfD !votes that may be 'irregularly punctuated'). The nomination rationales seem similar, and Misterrrrr !voted delete on the recent AfD about an hour after the AfD was posted: Delete Non-notable politician Doesn't passes WP:NPOL, but see their next AfD !vote 4 minutes later [73], also nominated by LordVoldemort728, who has made several rapid noms: 05:21, 29 January 2023 Dipsita Dhar; 05:18, 29 January 2023 Dheeraj Sharma, 05:15, 29 January 2023 Fahad Ahmad and a !vote 05:12, 29 January 2023 [74] in an Afd nom by Misterrrrr. Beccaynr (talk) 07:38, 29 January 2023 (UTC)[reply]

  Hello, sorry. I was checking recent edits of usernamekiran, then I came across here. I'm sure that 2A01:4C8:522:ABAC:2565:A4A4:FD1C:7FA1 is a sock of Shawntheshipper and they're trying to block a newcomer that, they can earn by creating Wikipedia articles. If not, then pls come and comment by your account. I am really sad after looking into this, wikipedia is being captured by the paid editors. I had provided evidence about them to Rosguill about Shawntheshipper, pls have a check there also. I'll never regret when I'll be blocked by any chance also never come back. I am just a keen of writing, bought a new laptop that to edit more efficiently here. anyone of you can see me physically, can check my phone, laptop. im currently in Panchanna Gram Kolkata, going to Nawada Bihar tomorrow for which i created an article. but leave, i know no one is here to listen to me. this will be Wikipedia's loss that an enthusiastic editor is blocked by fake allegation made by socks. --- Misterrrrr (talk) 08:53, 29 January 2023 (UTC)[reply]

  I am having my 12th boards from February 24, but I'm still for my Hobby. --- Misterrrrr (talk) 08:57, 29 January 2023 (UTC)[reply]

• I have only checked POTLY and Nick Jamie2, for I'm not sure I see enough evidence to justify running a check on Misterrrrr as well. Anyway, the two accounts are a  Possible match to Tictictoc and SpeakNeak. They edit on the same IP ranges and use the same UA, although the IP ranges are very busy and the UA is incredibly common, so I'll take the easy way out and say  Behavioural evidence needs evaluation Salvio ^giuliano 00:27, 29 January 2023 (UTC)[reply]
• I have blocked POTLY and Nick Jamie2 based on the combination of the CU and behavioural evidence, particularly that provided by Extraordinary Writ. Misterrr was blocked at another SPI. Closing. Thanks, Spicy (talk) 20:59, 10 April 2023 (UTC)[reply]

• NukeFrost (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Recreated Pankaj Choudhary (professor) by NukeFrost (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), that was previously created by GermanKity socks such as User:DanielCraze and Prof_Pankaj_Choudhary by User:DFXYME. Another sock User:Tictictoc edited a spam article, Elliot Bogod, created by User:NukeFrost. INGEK is another nn spam. 94.204.139.233 (talk) 19:36, 29 January 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Misterrrrr came to my talk page and mistook me for @Primefac, they said they were currently being investigated for being a sock. Here's the diff. Not sure if this is useful context to know. Philipnelson99 (talk) 05:40, 30 January 2023 (UTC)[reply]

• Misterrrrr also made this odd post to LordVoldemort728's talk page: [75].

But as noted by Curb Safe Charmer above, Misterrrrr's first edit on account creation a month ago was to Draft:Alina Alam, created by a blocked sock of User:Mathieu Vouillamoz, just after another sock of Mathieu Vouillamoz moved the draft to main space: [76]. So maybe Misterrrrr should be investigated at WP:Sockpuppet investigations/Mathieu Vouillamoz.

To that SPI, we might also look at adding Sahilrazvii999 and Shanaya Chaturvedi. These new accounts, with precocious editing histories similar to Misterrrrr, were the ones I mentioned above posting the hand-waving "keep GPG"s [77], [78] to Misterrrrr's AFD nomination, which Misterrrrr then tried to speedy-keep as I noted in the 28 January report above.

Finally, Misterrrrr and Sahilrazvii999 posted "keep" to LordVoldemort728's AFD Wikipedia:Articles for deletion/Fahad Ahmad, 15 minutes apart: [79], [80]. Misterrrrr also altered the unsourced birth date in Fahad Ahmad shortly before the AFD: [81]. 2A01:4C8:A4:D8F:B8AB:B924:1F2C:72ED (talk) 14:29, 30 January 2023 (UTC)[reply]

Sahilrazvii999 also !voted keep at the Biotique AfD [82], and Graham87 has blocked Shanaya Chaturvedi [83]. Beccaynr (talk) 17:07, 30 January 2023 (UTC)[reply]

• Just like POTLY and Nick Jamie2, NukeFrost is  Possible but  Behavioural evidence needs evaluation. They are all editing on the same IP range and the UA is practically the same, but that's not very strong evidence, because the range is vast and very busy and the UA is common. Again, I'm not going to run a check on Misterrrrr, because I haven't seen evidence that he is a sock of GermanKity's and  CheckUser is not for fishing. If you think they are a sock, please report them on the SPI of the correct master with the relevant evidence and a clerk or a checkuser will take a look. Salvio ^giuliano 18:35, 30 January 2023 (UTC)[reply]
• Based on comparison of deleted contribs and some other behavioural cues, I'm confident that this is either a sock or an UPE meatpuppet. Blocked and tagged. Spicy (talk) 21:06, 10 April 2023 (UTC)[reply]

• GuildGM (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: originally filed under this user)

• Saistam Ahloo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

GuildGM created the spam article about PP Reddy, which was deleted on February 11, 2023, but then Saistam Ahloo recreated it with the name P.P. Reddy on February 14. It seems that this is an obvious case of sockpuppetry. It seems they often operate many accounts at the same time. So requesting for a checkuser to determine if there are any potential sleeper accounts. Akevsharma (talk) 02:08, 15 February 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• GuildGM is a weak  Likely to Saistam Ahloo
• Additionally, TheGrandSon (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is  Confirmed to Saistam Ahloo.
• There are a few other accounts that might be them, including some currently listed at Wikipedia:Sockpuppet investigations/GermanKity, which would fit with Special:PageHistory/Sunjay Kapur. I'll leave this on checked pending evaluation of that connection; in the meantime, all three are  Blocked but awaiting tags because this looks like spam and scrutiny evasion. --Blablubbs (talk) 12:03, 15 February 2023 (UTC)[reply]

  If at all helpful, some also at Wikipedia:Sockpuppet_investigations/Princek2019/Archive per @Girth Summit check. I'd thought Grand Son was the original master there. Star Mississippi 14:47, 15 February 2023 (UTC)[reply]

  @Star Mississippi: - yes, the accounts over at Princek2019 are unconnected to TheGrandSon - two different sockfarms, by the looks of things, I guess I should have looked harder at TheGrandSon at the time. Girth Summit _(blether) 12:18, 16 February 2023 (UTC)[reply]

  Courtesy note - see below, I'm pretty confident this is GermanKity. Girth Summit _(blether) 12:14, 16 February 2023 (UTC)[reply]

• Moved from Wikipedia:Sockpuppet investigations/GuildGM. Spicy (talk) 21:31, 17 February 2023 (UTC)[reply]
  • Blablubbs, when you say some [accounts] currently listed at Wikipedia:Sockpuppet investigations/GermanKity might be them, which accounts are you referring to? There are a number of unblocked accounts on this page. Spicy (talk) 21:34, 17 February 2023 (UTC)[reply]

    @Spicy: POTLY, Nick Jamie2, NukeFrost. To be clear, that connection isn't much more than "very  Possible". --Blablubbs (talk) 13:37, 18 February 2023 (UTC)[reply]

• Closing as everyone is blocked. Spicy (talk) 21:07, 10 April 2023 (UTC)[reply]

• GuildGM (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: originally filed under this user)

• FreeEncyclo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

FreeEncyclo is not a new user. In 2018, they attempted to create a spammy article, ClearCoin.co, which turned out to be their final edit. After being inactive for almost five years, FreeEncyclo reappeared and nominated Electronics Mart India Limited which I created for deletion on February 14. This happens to be the same date as P.P. Reddy's article was deleted, which I had tagged for G4. I suspect that this might be a form of revenge. Prior to their nomination, FreeEncyclo had only made less than 15 edits in mainspace, and it is highly unusual for a new user to make such a perfect nomination by citing relevant Wikipedia guidelines. At first, I thought this was just a random nomination, but the fact that they gave me unnecessary UPE warnings suggests that they may have targeted me personally. I reported this user to the admin UtherSRG, who advised me to file against them.

It is intriguiging that, based on recent developments, I am confident that TheGrandSon and FreeEncyclo are one and the same. TheGrandSon's last edit occurred on July 12, 2018, before re-emerging on January 7, 2023. Meanwhile, FreeEncyclo's last edit was on March 18, 2018, and then again on February 14, 2023. Their behavior seems to follow the same pattern: producing a spam article in the sandbox and attempting to publish it. I believe that this serves as evidence. Akevsharma (talk) 12:41, 15 February 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk endorsed - Please, comapre FreeEncyclo to Saistam Ahloo, TheGrandSon and GuildGM. Vanjagenije (talk) 09:33, 16 February 2023 (UTC)[reply]

  Vanjagenije - FreeEncyclo is  Technically indistinguishable to all three of those accounts. They're all editing out of the same (wide) range, using the same (very common) UA. There are lots of other accounts on the same range which are similarly indistinguishable, but I think the AfD nomination after five years of inactivity makes it pretty clear that this is the same person. I'm going to block. Girth Summit _(blether) 11:31, 16 February 2023 (UTC)[reply]

•  In progress - hang on - looking more closely at that range, I think I see some more accounts, give me a minute. Girth Summit _(blether) 11:37, 16 February 2023 (UTC)[reply]
• OK, I'm confident that the following are all  Confirmed to FreeEncyclo:
  • Judie345 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • StyleArt (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• I'm wondering whether this might be GermanKity - certainly, they look very similar (technically indistinguishable, in the same way as the accounts above) to SpeakNeak, and Judie345 has edited Manipal Hospitals (previously edited by DMySon and KrutaX, and Ranjan Pai (previously edited by BrutBrother. Girth Summit _(blether) 12:00, 16 February 2023 (UTC)[reply]
•  Clerk assistance requested: - please consider merging this into GermanKity case. A check on StyleArt shows them not just editing out of the range involved here, but also out of another range that GermanKity has used a lot (accounts like Tictictoc JasperKnight). Girth Summit _(blether) 12:14, 16 February 2023 (UTC)[reply]
• Moved from Wikipedia:Sockpuppet investigations/GuildGM. Spicy (talk) 21:31, 17 February 2023 (UTC)[reply]
• Tagged, closing. Spicy (talk) 21:36, 17 February 2023 (UTC)[reply]

• Mercenf (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: original case name)

• Mercenf (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• GermanKity (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Mercenf previously as US-Verified shows strong signs of old blocked UPE sock GermanKity. Similar Editing Patterns and timing of doing edits shows a strong suspicion that Mercenf and GermanKity are operated by the same user. It can be seen through their Mercenf Contributions and GermanKity contributions they are back again and still manipulating wikipedia policies. I would not be surpised if there were to be a negative CU-result for this as they are master in it. A behavious check clearly shows that both these accounts are operated by one individual or upe firm. Mealuget (talk) 09:03, 18 July 2023 (UTC)[reply]

Hi, Girth Summit thanks for looking into this. The first thing that raised suspicion is using country names in their username like using German in GermanKity username and US in US-Verified username. The second thing is the timing of doing edits which is very similar. The third thing is rapid AFDs fire. All these similarities strongly indicates that they are connected or operated by an UPE individual. I hope it helps. Mealuget (talk) 11:38, 18 July 2023 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Additional information needed - Mealuget You haven't actually presented any evidence here, just an opinion that they are the same user. Please can you explain specifically what about their editing makes you think that they are GermanKity? Thanks.Girth Summit _(blether) 10:09, 18 July 2023 (UTC)[reply]
• No real evidence of a connection here. Having a country in your username is not particularly unusual; the times at which they edit are not particularly similar; lots of people get involved in AfDs. Closing without action. Girth Summit _(blether) 12:01, 20 July 2023 (UTC)[reply]

• Macbeejack (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Pro forma. I'm not going to provide all the evidence here for BEANS reasons, but here's a sampler. In addition to the pattern of interest in patrolling new pages discussed in the archive:

• Here, Macbeejack uses the phrase "Topic is not meeting WP:GNG". This phrase was used once by a GermanKity sock and never by anyone else in Wikipedia history.
• Here, Macbeejack uses the phrase "satisfy subject's notability criteria". This phrase was used once by a GermanKity sock and never by anyone else in Wikipedia history.
• Here, Macbeejack uses the phrase "justify subject's notability". This phrase was used six times by a GermanKity sock, twice by other (possibly related) sockpuppets, and never by anyone else in Wikipedia history.

See also this comment from a CU. Extraordinary Writ (talk) 22:35, 25 March 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked and tagged. Closing. Extraordinary Writ (talk) 22:36, 25 March 2024 (UTC)[reply]

• Rathore Kumar (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• SaifJoo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Jai Shree2 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

GermanKity sock User:StyleArt either created or significantly contributed to Osama Said in July 2022. They requested undeletion a week later, and it was AFD'd a second time in August 2022.

Rathore Kumar recreated it at Osama said (film editor) in September 2022 which was nominated for db-A7, then moved to Osama Said where it was deleted and salted after a 3rd AFD. Rathore Kumar then created Osama said (colorist), which was moved to draft, declined, and eventually deleted G13. In April 2023. Today Rathore Kumar tried again with Osama Said (film editor) (note the capital "S"). This has been speedied G4. Minutes later, they try again with Osama Said (Producer)/Osama Said (producer). Rathore Kumar is more or less a SPA for Osama Said. Wikishovel (talk) 09:47, 14 March 2024 (UTC)[reply]

Adding sleeper SaifJoo, created September 2021. First edits were today at Osama Said (producer), an hour after its creation [84]. Next reverted my addition of G4 speedy tag: [85]. Requesting checkuser for further sleepers. Wikishovel (talk) 10:17, 14 March 2024 (UTC)[reply]

Adding sock Jai Shree2, thanks User:ThaddeusSholto. Wikishovel (talk) 15:25, 14 March 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Jai Shree2 appears to be the newest sock. ThaddeusSholto (talk) 14:25, 14 March 2024 (UTC)[reply]

• Spicy, I just came across User:Macbeejack who was recently tagged for being a sock of GermanKity but I don't see their username listed here. Is this an accurate identification? They have been editing for a while and I would think that they would have popped up on any earlier checkuser searches. Thanks. Liz ^{Read! Talk!} 20:32, 6 April 2024 (UTC)[reply]

Oh, I see that they are on an archive post that was added AFTER this complaint was posted which is peculiar. Liz ^{Read! Talk!} 20:35, 6 April 2024 (UTC)[reply]

• Rathore Kumar, Jai Shree2 and SaifJoo are  Confirmed to each other. I suspect that they are using residential proxies, although I can't be entirely sure, so they are either  Inconclusive to this case or technically  Unrelated. I'll block but  Behavioural evidence needs evaluation to figure out if these belong under this case or a separate one. Spicy (talk) 22:56, 30 March 2024 (UTC)[reply]
• On investigating the behavioral evidence, I found an additional data point tying Rathore Kumar to previous sock DMySon. Combined with the evidence already given it looks like enough to tag these three as Suspected to GermanKitty. Tagging and closing case. The Wordsmith^{Talk to me} 23:01, 8 April 2024 (UTC)[reply]

• HydeeJack (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

SPA HydeeJack autocreated on ENwiki 17 February, immediately began recreating Siddu Moolimani (last created by sock User:Macbeejack) at draft. Today when that was declined, immediately recreated it in main space at Siddu Moolimani (actor), now moved to Siddu Moolimani. Wikishovel (talk) 15:05, 13 May 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Technically  Possible; because of the nature of the data, it's best to rely on behaviour here. The username is certainly intriguing. Spicy (talk) 22:10, 19 May 2024 (UTC)[reply]
• There is a high degree of similarity between the recreation and the deleted article. Blocked, tagged, closing. MER-C 18:34, 20 May 2024 (UTC)[reply]

• JamieStar21 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Recreated GMM Pfaudler which was previously created by GermanKity's sock User:JoyStick101 and reviewed by another sock User:DMySon in November 2021 [86]. Also the creator of Anisha Singh which was later significantly expanded by yet another sock User:Macbeejack. 157.45.144.247 (talk) 20:31, 15 June 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked and tagged. Closing. Blocked per behavioral evidence. Thanks for reporting this. — Newslinger talk 08:10, 23 June 2024 (UTC)[reply]

• Annie457 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Obvious block evasion, SPA Annie457 created 15 May (before last SPI), and went to sleep. Awoke today to recreate Ashish Singhal at Singhal Ashish -> Draft:Singhal Ashish. Requesting checkuser for further sleepers. Wikishovel (talk) 10:17, 16 July 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Blocked and tagged, leaving open for CU. —Ingenuity (t • c) 21:45, 16 July 2024 (UTC)[reply]
• They're on the same (huge) range as a couple of past socks. Otherwise CU reveals nothing of interest. Spicy (talk) 14:09, 22 July 2024 (UTC)[reply]

• DJ InstaMalik (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

Pro forma. In addition to the giveaway I've mentioned in the archives and other general patterns, there's overlap with at least four GermanKity socks at Coforge, one at Sanjiv Bajaj, and two at Rizwan Sajan. DJ InstaMalik began by uploading commons:File:Amit Kadel.jpg, which an IP instantly added to Akade, an article frequented by at least three GermanKity socks. Extraordinary Writ (talk) 00:05, 24 July 2024 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked and tagged. Closing. Extraordinary Writ (talk) 00:06, 24 July 2024 (UTC)[reply]