Wikipedia

Wikipedia:Sockpuppet investigations/DataNomad

< Wikipedia:Sockpuppet investigations

DataNomad

DataNomad (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Populated account categories: confirmed · suspected

For archived investigations, see Wikipedia:Sockpuppet investigations/DataNomad/Archive.


29 August 2025

edit

  – This SPI case is closed and will be archived shortly by an SPI clerk or checkuser.

Suspected sockpuppets

edit

The new sock is focused on fixing grammar, spelling mistakes, Improving articles. but these articles' topics are all about either school shootings, massacres, Mass killings, they occasionally edited wars and characters.[1][2][3][4][5][6] their blocked socks have done the same old activities (which is fixing grammar).[7][8][9][10] the sock has edited 2 articles that are related to the Arab Revolt.[11][12][13] the master created an article that is related to the Arab Revolt.[14] The Sock is obsessed with creating articles that are about "murders" or "massacres".[15][16] the old blocked socks drafts or articles were previously mentioned in the SPI of having the same related topic of massacres and murders.[17][18][19][20][21][22] R3YBOl (🌲) 18:47, 29 August 2025 (UTC)[reply]

Comments by other users

edit
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
asilvering The evidence shown that this user is DataNomad. I thought the user was MHD because they made edits while logged out, but now I'm convinced this user is DataNomad. Because this IP 81.109.99.117 (talk · contribs · WHOIS) is specifically editing this article that (شیکشاکشۆک) created on ckb Wikipedia. [29]. Also, the user first claimed to be French [30] and then changed it to American, [31] I'm pretty sure they're hiding something. Kajmer05 (talk) 20:12, 30 August 2025 (UTC)[reply]
Being interested in the US is allowed for a French citizen. Izno (talk) 21:00, 30 August 2025 (UTC)[reply]
They first created an account called شیکشاکشۆک (Kurdish), then they claimed to be French on another account, being a French doesn't make you American if you edit about America. The interesting thing is that in their first edits, they edited articles about Kurds, [32] and after the CTOP warning, [33] they started giving attention to random articles. But I accept that this was unnecessary information, the focus should be on the evidence above. Kajmer05 (talk) 22:48, 30 August 2025 (UTC)[reply]
  1. I first reported the user here Wikipedia:Sockpuppet investigations/MHD1234567890 D&d887, confirmed with two other accounts. شیکشاکشۆک (talk · contribs) Nice.exe (talk · contribs) [34] To be honest, I first thought the user was MHD, but now I'm convinced it's DataNomad.
  2. شیکشاکشۆک, one of the confirmed accounts of D&d887, creates an article against the Yazidis in ckb Wikipedia. [35] The name of this article is the (1832 Firman of the Yazidi). DataNomad had previously created an article with almost the same name, again against the Yazidis. (Seventy-second firman of the Yazidi) Wikipedia:Articles for deletion/Seventy-second firman of the Yazidi
  3. شیکشاکشۆک creates a draft article on ckb Wikipedia and then Average kurd (aka Kurdo7aladen) makes edits to this draft article. [36] It is already known that DataNomad and Average kurd know each other. [37]
  4. This IP 81.109.99.117 (talk · contribs · WHOIS) is editing this article created by شیکشاکشۆک. [38] This IP was blocked in this SPI file. [39]
  5. As for the CU results, as I mentioned before, they are either using VPN or they have changed their devices. CU is not always great, so these should be evaluated. Kajmer05 (talk) 10:59, 31 August 2025 (UTC)[reply]
Since it came up in the clerking below, I think it might be worth adding that "MILAN2875285275" is likely a reference to a French missile launcher named MILAN, and there's some thought that our sock(s) could be this of a Francophile. ~ Pbritti (talk) 17:25, 31 August 2025 (UTC)[reply]
  • I'm not sure what is happening here but I see PhilKnight saying "unlikely" but this editor has now been indefinitely blocked as a sock and all of their page creations CSD G5'd. How did this editor go from "unlikely" to positively certain of being a sockpuppet? Liz Read! Talk! 22:18, 31 August 2025 (UTC)[reply]
    first ''unlikely'' then ''inconclusive'' R3YBOl's evidence and my additional evidence suggest that this user is at least a sock. As I mentioned above, CU is not always perfect. Kajmer05 (talk) 22:22, 31 August 2025 (UTC)[reply]
    @AmandaNP It would be unfair to call the evidence weak. cross-wiki evidence, in particular, strengthens the claim that this user is a sock. Creating article on ckb Wikipedia in their first edits already shows that they are an experienced user. Kajmer05 (talk) 23:16, 31 August 2025 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

edit
Looking again, the result should have been   Inconclusive because the underlying IPs geolocate to 3 different countries. The result against Kurdo7aladen is similarly   Inconclusive. PhilKnight (talk) 10:25, 30 August 2025 (UTC)[reply]
  •   Closing without action. I genuinely don't see the behavioural link here at all. asilvering (talk) 21:07, 29 August 2025 (UTC)[reply]
  •   Clerk note: Kajmer05, are you saying you think MHD is DataNomad? Also, I see MILAN2875285275 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is active again, previously down as "unrelated" in that sockfarm, should probably be checked against this one since there's overlap. asilvering (talk) 19:45, 30 August 2025 (UTC)[reply]
    They're saying that the group I IDd, which includes the suspect here, is DataNomad, and they believe MHD was not the master of that group.
    D&d887 is using the same common device as the previously confirmed sock Bins1000 but is not at all on the same network; Bins is in one place consistently (mostly, they drop onto a proxy once) and D&d appears to be using a proxy (Phil's "3 countries"). (I am a little more certain here though, they appear to be primarily in one country that isn't the same as Bin's and just forget to turn their proxy off occasionally.)
    I do think the user under discussion is not Kurdo7aladen, who has been active recently elsewise, after looking at relevant data.
    It's always ok to proceed to blocks solely on behavioral evidence, potentially for meat- rather than sockpuppetry.
    (I wrote this yesterday and didn't upload it.) Izno (talk) 23:26, 31 August 2025 (UTC)[reply]
  •     CheckUser requested and endorsed by clerk - Ok, with the additional evidence here now I'll call it suspected, thanks Kajmer05 for pointing out the cross-wiki link. Relisting for a check on MILAN against this sockfarm and the Kurdo7aladen one (may as well check against both since we seem to be having so much trouble telling the three apart). asilvering (talk) 17:41, 31 August 2025 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/DataNomad&oldid=1308905302"