Riyadhcafe87 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

03 October 2021[edit]

Suspected sockpuppets[edit]

• 2001:16A2:1314:FC00:2404:A7D9:86B3:21B8 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 2A00:23C6:1981:9801:70D8:488A:BA23:4054 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 159.196.171.152 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

PR edits (either adding text or removing large sections of criticism) made by IP addresses either in Saudi Arabia or 20min walk from Saudi London Embassy and other prominent Saudi offices in London. Third ip I couldn't tie to a physical address but follows same pattern, therefore checkuser has been requested. All notable actions taken in articles created by puppetmaster, who has disclosed being a paid editor by the Public Investment Fund, a Saudi sovereign wealth fund. Edits are in pages either of the PIF or of organizations owned by the PIF.

• Diffs for ip1: diff diff. Similar dismissal of edits due to irrelevance used by puppetmaster, see "how is that relevant" on another mention of ties to the Kashoggi assasination.
• Diff for ip2: diff. Dont have much suspicion of this ip, but thought it was alarming due to proximity to Saudi embassy in London.
• Diffs for ip3 (note waiting time to avoid flagging edit war allowing edit to be unnoticed): diff followed over a week later by diff. Note presence of information tying the institute to the Khashoggi murders being removed, same as ip1 above and linked talk page edit by puppetmaster. A. C. Santacruz ⁂ Talk 11:15, 3 October 2021 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• I'd take a look at Riyadhcafe87 (talk · contribs) and Alte Kanzlei (talk · contribs), particularly since the latter abruptly materialized during the RFC, and both at this point look to have the earmarks of SPA accounts. I looked at the LTA pages for known paid editing groups banned on site, and from my peek none of the 3 pages cover anything of this nature, all the same it may be something to keep in mind here. TomStar81 (Talk) 12:18, 3 October 2021 (UTC)[reply]
  • Forgot to note that Bbb23 (talk · contribs) blocked Alte Kanzlei for 3RR violation, which could empirically suggest one account created to revert and get shot down to protect the other. Both were exlusively active on this page over the October 1 time period. TomStar81 (Talk) 12:41, 3 October 2021 (UTC)[reply]
    • Alte Kanzlei only has edits about wolves (of mostly disruptive quality, per a quick google translate) and of matters related to the arab peninsula in de.wiki, suggesting an arab connection that would fit Riyadhcafe's profile, in my opinion. A. C. Santacruz ⁂ Talk 14:18, 3 October 2021 (UTC)[reply]

Tarafa15 has possibly similar editing patterns to the accounts mentioned above as possible sockpuppets, see:

• Bludgeoning on user talk pages here diff diff diff, diff, talk page (archived), diff
• Attemp at whitewashing articles related to Saudi Arabia's government/ministries using WP:LAWYER here

• Note especially content related to the PIF and the Crown prince Mohammed bin Salman (which Riyadhcafe87 works for):

• Draft pages:[1], 2, 3
• Talk pages: 1 (archived), (archived), (archived)

• Similar failure to disclose paid editing until late in an RfC see collapsable discussion in this talk page

• Repeatedly contacting the same editors diff, diff, User_talk:Snow_Rise/Archive_13#Mohammad_bin_Salman
• PR edits [[2]], [[3]].A. C. Santacruz ⁂ Talk 15:42, 3 October 2021 (UTC)[reply]

Note significant overlaps in when Tarafa15 stopped editing Special:Contributions/Tarafa15, and when Riyadhcafe87 started Contributions page, matching with length of edits on draft pages, and Riyadh editing like someone with experience right from the beginning in their first non-userpage edit. A. C. Santacruz ⁂ Talk 15:48, 3 October 2021 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments[edit]

•  Check declined – Checkusers will not link accounts to IPs, per the privacy policy. Spicy (talk) 11:35, 3 October 2021 (UTC)[reply]

• Oh, didn't realize. Thanks for the quick response, and have a good weekend. Thanks for wikignoming. A. C. Santacruz ⁂ Talk 11:38, 3 October 2021 (UTC)[reply]

• @A. C. Santacruz: They're not done yet, they are waiting for behavioral evidence. Have they used any similar terms/phrases/lingo? Have they "got each other's back", as it were? The more you and others can provide for the behavior evidence the more they do a thorough investigation. TomStar81 (Talk) 11:52, 3 October 2021 (UTC)[reply]

• I was responding to the privacy policy, TomStar81. Sadly these IPs make very few edits, and have no time overlap between them, so behavioral evidence is hard to gather. My concern is that they are all working for the Saudi government (directly under PIF or otherwise, such as Tarafa15). Riyadhcafe87 would seem like the obvious puppetmaster, but it could be a wider editing campaign. A. C. Santacruz ⁂ Talk 13:25, 3 October 2021 (UTC)[reply]

• The IPs are all long stale, so closing with no action. -- RoySmith (talk) 16:08, 5 November 2021 (UTC)[reply]