Wikipedia:Requests for checkuser/Case/Runescape cheats

[edit] Runescape cheats

• Runescape cheats (talk • contribs • logs • block user • block log • checkuser)

• Code letter: A, C

Runescape cheats is the latest of what seems to be a string of sockpuppets attempting phishing at RuneScape (edit|talk|history|links|watch|logs). They have all inserted a message, such as this one, attempting to trick readers into sending their game usernames and passwords to a Yahoo email address. Other sockpuppets are far back in the article history (which is one of the most edited) but the email address in the latest attack looks very familiar to those of previous attacks. The operator seems to have some familiarity with Wikipedia practice; this latest account spent nearly a month as a sleeper account to circumvent semiprotection, and also created an empty AfD page for the nonexistent Runescape cheats (see deletion log). There may even be other sockpuppets lurking out there. See also the discussion of this here. CaptainVindaloo ^{t c e} 02:54, 29 October 2006 (UTC)

Clerk note: Please list the usernames of those who you believe are tied with this account. Daniel.Bryant 03:07, 29 October 2006 (UTC)

Well, part of the problem is that there is a skipload of history to go through - 13,000 for the main RuneScape article alone. There's also the subpages, talkpages and articles now deleted. All we really need to know is are there any more out there? A trawl through the history of Talk:RuneScape gets Romeroma (talk • contribs • logs • block user • block log • checkuser), but I'm not sure if they're related. I'm sure i've seen the Yahoo address before though, in another attack. And almost all of the vandals we get are of the petty "runescape sux lolololol" persuasion who've probably never heard of WP:AfD. I'll keep combing the histories to see if I can find another sock. CaptainVindaloo ^{t c e} 03:49, 29 October 2006 (UTC)

I've just realised: Runescape cheats (edit|talk|history|links|watch|logs) was speedied a couple of weeks ago - maybe the creator of that is one? An earlier version of that was moved to RuneScape cheats (edit|talk|history|links|watch|logs) then deleted, this version was deleted longer than a month ago and has been recreated several times. Not being an admin, I can't check their histories. Thanks, CaptainVindaloo ^{t c e} 03:56, 29 October 2006 (UTC)

Inconclusive, I was intrigued enough to check anyway, but CheckUser doesn't turn up anything. Dmcdevit·t 01:32, 31 October 2006 (UTC)

Okay. Thanks for checking, at least we know we're in the clear for now. I guess the email just looked similar to the one I remember. I was going to post on ANI about this and ask for the miscreant and any socks to be blocked, but thats been done already. Cheers, CaptainVindaloo ^{t c e} 16:45, 31 October 2006 (UTC)