Bellingcat found that Ruptly domains were sending performance data to Viory-linked domains, Viory's corporate owner used Ruptly's SSL certificate and the two agencies had four shared IP addresses. Test domains and backend tools appear shared, with both agency names written across sites and URLs.
