“Within the age of misinformation, the road between reality and fiction is blurrier than ever.”
“For these of us working in video information, verification isn’t a nice-to-have. It’s a necessity. It’s how we shield the tales we assist form and the way we earn and preserve belief in an more and more chaotic data ecosystem,” Abu Dhabi-registered video information company Viory posted on LinkedIn on April 9, 2026, providing coaching to assist newsrooms and journalists type reality from fiction.
The self-described “video information company of the World South” has delivered journalism coaching to a number of nationwide press businesses throughout Africa, Asia and the Center East.
Nevertheless, in relation to Viory itself, the road between reality and fiction could be very blurry certainly.
Bellingcat has discovered a number of hyperlinks between the digital infrastructure of Viory and Ruptly information company, a department of sanctioned Russian propaganda outlet Russia As we speak, together with shared IP addresses, a Viory-linked web site utilizing a digital safety certificates registered to Ruptly, and Ruptly sending web site efficiency knowledge to Viory. Whereas there have been earlier experiences on suspected hyperlinks between the 2 retailers, our investigation provides new proof about Viory’s ties to Ruptly media.
When contacted for remark, each Viory and Ruptly denied any reference to one another.
‘Video Information Company of the World South’
Viory’s foremost providing is uncooked video footage of stories occasions supplied by way of subscription. In line with Viory, its purchasers embody “main worldwide information retailers, native media organisations, and unbiased creatives in additional than 170 nations”.
If its personal figures are to be believed, Viory was strikingly properly established at its launch in November 2023, by which era it claimed to have a “pre-assembled workforce of over 150 full-time employees, and a longtime community of over 3,000 video journalists the world over”.
The title “Viory” is a commerce title. The corporate’s authorized title is Darpo Imaginative and prescient FZ LLC, in accordance with its web site, which additionally states that it’s registered in Abu Dhabi. In August 2024, Darpo Imaginative and prescient FZ LLC filed for a trademark within the US for the title Viory, which was authorised in December of 2025.
As of Might 2026, Bellingcat discovered press releases and information experiences referencing no less than 30 agreements between Viory and companions in additional than 22 nations, in addition to cooperation agreements with authorities businesses, coaching agreements with universities and regional journalism our bodies.
This consists of:
Viory additionally sponsored a glitzy occasion for its inaugural World South Video Information Awards in December 2025 at Abu Dhabi’s first-ever BRIDGE Summit.
Ruptly Revisited
Ruptly is a video information company previously based mostly in Berlin and in the end managed by Russia As we speak (RT), which is owned by Russian state media firm ANO TV-Novosti. ANO TV-Novosti has been on the EU sanctions listing since December 2022 for spreading “pro-Kremlin propaganda and disinformation” and supporting Russia’s struggle in opposition to Ukraine.
RT launched Ruptly, which operated in Berlin by way of a German-registered subsidiary in 2013, with the aim of “becom[ing] the go-to different useful resource in a extremely concentrated market {of professional} information video footage, and to ship protection of tales that different businesses miss.”
Sanctions imposed on RT following Russia’s 2022 invasion of Ukraine choked off Ruptly’s supply of funds in Germany, main the German firm to start insolvency proceedings in October 2024. Ruptly continues to function from Moscow as of 2026.
As with Viory, Ruptly’s foremost providing is offering uncooked information footage to subscribers all over the world. It depends on a big community of worldwide freelancers and stringers. In 2016 RT claimed that Ruptly had “surpassed” newswire companies AFP and Reuters on YouTube, and was serving greater than 600 media organisations in 45 nations.
Felix Huesmann of the German outlet RedaktionsNetzwerk Deutschland (RND), was the primary to stipulate hyperlinks between Ruptly and Viory whereas masking the insolvency proceedings of Ruptly. He discovered that Darpo Imaginative and prescient’s unique particulars on the Abu Dhabi Artistic Media Authority’s web site included an electronic mail handle [email protected]. It has not been confirmed who this electronic mail handle belongs to; nevertheless, the username matches the primary title preliminary and surname of Dinara Toktosunova, the managing director of Ruptly. When requested about this electronic mail handle by Huesmann in 2024, Ruptly “defined that Toktosunova is targeted on securing the way forward for the Ruptly workforce [in Moscow] and isn’t working wherever else as a managing director.”The activist group, OSINT For Ukraine, additionally outlined hyperlinks between Ruptly and Viory, together with the motion of a number of key employees between the 2 organisations and powerful similarities between the 2 organisations’ platforms and content material.
Darpo Imaginative and prescient’s Safety Certificates
The authorized entity behind Viory, Darpo Imaginative and prescient, was arrange in considered one of Abu Dhabi’s free zones – particular financial areas which have business-friendly incentives similar to tax exemptions and that permit 100% overseas possession. The free zones additionally provide what some describe as excessive ranges of “company privateness,” which others assert has created a haven for shell firms and opaque company buildings.
Darpo Imaginative and prescient initially had its personal internet area, darpo.imaginative and prescient. The positioning has since been eliminated. Whois information present that the area was registered by Darpo Imaginative and prescient FZ LLC in December 2022 to a PO Field in Abu Dhabi, utilizing a Russian area title registrar and a Moscow telephone quantity.
Initially, Darpo.imaginative and prescient had its personal Safe Sockets Layer (SSL) certificates – a digital certificates that authenticates an internet site’s identification, permitting it to safe and encrypt knowledge. Nevertheless, VirusTotal knowledge exhibits that as of no less than June 2024, darpo.imaginative and prescient was utilizing a wildcard SSL certificates registered to ruptly.video. A Wildcard SSL certificates is a single certificates with a wildcard character (*) within the area title discipline. This enables the certificates to safe a single area and a number of subdomains. You possibly can see historic SSL certificates for darpo.imaginative and prescient.
James Wilson, a software program and networking engineer with 20 years of expertise and at present Enterprise Expertise editor at Dangerous Enterprise Media, informed Bellingcat that to stop unauthorised use or forgery of SSL certificates, a non-public key’s wanted to create and use a wildcard certificates throughout a number of domains.
“The truth that darpo.imaginative and prescient was utilizing a wildcard SSL certificates for ruptly.video signifies that whoever was working darpo.imaginative and prescient additionally had entry to the personal key for ruptly.video’s SSL certificates. Usually, solely the individuals working Ruptly’s hosting infrastructure can be prone to have entry to that,” Wilson defined.
When requested by Bellingcat about whether or not there have been different potential explanations, Wilson urged that it was theoretically potential that somebody might have hacked Ruptly and stolen their personal SSL key.
“Nevertheless, utilizing that wildcard SSL certificates on a site that didn’t match the wildcard within the certificates defies rationalization because the browser would alert the consumer to the certificates error,” he added.
Shared IP Addresses
Bellingcat additionally recognized a number of shared IP addresses which seemed to be concurrently in use by each Ruptly and Viory between Might 2025 and Might 2026.
From 2025 onwards, the Russian IP handle 158.160.132.25 has been used concurrently by viory.video, ruptly.video, ruptly.company and ruptly.television, in accordance with VirusTotal. Equally, because the starting of 2026, IP handle 84.252.135.88 has been used concurrently by viory.video, viory.workforce, ruptly.video, ruptly.company and ruptly.television, in accordance with VirusTotal.
VirusTotal knowledge exhibits that from 2025 onwards, IP handle 158.160.166.22 has been utilized by ruptly.video and viory.video whereas from 2026 onwards, IP handle 158.160.226.68 has been utilized by viory.video and ruptly.television. The VirusTotal knowledge seems to indicate these IP addresses getting used completely by Ruptly and Viory as of 2025 and 2026. Nevertheless, VirusTotal doesn’t essentially seize all domains which resolve to an IP, and different domains might also have resolved to those IP addresses, which weren’t noticed by VirusTotal’s passive DNS replication service. It’s also necessary to notice that in some instances, unrelated domains use the identical IP addresses.
Ruptly Sends Web site Efficiency Information to Viory
Viory’s and Ruptly’s web site infrastructure was additionally linked by way of knowledge despatched by way of Sentry, an inner error monitoring and efficiency monitoring platform.
An API scan of Ruptly’s foremost consumer login web page, ruptly.company, on March 26, 2026, exhibits that the web page was sending knowledge to a subdomain of viory.workforce. This area seems for use by Viory primarily for backend functions, based mostly on subdomains which seem to seek advice from widespread developer and web site administration instruments similar to Traefik and ArgoCD, along with Sentry.io. Notably, two subdomains additionally seem to seek advice from Ruptly.
The function of 1 area sending knowledge to a different area’s Sentry undertaking is usually to consolidate the entire related efficiency and error knowledge in a single place for in-house builders to observe.
The ruptly.company web page’s request to viory.workforce additionally consists of an authentication key for Viory’s Sentry undertaking. Ruptly.company shouldn’t be the one Ruptly area sending Sentry knowledge to viory.workforce. As of Might 9, 2026 the login web page for ruptly.video’s personal Sentry undertaking, sentry.ops.ruptly.video, robotically redirects to sentry.ops.ruptly.video/auth/login/viory/. Ruptly Video’s Sentry login web page additionally options “Viory” because the title.
The ruptly.video Sentry login web page can also be sending knowledge to the viory.workforce Sentry undertaking, the ruptly.company homepage and utilizing a favicon hosted on viory.workforce.
A 3rd Ruptly area, ruptly.television, additionally sends efficiency knowledge to viory.workforce’s Sentry undertaking by way of cms.dev.ruptly.television.
James Wilson famous that in every case, the Ruptly domains sending knowledge to Viory seemed to be utilizing a unique Sentry key.
“In case you take a look at every of those snippets sending telemetry knowledge [from the Ruptly domains], the precise Sentry keys for sentry.ops.viory.workforce are totally different for every. I presume that somebody with entry to Viory’s Sentry keys has generated and included contemporary Sentry keys in every of those situations in an effort to differentiate between the telemetry from this web site versus others utilizing the identical Sentry occasion,” Wilson stated.
“This cuts in opposition to the concept that that is, for instance, a case of somebody simply lazily copy-pasting code on Ruptly’s domains. It suggests that every of those snippets was prone to have been intentionally included. The choice rationalization of adjusting these API keys to some arbitrary worth appears a lot much less believable given the shortage of diligence in making certain different features of the content material didn’t cross-reference the domains.”
‘Ruptly’ Web page Title on Viory Take a look at Web page
Lastly, Bellingcat discovered a web page at frontend.dev.viory.video/en that seems prone to be a developer take a look at web page for the entrance web page of Viory’s foremost area viory.video.
Notably, nevertheless, the web page title reads “Stream trending information | Ruptly.” The web page description included within the supply code additionally refers to Ruptly:
“Observe breaking world information in real-time and stream the newest developments in politics, sports activities, finance, science, tech, and extra from one of many prime on-line information websites. Obtain and share worldwide information right this moment with award-winning information company Ruptl” [sic].
Wilson stated that the usage of the Ruply web page title and textual content on the Viory take a look at web page “seems to be like a case of lazy copy and pasting”.
“That would probably be finished by somebody exterior of Ruptly, though it could be unusual.”
Whereas this specific piece lies on the decrease finish of the spectrum of proof, Wilson stated that along with the opposite stronger items of proof, together with a number of Ruptly domains showing to ship knowledge to Viory utilizing totally different API keys, and Ruptly’s wildcard SSL certificates on Darpo Imaginative and prescient’s web site, the load of proof for a connection between Ruptly and Viory provides up.
“Not one of the items of proof are watertight on their very own, however while you add them collectively it’s tough to consider different believable explanations for all of them being true on the identical time,” he added.
“Not one of the items of proof are watertight on their very own, however while you add them collectively it’s tough to consider different believable explanations for all of them being true on the identical time,”
-James Wilson
Bellingcat additionally discovered that Ruptly seems to have connections to an organization in Hong Kong. Firm information from July 2022 point out that this firm was initially named Ruptly Restricted, however in September of that 12 months, the corporate’s title was modified to Lotus Manufacturing Restricted.
The Hong Kong firm stays registered as lively and filed annual experiences in September 2025.
Russian Slant within the ‘World South’
Anna Hiller, a Bangkok-based Advisor Analysis Analyst for the Institute for Strategic Dialogue informed Bellingcat that the sources supplied by Viory will be a pretty pool of supply materials for smaller media retailers, governments and tutorial establishments with small budgets.
She informed Bellingcat that Viory’s editorial selections are clear when wanting on the web site’s movies.
“When accessing Viory, the prominence of pro-Russian and pro-China content material is instantly noticeable, together with quite a few articles targeted on Vladimir Putin, Russia-China cooperation, and broader China-related narratives.”
Bellingcat contacted Viory, Darpo Imaginative and prescient and Lotus Manufacturing Restricted to ask in regards to the connections we discovered between the Viory web site and Ruptly and between Lotus Manufacturing Restricted and Ruptly.
Viory stated that it had no reference to Ruptly. “Viory has no reference to Ruptly; any suggestion in any other case based mostly on odd use of comparable digital platforms, instruments or cloud suppliers is poorly based and inaccurate; Viory is a UAE-based, privately held, self-funded and 100% privately owned organisation, and receives no funding, course or directions from any state media,” the corporate stated in an electronic mail response.
Ruptly additionally stated it was not related to Viory. It declined to answer Bellingcat’s questions, together with about particular findings similar to Ruptly’s domains sending technical efficiency and error knowledge to Viory, calling these questions “irrelevant”.
Bellingcat is a non-profit and the power to hold out our work depends on the type help of particular person donors. If you want to help our work, you are able to do so right here. You may as well subscribe to our Publication and comply with us on Bluesky right here, Instagram right here, Reddit right here and YouTube right here.
