Turvamies dot fi leads to a company called Turvamies IT Security Services Oy, which has J. Korhonen on its board. Yes, thats right, the tokentube guy. Tokentube is/was the website that mimics youtube, but spewed russian propaganda about every topic possible.

Now if we do a reverse MX search on the mail server of turvamies dot fi, we find that so do a lot of other related websites (list below), including the infamous pelastetaansuomenlapset dot fi and English counterpart. Note, also tokentube on the list, its a hint...

Note again, changes possible.

Back to "koronarealistit dot net/com". DNS records reveal that all emails are forwarded to a mail server "mail dot turvamies dot fi". Look at the MX-type records, lower priority number means actually highest.
Note, some might have changed in the 1½ years that have passed.

The website is/was maintained by Sofia Kazakov, vice-chairmain of Helsingin #VKK. Whois check also reveals the reg.ru nameservers immediately. Another interesting point is the affiliated email, which can be googled at one's discretion.

So how do we know about the 🇷🇺 involvement?
Simple, the do not hide their precence. Examples follow: koronarealistit dot net(com) is a professionally made website spewing covid nonsense, and traces back to 🇷🇺.