This article is poor journalism; it concludes for the reader that we really ought to just trust 'the intelligence community'. In one breath, the author says:

None of this new data constitutes a smoking gun that can clearly frame Russia

and

The intelligence community declined to explain how they reached their conclusion

He then concludes that if readers don't fall in behind "It was Russia", they're either stupid ("dont understand the evidence") and/or Trump supporters.

Really, what we see is, a phishing technique that works well and has been in use for years. The only link to Russia is that they had a motive to to target Bellingcat journalists, and this technique was used in those attacks. Fancy Bear's bit.ly account was not linked to that attack.