xojfin.icu
Appeared in the .icu zone on Friday, October 23, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The random-letter .icu name (xojfin) on NameSilo/Cloudflare serves no content of its own and redirects to the real www.shopify.com/blog, so the Shopify branding and forms belong to Shopify and are not impersonation. Throwaway names that bounce to a big legitimate site often cloak a fake shop or scam store that is not yet live, but nothing deceptive is shown yet.
Domain xojfin.icu is a typosquat redirect to Shopify's legitimate site. The .icu TLD, obfuscated name (xojfin), and redirect-only infrastructure with no legitimate business purpose indicate a squat designed to intercept typo traffic or serve as a redirect vector. The domain itself does not host phishing content, but its existence and redirect behavior constitute brand-squat abuse.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, October 23, 2026
Same data as JSON: /api/zone/domain/xojfin.icu. This page is not indexed by search engines and does not link to the site it describes.