DOQ posted that when attempting to go to JoeBiden.com from a link on Twatter, it routes through Antifa.com. I clicked on the link provided and it did register as routing through Antifa.com in the browser's lower bar.
Link: https://twitter.com/doqholliday/status/1293639126932045824
I decided to use a command-line tool to route the redirects, as per a suggestion on StackExchange. I wanted to get more info than was provided at the bottom of my browser window.
I used curl -v -L https://t.co/968w1wxLvQ
It did route through Antifa.com.
I also tried curl -v -L JoeBiden.com
To see if the culprit was JoeBiden.com or the t.co link shortening service. It turned out that when using the command directly on JoeBiden.com, no reference to Antifa.com showed up.
So, t.co, Twatter's link-shortening site seems to be the one referencing Antifa.com.
I also discovered that there is this embedded in the code of JoeBiden.com on the home page: (it's in script tags, all the way at the bottom)
/*
_______ _ ____ _ _ ____ _
\ \ / / _| / \ | _ \ / \ | \/ | / \ / || |/ /
\ \ /\ / /| | / _ \ | |) | / _ \ | |\/| | / _ \ ___ \| ' /
\ V V / | | / \| _ < / \ | | | |/ \ ___) | . \
_/_/ |_// __| _\ // _\ || |/_/ __/||_\
https://store.joebiden.com/biden-face-mask/
*/
It spells out "WEAR A MASK" but it might be hard to read here, since the text here isn't monospaced.
Why is t.co referencing Antifa.com?