I think I have the exact problem. The malicious website has similar name as our brand and is registered in Chinese registrar. Our website appears mirrored on that domain address with the exception of their homepage which opens shady looking lottery in Chinese language. It definitely hurts the SEO of the website as well. It appears in search results close to my website. I have contacted shopify support about this and I hope to get it resolved as soon as possible.