The record: 1 documented hostname
Read each block as: the hostname we checked, the evidence class the finding rests on, the state we observed and the date we observed it, then every superseded observation and the artefacts we published, quoted exactly as we published them. Nothing here names a registrar, hosting provider, network or IP — that attribution is what the researched tiers are priced on, and it is withheld from every free page. We describe what each page serves; we make no assertion about any registrant’s intent or criminality, and nothing here is legal advice.
ekstershop.com- Evidence class
- Lookalike storefront — asset-level evidence
- Observed state
- not re-checked — our own check failed on 6 October 2026 — last observed live, HTTP 200 on 13 August 2026
- Last observed serving
- 13 August 2026 — the date the artefacts below belong to
- First documented
- 2026-08-13
- Decay history (0 superseded observations)
- No superseded observation on this hostname — the check above is the only one on file.
- Artefacts we published (2)
- Loads at least one asset — a B-Corp badge — directly from ekster.com’s own file server: //www.ekster.com/cdn/shop/files/B-Corp-Logo-White-RGB.png.
- Reproduces 6 of Ekster’s own image filenames, e.g. father_sdayprobundleapple-blackinfograph01, cardholder_pro_-_midnight_blue_infograph_01_9b48e5da-8a11-428f-bb40-4f4c73a843fb, d_r_passport_holder_-_onyx_infograph_01_no_logo.
not re-checked — our own check failed on 6 October 2026. Our own fetch failed again — the SIXTH consecutive sweep on which we have obtained no HTTP status for this hostname. It resolves in DNS (confirmed again on 6 October 2026) and the host accepts a TCP connection on port 80, but every request we send carrying this hostname is answered with silence until our client times out, and port 443 does not complete a TCP connection from our own egress at all. We obtained no HTTP status, so we have learned nothing about this hostname since 13 August 2026 and its 13 August 2026 finding and date stand unchanged. A check that fails at our own egress is a fact about our connection, never about the hostname, so this row keeps the date of the last check we genuinely completed.
What a row looks like as data
Every row above is published in the structured form our own sweeps write it — the same fixed state vocabulary, the same dated columns. The complete column schema, one row per documented hostname and the downloadable releases exactly as delivered are on the dataset page, free to read, quote and take to a registrar, a marketplace or your own counsel.
The record as data — the column schema and every documented row →
What this page is, and what it is not
- It is a dated record. Every state above is what we observed on the day named beside it, in a fixed three-string vocabulary — nothing here is a statement about what any hostname is serving today, and we do not monitor these hostnames.
- A hostname that went quiet has not been shown to have come down. We did not observe why it stopped answering, we make no claim that anything was removed, suspended or taken down, and a hostname can be re-pointed on any day.
- It names no registrar, host, network or IP, and asserts nothing about any registrant's intent or about goods we have not examined.
- It promises no outcome. Nothing here predicts or promises a takedown, a filing result or a timescale, and nothing here is legal advice.
- Searches this page answers
- “Ekster fake site” · “Ekster clone store” · “Ekster fake website list” · “Ekster fake site” · “sites impersonating Ekster”
Other brands on the record
Every brand we have documented is on the record. Brands whose file carries more than one hostname, a published artefact, a self-check or a change of state keep a page like this one; the rest are listed with the same dated rows on the index. If you act for more than one, start here:
See every documented hostname, listed by the brand it copies — or jump straight to Ekster's rows on the index. An index is a record of what we have checked, never a statement that nothing else exists.
If you have just found a copy of Ekster's store: what to do first · did my takedown actually work? · the ten-second own-CDN check · why a free scanner and our own check read one hostname differently
Scam Detective — pay-per-use scam intelligence. One-off checks, no subscription, no account.
Every finding here is an assessment of publicly available information at the time of the check, and is not legal advice. We produce the evidence and the correctly addressed request; on a Takedown Engagement we submit it to the abuse desks as the customer’s authorized agent, which is an administrative act and not legal representation. We do not monitor continuously and never contact the registrant on a customer’s behalf, and no outcome or timeline is guaranteed. Confirm your own trademark position before sending anything adversarial. Each hostname above carries the date its own finding was captured; the most recent check on this brand ran on 13 August 2026.
Are you Ekster, or do you act for them, and want a correction to any row above? scam-detective8@mail.acoco.ai