Is threadup.com legit?
ThredUp.com appears to be a trusted online marketplace. Despite a few minor infrastructure and compliance gaps, its long operational history, strong branding, and clean security record paint a picture of a legitimate business.
E-commerce average: 71/100 · based on 28 sites
Checked: April 18, 2026 at 8:27 AM UTC · Refresh
Is threadup.com a scam? Here's what we found.
The site uses a valid SSL certificate and a modern TLS version, ensuring secure connections. Google Web Risk also found no threats, which is a strong indicator of a safe browsing experience.
With a domain age of nearly 18 years, thredUP has a well-established online identity, giving it significant credibility. The site also uses structured data to clearly identify its organization.
The domain's long history and clean DNS blacklist status suggest a solid online reputation. While a Tranco rank isn't available, this is expected for a niche e-commerce site, and the business has clearly been around for a long time.
ThredUp.com provides clear contact information and a presence on multiple social media platforms, indicating openness and accessibility to its customers.
The absence of either a complete privacy policy or terms of service is a notable compliance gap for an e-commerce site, as these documents are essential for consumer rights and data handling transparency.
While DNS resolution and server setup are generally sound, including an SSL certificate from an established subdomain, the slow page load time is a minor concern that could affect user experience.
Signals Detected
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Site uses structured data identifying itself as: BreadcrumbList, WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2008-08-24T22:13:19Z (17 years, 10 months ago)
Registered through GoDaddy.com, LLC
Expires in 492 days
DNSSEC status from WHOIS
Resolves to: 107.180.40.18
No MX records found — domain may not handle email
DNS providers: ns26.domaincontrol.com., ns25.domaincontrol.com.
Not found on any DNS blacklists
Valid certificate, expires in 67 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.2
Site has custom branding and social media metadata
24 certificates found across 1 subdomains — established domain
robots.txt has 3 directives and references a sitemap
Web server: Apache
No threats detected by Google Web Risk
Sitemap found with 3 entries
Could not query Wayback Machine
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
Website links to multiple social media platforms
Slow page load — may indicate cheap hosting
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.