DECISION

 

THREDUP INC. v. Ricalyn Caguiat / Thred Up

Claim Number: FA2508002172193

 

PARTIES

Complainant is THREDUP INC. ("Complainant"), represented by Sophie Edbrooke of Gerben Perrott, PLLC, District of Columbia, USA. Respondent is Ricalyn Caguiat / Thred Up ("Respondent"), Tennessee, USA.

 

REGISTRAR AND DISPUTED DOMAIN NAME

The domain name at issue is <threduphr.store>, registered with NameCheap, Inc.

 

PANEL

The undersigned certifies that they have acted independently and impartially and to the best of their knowledge have no known conflict in serving as Panelist in this proceeding.

 

Richard Hill as Panelist.

 

PROCEDURAL HISTORY

Complainant submitted a Complaint to Forum electronically on August 18, 2025; Forum received payment on August 18, 2025.

 

On August 19, 2025, NameCheap, Inc. confirmed by e-mail to Forum that the <threduphr.store> domain name is registered with NameCheap, Inc. and that Respondent is the current registrant of the name. NameCheap, Inc. has verified that Respondent is bound by the NameCheap, Inc. registration agreement and has thereby agreed to resolve domain disputes brought by third parties in accordance with ICANN's Uniform Domain Name Dispute Resolution Policy (the "Policy").

 

On August 20, 2025, Forum served the Complaint and all Annexes, including a Written Notice of the Complaint, setting a deadline of September 9, 2025 by which Respondent could file a Response to the Complaint, via e-mail to all entities and persons listed on Respondent's registration as technical, administrative, and billing contacts, and to postmaster@threduphr.store. Also on August 20, 2025, the Written Notice of the Complaint, notifying Respondent of the e-mail addresses served and the deadline for a Response, was transmitted to Respondent via post and fax, to all entities and persons listed on Respondent's registration as technical, administrative and billing contacts.

 

Having received no response from Respondent, Forum transmitted to the parties a Notification of Respondent Default.

 

On September 10, 2025, pursuant to Complainant's request to have the dispute decided by a single-member Panel, Forum appointed Richard Hill as Panelist.

 

Having reviewed the communications records, the Administrative Panel (the "Panel") finds that Forum has discharged its responsibility under Paragraph 2(a) of the Rules for Uniform Domain Name Dispute Resolution Policy (the "Rules") "to employ reasonably available means calculated to achieve actual notice to Respondent" through submission of Electronic and Written Notices, as defined in Rule 1 and Rule 2. Therefore, the Panel may issue its decision based on the documents submitted and in accordance with the ICANN Policy, ICANN Rules, Forum's Supplemental Rules and any rules and principles of law that the Panel deems applicable, without the benefit of any response from Respondent.

 

RELIEF SOUGHT

Complainant requests that the domain name be transferred from Respondent to Complainant.

 

Preliminary Issue:  Identity Theft

Complainant provides evidence showing that the named registrant has been a victim of identity theft.  The Panel has taken the following rules and precedent into account in making a determination on not redacting Respondent's identity.

 

According to Policy ¶ 4(j), "[a]ll decisions under this Policy will be published in full over the Internet, except when an Administrative Panel determines in an exceptional case to redact portions of its decision." In Wells Fargo & Co. v. John Doe as Holder of Domain Name <wellzfargo.com>, FA 362108 (Forum Dec. 30, 2004) and Wells Fargo & Co. v. John Doe as Holder of Domain Name <wellsfargossl>, FA 453727 (Forum May 19, 2005), the panels omitted the respondents' personal information from the decisions, pursuant to Policy ¶ 4(j), in an attempt to protect the respondents who claimed to be victims of identity theft from becoming aligned with acts the actual registrants appeared to have sought to impute to the respondents.).

 

However, according to Forum Supplemental Rule 15(b), "All requests pursuant to Policy paragraph 4(j) and Rule 16(b) to have a portion of the decision redacted, must be made in the Complaint, the Response, or an Additional Submission that is submitted before the Panel's decision is published." (emphasis added).  Rule 1 defines "respondent" as "the holder of a domain-name registration against which a complaint is initiated;" and Forum Supplemental Rule 1(d) further defines "the holder of a domain-name registration" as "the single person or entity listed in the WHOIS registration information at the time of commencement." The Panel notes precedent which holds the registrar-confirmed registrant of a disputed domain (per the WHOIS at commencement of the proceeding) the proper respondent, notwithstanding the possibility that said respondent's identity was stolen.  See, e.g., Banco Bradesco S/A v. Gisele Moura Leite, D2014-0414 (WIPO Apr. 30, 2014). 

 

In the instant case, there has been no request in the Complaint to redact any portion of the decision, nor has there been a Response or an Additional Submission. Consequently, the Panel finds that it is not warranted to redact Respondent's name and location from the Panel's decision.

 

PARTIES' CONTENTIONS

A. Complainant

Complainant states that it is a Delaware Corporation and the owner and operator of the website <thredup.com>. Complainant's website offers resale services for clothing. Since at least as early as 2009, Complainant has used the THREDUP mark in connection with resale. Complainant asserts right in the THREDUP mark through its registration in the United States in 2010.

 

Complainant alleges that the disputed domain name is confusingly similar to its THREDUP mark because it incorporates the mark in its entirety and merely adds the letters "hr" (which may stand for "human resources" and the ".store" generic top-level domain ("gTLD").

 

According to Complainant, Respondent has no rights or legitimate interests in the disputed domain name. Respondent is not commonly known by the disputed domain name, nor has Complainant authorized Respondent's use of the mark. Respondent is not making a bona fide offering of goods or services, nor a legitimate noncommercial or fair use through the disputed domain name. Instead, the resolving website offers false job opportunities, and the disputed domain name is used to send emails in the name of the named registrant (Complainant's HR manager), purporting to offer interviews for positions at Complainant's company.

 

Further, says Complainant, Respondent is using the disputed domain name in bad faith. The disputed domain name is used in furtherance of phishing.

 

B. Respondent

Respondent failed to submit a Response in this proceeding.

 

FINDINGS

Complainant has registered trademark rights in the THREDUP mark, dating back to 2010, and uses it to offer resale services for clothing.

 

The disputed domain name was registered in 2025.

 

Complainant has not licensed or otherwise authorized Respondent to use its mark.

 

The disputed domain name is used in furtherance of email phishing; the phishing emails are sent in the name of the named registrant (Complainant's Human Resources manager).

 

DISCUSSION

Paragraph 15(a) of the Rules instructs this Panel to "decide a complaint on the basis of the statements and documents submitted and in accordance with the Policy, these Rules and any rules and principles of law that it deems applicable."

 

Paragraph 4(a) of the Policy requires that Complainant must prove each of the following three elements to obtain an order that a domain name should be cancelled or transferred:

 

(1)       the domain name registered by Respondent is identical or confusingly similar to a trademark or service mark in which Complainant has rights; and

(2)       Respondent has no rights or legitimate interests in respect of the domain name; and

(3)       the domain name has been registered and is being used in bad faith.

 

In view of Respondent's failure to submit a response, the Panel shall decide this administrative proceeding on the basis of Complainant's undisputed representations pursuant to paragraphs 5(f), 14(a) and 15(a) of the Rules and draw such inferences it considers appropriate pursuant to paragraph 14(b) of the Rules.  The Panel is entitled to accept all reasonable allegations set forth in a complaint; however, the Panel may deny relief where a complaint contains mere conclusory or unsubstantiated arguments. See WIPO Jurisprudential Overview 3.0 at ¶ 4.3; see also eGalaxy Multimedia Inc. v. ON HOLD By Owner Ready To Expire, FA 157287 (Forum June 26, 2003) ("Because Complainant did not produce clear evidence to support its subjective allegations [. . .] the Panel finds it appropriate to dismiss the Complaint").

 

Identical and/or Confusingly Similar

The disputed domain name incorporates Complainant's THREDUP mark in its entirety and merely adds the letters "hr" (which may stand for "human resources" and the ".store" generic top level domain ("gTLD"). Under Policy ¶ 4(a)(i), adding a gTLD and/or geographic terms and/or meaningless letters is generally insufficient in differentiating a disputed domain name from the mark it incorporates. See Bloomberg Finance L.P. v. Nexperian Holding Limited, FA 1782013 (Forum June 4, 2018) ("Where a relevant trademark is recognisable within a disputed domain name, the addition of other terms (whether descriptive, geographical, pejorative, meaningless, or otherwise) does not prevent a finding of confusing similarity under the first element."); see also Home Depot Product Authority, LLC v. Angelo Kioussis, FA 1784554 (Forum June 4, 2018) ("The domain name contains the mark in its entirety, with only the addition of the generic letters 'sb' and the digits '2018,' plus the generic Top Level Domain ("gTLD") '.com.'  These alterations of the mark, made in forming the domain name, do not save it from the realm of confusing similarity under the standards of the Policy."). Therefore, the Panel finds that the disputed domain name is confusingly similar to Complainant's mark under Policy ¶ 4(a)(i).

 

Rights or Legitimate Interests

Respondent is not authorized or permitted to use Complainant's THREDUP mark in any way and is not commonly known by the disputed domain name: absent a response, WHOIS information may be used to determine whether a respondent is known by the disputed domain name under Policy ¶ 4(c)(ii). See Amazon Technologies, Inc. v. LY Ta, FA 1789106 (Forum June 21, 2018) (concluding a respondent has no rights or legitimate interests in a disputed domain name where the complainant asserted it did not authorize the respondent to use the mark, and the relevant WHOIS information indicated the respondent is not commonly known by the domain name). Where the WHOIS is related to the disputed domain name, the Panel may still find the respondent lacks rights or legitimate interest in the disputed domain name if the respondent lacks authorization to use the complainant's mark and the respondent fails to provide affirmative evidence in support of its identity. See Ripple Labs Inc. v. Jessie McKoy / Ripple Reserve Fund, FA 1790949 (Forum July 9, 2018) (finding that, although the respondent listed itself as "Jessie McKoy / Ripple Reserve Fund" in the WHOIS contact information, it did not provide any affirmative evidence to support this identity; combined with the fact that the complainant claimed it did not authorize the respondent to use the mark, the respondent is not commonly known by the domain name). Here, the WHOIS information for the disputed domain name identifies the registrant as "Ricalyn Caguiat / Thred Up" but Respondent provides no affirmative evidence in support of this identity and no evidence in the record suggests Respondent is authorized to use the THREDUP mark. Therefore, the Panel finds that Respondent is not commonly known by the disputed domain name per Policy ¶ 4(c)(ii).

 

Complainant presents evidence showing that Respondent uses the disputed domain name to transmit emails falsely purporting to originate from Complainant's Human Resources manager. Panels have found that such use by a respondent consists of neither a bona fide offering of goods or services, nor a legitimate noncommercial or fair use. See DaVita Inc. v. Cynthia Rochelo, FA 1738034 (Forum July 20, 2017) ("Passing off in furtherance of a phishing scheme is not considered a bona fide offering of goods or services or legitimate noncommercial or fair use."); see also Morgan Stanley v. Zhange Sheng Xu / Zhang Sheng Xu, FA 1600534 (Forum Feb. 26, 2015) ("The Panel agrees that the respondent's apparent phishing attempt provides further indication that the respondent lacks any rights or legitimate interests in the disputed domain name under Policy ¶ 4(a)(ii)."). Therefore the Panel finds that Respondent's use of the disputed domain name constitutes neither a bona fide offering of goods or services, nor a legitimate noncommercial or fair use under Policy ¶¶ 4(c)(i) or (iii). And the Panel finds that Respondent does not have rights or legitimate interests in the disputed domain name.

 

Registration and Use in Bad Faith

Respondent (who did not reply to Complainant's contentions) has not presented any plausible explanation for its use of Complainant's mark. In accordance with paragraph 14(b) of the Rules, the Panel shall draw such inferences from Respondent's failure to reply as it considers appropriate. Accordingly, the Panel finds that Respondent did not have a legitimate use in mind when registering the disputed domain name.

 

Indeed, as already noted, Respondent uses the disputed domain name in furtherance of an email phishing scheme. This behavior is evidence of bad faith registration and use under Policy ¶ 4(a)(iii). See Yahoo! Inc. v. Kalra, FA 1650447 (Forum Dec. 31, 2015); Qatalyst Partners LP v. Devimore, FA 1393436 (Forum July 13, 2011) (finding that using the disputed domain name as an e-mail address to pass itself off as the complainant in a phishing scheme is evidence of bad faith registration and use.); see also National Oilwell Varco, L.P. v. Craig Wood/NOV, FA 1575951 (Forum Sept. 22, 2014) (finding bad faith where respondent fraudulently attempted to induce wire transfers by sending e-mails purporting to be from complainant's President and CEO); see also Capital One Financial Corporation and Capital One Bank v. Austin Howel, FA 289304 (Forum Aug. 11, 2004) (finding bad faith where respondent used complainant's mark to fraudulently induce transfer of credit and personal identification information). Consequently, the Panel finds that Respondent registered and is using the disputed domain name in bad faith in the sense of the Policy.

 

Further, Respondent registered the disputed domain name with actual knowledge of Complainant's mark: the phishing emails are sent in the name of Complainant's Human Resources manager. While constructive notice is insufficient to demonstrate bad faith, actual knowledge of a complainant's rights in a mark prior to registration may be evidence of bad faith per Policy ¶ 4(a)(iii). See Custom Modular Direct LLC v. Custom Modular Homes Inc., FA 1140580 (Forum Apr. 8, 2008) ("There is no place for constructive notice under the Policy."); see also Orbitz Worldwide, LLC v. Domain Librarian, FA 1535826 (Forum Feb. 6, 2014) ("The Panel notes that although the UDRP does not recognize 'constructive notice' as sufficient grounds for finding Policy ¶ 4(a)(iii) bad faith, the Panel here finds actual knowledge through the name used for the domain and the use made of it."); see also Univision Comm'cns Inc. v. Norte, FA 1000079 (Forum Aug. 16, 2007) (rejecting the respondent's contention that it did not register the disputed domain name in bad faith since the panel found that the respondent had knowledge of the complainant's rights in the UNIVISION mark when registering the disputed domain name). The Panel finds that Respondent had actual knowledge of Complainant's rights in the mark prior to Respondent's registration of the disputed domain name and that this constitutes bad faith under Policy ¶ 4(a)(iii).

 

DECISION

Having established all three elements required under the ICANN Policy, the Panel concludes that relief shall be GRANTED.

 

Accordingly, it is Ordered that the <threduphr.store> domain name be TRANSFERRED from Respondent to Complainant.

 

 

 

Richard Hill, Panelist

Dated: September 10, 2025