Step-by-step: recover a .cloud domain through a UDRP complaint

Step-by-step: recover a .cloud domain through a UDRP complaint. UDRP and ccTLD domain recovery and defense across .cloud. Email the firm to assess your case.

A stranger registers a .cloud domain that matches your brand exactly. It redirects to a competitor's landing page, sits parked with pay-per-click ads, or simply holds your name hostage at a price you never agreed to pay. You want it back. The question is whether the UDRP gives you a reliable path – and what each step of that path actually requires.

The .cloud zone is governed by the UDRP, which means the standard three-element test under Paragraph 4(a) of the Policy applies. You must show that the domain is identical or confusingly similar to a mark you hold, that the registrant has no rights or legitimate interests in it, and that it was registered and is being used in bad faith. A case filed at WIPO typically resolves in about two months, with the forum filing fee starting at USD 1,500 for a single-member panel on one to five domains. The only remedies are transfer or cancellation – no damages, no costs.

This guide walks each procedural step in sequence, flags the trap hidden inside each one, and points to the evidence decisions that most often determine the outcome.

Step 1: Confirm that the UDRP applies to your .cloud domain

Before drafting a word of your complaint, confirm that the registry for your specific domain has adopted the UDRP as its dispute policy. The .cloud zone does operate under the UDRP, making WIPO, the Forum, and the other accredited providers available to you. That confirmation matters because not every new-gTLD registry has identical supplemental rules, and a misfiled complaint is lost time and a recoverable fee you may not fully recoup.

The trap at Step 1: assuming that because a domain is a generic top-level domain, any ICANN-accredited provider will accept it. Supplemental rules vary by registry, and some registries designate a preferred provider or impose notice requirements. Check the current registry agreement before selecting your forum. We regularly advise brand owners who skip this check and then face procedural objections after filing.

Once you confirm the zone and the governing rules, decide on the provider. WIPO and the Forum together account for roughly 97% of all UDRP proceedings. WIPO's online filing system and publicly available decision database make it the default choice for most complainants. CAC and ADNDRC are also available; CAC carries the lowest filing fees among the four.

Step 2: Assess all three UDRP elements before you invest in a complaint

The single most consequential decision in this process happens before you file. Paragraph 4(a) of the Policy requires you to satisfy all three elements cumulatively – not two of three, not a strong case on one and a weak one on the others. A panel will dismiss a complaint that fails any single limb, and a bad complaint can produce a Reverse Domain Name Hijacking finding against you.

Element one – identical or confusingly similar – is usually the easiest to meet. A registered trademark that matches the domain, with the TLD stripped, is typically sufficient. Unregistered marks supported by evidence of prior use can also qualify, though they require more preparation. Common-law rights in a name require documentation: sales figures, advertising spend, press coverage, length of use.

Element two – no rights or legitimate interests – requires you to make a prima facie showing, after which the burden shifts to the registrant to rebut. Evidence of the registrant's lack of authorization to use your mark, no bona fide business relationship with your brand, and no prior use of the domain for a genuine commercial purpose all strengthen this limb. The Paragraph 4(c) safe harbors are real: a registrant who genuinely offered goods or services under the name before receiving notice of the dispute may prevail on this element.

Element three – registered and used in bad faith – is where most contested cases are fought. The word "and" is cumulative. Both registration and use must be in bad faith. Paragraph 4(b) lists non-exhaustive examples: an offer to sell at a price exceeding documented out-of-pocket costs; a pattern of registering marks as domains; disruption of a competitor; deliberate confusion to divert customers. Passive holding is a recognized sub-doctrine: a domain that resolves nowhere but that no legitimate registrant would plausibly want can still support a bad-faith finding if surrounding circumstances are sufficiently compelling. We discuss passive holding in depth at our analysis of passive-holding cases.

If you are uncertain whether all three elements are met, that uncertainty is the right moment to get a professional read. Email info@cognomenlaw.com for an assessment of the three UDRP elements as they apply to your specific domain and your specific mark.

Step 3: Build your evidence file before you draft the complaint

The complaint is only as strong as the evidence attached to it. Panels decide on the written record alone; there is no hearing, no cross-examination, and no supplemental evidence right as of course. What you submit with the complaint is what you have. That reality gives the evidence-assembly step more weight than many first-time complainants appreciate.

For your trademark rights, the minimum is a current registration certificate showing the mark in force. If you rely on common-law rights, assemble dated materials that demonstrate the scope and duration of use: revenue records, advertising invoices, third-party press references, and any correspondence showing the public associates your name with your goods or services.

For the domain itself, capture dated screenshots of the resolving content – the parking page, the competitor redirect, the pay-per-click layout, or the ransom offer in an email. Use a web-archiving service so that the capture is timestamped independently of your own system. The registrant may alter or take down the page after receiving notice of the dispute; your screenshot should predate that moment.

For bad faith, go beyond the domain itself. Search WIPO's and the Forum's published decisions for the same registrant. A pattern of prior cybersquatting complaints – even where the registrant defaulted – supports a Paragraph 4(b)(ii) bad-faith finding. Prior WHOIS or RDDS data showing the registrant's name, email, or address connected to other abusive registrations can be decisive. Historical registrar-lock logs, reverse-WHOIS data, and archived WHOIS records all belong in this file.

The trap at Step 3: treating evidence as something to gather after the complaint is drafted. Draft the complaint around the evidence you have, not around the narrative you wish you could prove.

How do you draft and file a UDRP complaint at WIPO?

WIPO's online filing platform accepts complaints in a structured format. The complaint itself must identify the domain, the complainant's mark and rights, the respondent's domain-registrar details, the grounds for each of the three elements, and the remedy sought. Each claim must be supported by an exhibit; the exhibit numbers in the text must match the attached files precisely. A complaint that references "Exhibit 7" but attaches only five exhibits will be returned for correction, adding days to your timeline.

The filing fee is paid at submission. At WIPO, the standard rate is USD 1,500 for one to five domains before a single-member panel. If you prefer a three-member panel – which provides an internal appellate check and carries more institutional weight – the fee rises to USD 4,000. The choice of panel size is yours at the time of filing; the registrant may request a three-member panel independently, in which case the parties generally split the higher fee.

Once filed, WIPO conducts a formal compliance review. If the complaint is deficient, WIPO issues an amendment notice and you have a short window to correct it. Only once compliance is confirmed does the clock for the respondent start running.

In a recent matter – a .cloud domain in a technology sector, summer 2025 – we filed a complaint, cleared the compliance review within two business days, and received the commencement notice before the end of that week. The sequence depends on how complete the complaint is at submission.

Step 5: Understand the respondent's 20-day window – and what happens if they use it

The respondent has 20 days from formal commencement to file a response. That window is defined by the Rules and cannot be shortened by the complainant. If the registrant defaults – files nothing – the panel still decides on the merits; a default is not an automatic win. Panels in default cases apply the same three-element standard and examine the complaint's evidence on its own terms.

If the respondent does respond, the case becomes contested and the panel takes longer to decide. A substantive response invoking the Paragraph 4(c) safe harbors, challenging your trademark rights, or alleging that you filed the complaint in bad faith to deprive a legitimate registrant shifts the dynamics significantly. An allegation of RDNH – Reverse Domain Name Hijacking – is not merely procedural noise; panels do make RDNH findings, and a finding is a public record attached to the decision. We act on the respondent side as well, and we have seen complainant-side overreach produce RDNH findings that compromise the complainant's own reputation in subsequent disputes.

The trap at Step 5: treating a defaulting respondent as a guaranteed win and preparing inadequate evidence. Panels have denied transfer in default cases where the complainant's own filing did not establish bad faith. The 20-day window is your window too – use it to strengthen the file, not to wait.

Step 6: Panel appointment, the decision, and the transfer mechanics

After the response period closes, WIPO appoints a single panelist from its roster. The panel then has typically 14 days to issue a decision, though some panels take longer. The total timeline from filing to a decision runs about two months in a standard case. WIPO's expedited option, available for single-panel cases of up to five domains, targets a decision within about one month; it carries a higher fee and is worth considering where the domain is causing active commercial harm.

If the panel orders a transfer, WIPO notifies the registrar and imposes a 10-business-day implementation hold to allow the respondent to seek a court stay. Most respondents do not pursue a court action. After the hold, the registrar unlocks the domain and initiates the transfer. You will need an active registrar account prepared to receive the inbound push transfer. Missing that step delays implementation by days or weeks – a small but avoidable friction.

If the panel denies the complaint, the decision is also public. That outcome does not preclude a subsequent court action or a new complaint if materially new evidence becomes available, though panels generally give weight to prior decision history in later proceedings.

If you have already received a preliminary WIPO decision or a complaint has been filed against a domain you hold, a focused second read of the record often identifies an element that was handled sub-optimally. Email info@cognomenlaw.com to review the posture of an active or concluded proceeding.

What evidence most often decides a contested .cloud domain dispute?

In our practice, the third element – bad-faith registration and use – is where contested cases are won or lost. Panels look for a direct causal link between the registrant's knowledge of your mark at the time of registration and the conduct that followed. A domain registered one day after your trademark registered, pointing at a pay-per-click page in your sector, is a stronger bad-faith narrative than a domain registered years earlier by a party that later sold it to someone who then monetized it against you.

Panels weigh the following facts consistently: the timing of registration relative to your mark; whether your mark was widely known at that date; the content of the resolving page; any communications from the registrant referencing the mark; and the absence of any plausible non-infringing use for the string. A .cloud domain incorporating a distinctive, invented mark owned by a technology company, pointing at a competitor's infrastructure page – that combination draws a near-certain bad-faith inference. A generic or descriptive term in a .cloud domain is a different and harder case, because a registrant can credibly argue good-faith registration on descriptive grounds.

One pattern that surprises brand owners: panels can find bad faith even where the domain currently resolves to nothing. Passive holding – a domain held without active use, where the registrant has no plausible legitimate interest – is a recognized basis for a bad-faith finding. The burden is higher, but not insurmountable, and the facts around passive holding cases in new-gTLD zones like .cloud are evolving.

For a deeper look at the passive-holding doctrine and how it has developed across zones, see our analysis of passive-holding disputes. For the broader picture of UDRP recovery across gTLDs, our UDRP recovery service overview covers the full menu of routes and forum choices.

Cross-zone and cross-forum considerations: when the UDRP is not enough

The UDRP's reach is real, but so are its limits. If the infringer holds both a .cloud domain and a .de domain, WIPO can address the .cloud. The .de is a different matter: DENIC operates outside the UDRP, and disputes over .de domains generally require German court proceedings, with a DENIC DISPUTE entry available to block transfer while litigation proceeds. We work with local litigation counsel in the relevant jurisdiction for court-route matters that UDRP cannot resolve.

If the same registrant holds a portfolio of .cloud domains – a pattern of registrations each incorporating slight variations of your mark – a single UDRP complaint can cover multiple domains provided the registrant is the same holder. That consolidation keeps costs proportionate and builds a stronger bad-faith narrative than separate filings would.

If you want monetary damages in addition to transfer, the UDRP cannot provide them. US anticybersquatting litigation in federal court is the route that reaches money, though the cost and timeline are substantially higher than arbitration. The decision of whether to pursue the UDRP, a court action, or both is fact-specific. A complainant who needs the domain back quickly and does not need damages should almost always start with the UDRP. A complainant who has sustained provable financial harm from a deliberate infringement may benefit from a parallel or sequential court strategy.

Brand-protection monitoring matters here too. By the time a .cloud domain appears on your radar, it may have been live for months. A monitoring program that flags new registrations incorporating your mark – across zones and at registration, not on discovery – gives you the option to act before harm accumulates. Our broader thinking on monitoring as a brand-protection strategy is at our analysis of brand-protection monitoring.

Related at COGNOMEN

• UDRP domain recovery across gTLDs – full service overview and forum comparison
• Recovering a domain held passively – doctrine, evidence, and strategy
• Brand-protection monitoring – catching cybersquatting at registration