Most startups I've worked with have domains registered by the founders on GoDaddy, Namecheap, or Gandi which then get transferred to MarkMonitor once the compan

Most startups I've worked with have domains registered by the founders on GoDaddy, Namecheap, or Gandi which then get transferred to MarkMonitor once the company has an IT budget. I don't think it matters as much as it used to, as nearly every registrar supports two factor auth and domain locks now. Still, I've heard stories about GoDaddy CSRs getting social engineered into transferring domains.