I actually wrote a blog post about this awhile back at hhttps://dev.to/conjuredbytes/domain-and-registrar-security-c.... Hopefully, someone finds it helpful.