Apparently cybersquatter bots can monitor brand new company registrations and scalp domain names for resale to the same company.
My usual steps are:
1. Register domain
2. Setup email, including some account for social media
3. Register accounts with main social media services using the social media email address.
Resolve the corporate entity after this first step.