Own your domain. Register it under your firm's own account with a reputable registrar (Cloudflare, Namecheap). Enable 2FA and auto-renew. Never let a marketing agency register your domain in their account — clients lose control of their business every year over this.