Not my experience. My personal .us domain was placed in serverHold in April 2025, after Godaddy Registry sent my registrar an email including the following:
"If we do not receive a response and the abusive content remains active, the referred domain will be suspended (-ServerHold-) twelve (12) hours after this notification, to limit any potential damage."
Yes, only 12 hours' notice. And this was in response to what looked like an automated scan, with a screenshot of a directory listing showing some files with (accurate) modification times in 2011. This would not have passed more than a quite cursory human review. And there is no chance that anyone was using the files, as they were at an unused path (which happened to be exposed via directory listings).
(How do I know that the files haven't been infected without my knowledge? Because I checked, but also because I know why they were flagged as malicious. The files contain an exploit, and will try to exploit your browser if you open them. But the exploit only works on 2011-era iOS! The iOS version numbers are right there in the filenames! The files are not real malware, but part of a jailbreak, JailbreakMe, that installs software of your choice on your phone… if your phone is an iPhone from 2011. I continue to host the jailbreak on purpose, for the sake of a handful of people that still use these devices. I guess you can call it retrocomputing. This particular subset of files was unused though.)