There are LOTS of small business that have .us domains.  I've got several that just use these domains as well as locality specific things such as schools or towns that use them rather than the longer ones supplied to municipal entities.

/rh

On Thu, Nov 2, 2023 at 1:34 PM goemon--- via NANOG <nanog@nanog.org> wrote:
https://krebsonsecurity.com/2023/10/us-harbors-prolific-malicious-link-shortening-service/

"The NTIA recently published a proposal that would allow registrars to
redact all registrant data from WHOIS registration records for .US
domains. A broad array of industry groups have filed comments opposing the
proposed changes, saying they threaten to remove the last vestiges of
accountability for a top-level domain that is already overrun with
cybercrime activity."

What hope is there when registrars are actively aiding and abeting criminal enterprises?

Are there any legitimate services running solely on .us domain names?

-Dan