Is .sh Safe? High Risk Domain Extension (3.46x)

← Back to All TLDs

Is .sh safe?

Security analysis based on 331 .sh domains

Risk Assessment

High Risk

3.46x risk multiplier

Risk Multiplier

3.46x

This TLD has significantly higher malware rates than average.

.sh domains are 3.46 times more likely to be malicious than the average domain (0.26% baseline rate).

TLD Statistics

Total Domains Analyzed

331

Malicious Rate

0.91%

Malicious Domains

Benign Domains

328

Baseline Comparison

The average malicious rate across all TLDs is 0.26%. .sh's rate of 0.91% is higher than average.

Sample .sh Domains

Example domains with this TLD (sorted by risk)

brewe.sh

http://brewe.sh/

Malicious

blue-zoo.surge.sh

https://blue-zoo.surge.sh/

Malicious

get-apply-info-verified-badge-form.surge.sh

https://get-apply-info-verified-badge-form.surge.sh/

Malicious

node3.proxi.sh

http://node3.proxi.sh:1088/

Score: 40

manager.sh

http://manager.sh/

Score: 40

ww01.oca.sh

http://ww01.oca.sh/

Score: 40

honey.scanme.sh

http://honey.scanme.sh/

Score: 40

oca.sh

http://oca.sh/

Score: 40

scanme.sh

http://scanme.sh/

Score: 40

badge-verification-now-limited-offer.surge.sh

https://badge-verification-now-limited-offer.surge.sh/

Score: 40

What Does This Mean?

The risk multiplier indicates how much more (or less) risky domains with this TLD are compared to the average.

A multiplier of 3.46x means:

.sh domains are 3.46 times more likely to be malicious
Exercise extra caution with .sh websites
Verify site legitimacy before trusting

About .sh Domains

.sh is a top-level domain (TLD) in the Domain Name System. Our analysis is based on 331 .sh domains in our threat intelligence database.

This TLD has a high concentration of malicious domains, possibly due to low registration costs, minimal verification requirements, or lax abuse policies.

Analysis based on AllTrustie Threat Intelligence Database

Statistics updated every 24 hours