Top-Level Domain

.sh

Aggregated statistics for the top-level domain

Apex domains

68,061

we've enumerated

Subdomains seen

130,590

CT + DNS + brute

TLS certs

—

naming .sh

Hosting ASNs

—

distinct origins

Domain Distribution

Apex domains with the most known subdomains — large orgs, telecoms, hosters.

Apex	Subdomains
aleph.sh	2,453
tangle.sh	2,004
cracked.sh	1,284
teleport.sh	1,265
tinfoil.sh	994
eca.sh	941
ftp.sh	865
teta.sh	829
skeleton.sh	767
sfdc.sh	566
zorg.sh	559
gdo.sh	538
spoton.sh	513
syb.sh	385
gopay.sh	342
litt.sh	252
and.sh	246
from.sh	231
dflow.sh	210
birtum.sh	197
expense.sh	181
bka.sh	177
tbm.sh	173
infrapu.sh	166
smgl.sh	164
tkl.sh	163
notary.sh	151
bridgeops.sh	150
saasify.sh	150
torch.sh	150
abot.sh	139
cldev.sh	131
signal.sh	128
spire.sh	124
narwhal.sh	121
prot.sh	117
ocn.sh	116
mayflower.sh	116
atc.sh	112
operative.sh	111
izy.sh	110
oodin.sh	105
genera.sh	103
platform.sh	101
exa.sh	100
sisu.sh	97
crp.sh	96
center.sh	94
brainfi.sh	92
surge.sh	92

Top Certificate Issuers

Issuer (CA)	Certs
Let's Encrypt	628
Amazon	395
YE1	95
WR3	91
YE2	69
YR1	64
YR2	58
Cloudflare	36
ZeroSSL	22
Sectigo	18
smtp2.sh	17
DigiCert	11
smtp3.sh	9
alpha-shhw.msp.sh	7
smtp.sh	7

Top Hosting ASNs

No hosting attribution yet

Forward-DNS crawler hasn't resolved enough .sh apexes to BGP-attributable IPs.

Tech-Stack Distribution

No Wappalyzer detections

Body-fetcher hasn't covered enough .sh sites yet for stack patterns to emerge.

Threat-intel hits

Feed	Category	Domains
openphish	phishing	56

ℹ Coverage will improve significantly once CZDS zone-file access is granted for this TLD.