.sh: Four Thousand Islanders, Three Thousand DNS Names—and a Shell Extension the World Borrowed

Open brew.sh. You get the official Homebrew package manager site—install one-liners, docs, real downloads. Open curl.sh. In mid-2026 you hit a placeholder page that literally reads "Not implemented yet!" Same suffix, opposite evidence quality. The thin stub this guide replaces never made that distinction. It claimed Google treats .sh as a generic ccTLD (gccTLD)—wrong: .sh is absent from Google's published gccTLD list alongside .io, .co, .tv, and .ai (Search Central). It listed Railway.sh, Warp.sh, and curl.sh as DevOps defaults—railway.sh returns HTTP 404 (Railway's product lives at railway.com / *.up.railway.app); warp.sh is an unrelated personal site, not Cloudflare Warp; curl.sh is a parked stub. And it forced a symmetric "CLI tools / install scripts / DevOps brands" checklist when the real story is zone economics: a British Overseas Territory with ~4,000 on-island residents and ~3,000 delegated .sh names—where a Unix file extension became global branding rent.

What follows is receipt-first: who NIC.SH / Internet Computer Bureau (ICB) / Identity Digital actually are, why Saint Helena's population-to-domain ratio matters for pricing, how shell-script semantics hijacked ISO code SH (alongside German Schleswig-Holstein and domain hacks), verified roofs from brew.sh to nah.sh, and the one routing question that separates a clever install URL from a ccTLD lease with Saint Helena geo semantics.

Two layers: South Atlantic law vs .sh file-extension marketing

In IANA, .sh is unambiguously a country-code TLD (ccTLD) for Saint Helena, Ascension and Tristan da Cunha—British Overseas Territories in the South Atlantic. Delegated 23 September 1997 (Wikipedia / IANA); sponsor is the Government of Saint Helena; registry operations run through NIC.SH, operated by Internet Computer Bureau Ltd (ICB)—the same UK registry stack that runs .io and .ac, and a wholly owned subsidiary of Identity Digital since the Afilias acquisition (.io guide context).

On-island reality is tiny. The St Helena Statistics Office estimated ~4,514 people on the island at end-December 2024, of whom ~3,941 were residents (SHG statistical update). Average resident population during 2024 was roughly 4,036–4,058. Ascension Island uses its own ccTLD .ac (also ICB-operated); Tristan da Cunha shares the .sh delegation in name only—almost no registrations originate there.

Globally, .sh means shell script—the filename extension for Bash, Zsh, and POSIX sh since Unix conventions hardened. Developers type curl … | bash and product.sh/install feels like documentation, not marketing. That semantic hijack is why brew.sh, bun.sh, and nvm.sh exist—none of which have anything to do with Jamestown.

A third hijack rarely appears in English-language TLD guides: SH is the official abbreviation for Schleswig-Holstein, Germany's northernmost state. Sites like nah.sh (regional public transport) and spd.sh (political party subpages) use .sh for German geography, not shell scripts—proof the suffix is a multi-meaning hack space, not a developer-only club.

Google adds a fourth layer—and it differs from .io. Search Central's gccTLD list does not include .sh. Google treats .io, .co, .tv, .ai, and .fm as generic for geotargeting; .sh retains ccTLD geo semantics toward Saint Helena unless you override with hreflang, content, and links. Calling .sh "generic for SEO"—as the old guide did—was its most dangerous error.

Who runs it—and why the zone stays microscopic

Internet Computer Bureau Ltd operates .sh through nic.sh. ICB is chaired by Paul Kane and sits inside Identity Digital's ccTLD portfolio—the same commercial engine that turns .io into a ~$42M/year registry line with ~1.7M names. .sh is the opposite end of that portfolio:

| Metric | Source / date | Figure | |--------|---------------|--------| | Delegated .sh domains | Hurricane Electric .sh report, July 2026 | ~3,029 | | Registry marketing claim | nic.sh resident program | "over 11,000" — includes third-level / historical counts; not HE-delegated census | | On-island residents (avg 2024) | St Helena Statistics Office | ~4,036–4,058 | | W3Techs site share | w3techs.com .sh | <0.1% of websites | | Second-level registration | Wikipedia / nic.sh policy | Unrestricted in practice (paper "professional qualification" rule not enforced) | | Third-level zones | nic.sh | Resident-only (.co.sh, .com.sh, .net.sh, .nom.sh, .org.sh, .gov.sh, .edu.sh) | | Free island domains | nic.sh / Name.com | Free third-level .sh for Saint Helena residents with passport proof | | Minimum term | dot.bs .sh table | 1–10 years | | WHOIS privacy | dot.bs aggregator | Available at many registrars |

~3,000 delegated names for ~4,000 residents is an extraordinary ratio—yet almost all value sits in foreign semantic demand (shell scripts, German SH, English hacks like skl.sh), not local Jamestown businesses. ICB has no incentive to slash wholesale prices: scarcity plus developer vanity keeps renewals profitable on a zone smaller than a single apartment building's worth of .com registrations.

Compare .io (~1.7M) or .gg (~54K)—.sh is two orders of magnitude smaller than gaming's vanity suffix and three orders smaller than developer fashion's default. Plan decisions on HE-tracked DNS footprint, not registry brochure numbers.

Verified roofs—and the brochure names to delete

Ignore Mad Libs (deploy.sh, build.sh, cli.sh as "notable sites" without live products—mid-2026 checks on generic labels return NXDOMAIN or parking). These checks return mission-aligned surfaces:

brew.sh — Official Homebrew macOS/Linux package manager site; the canonical "Unix tool on .sh" success story; install line brew.sh is industry vocabulary.

bun.sh — Bun JavaScript runtime docs and installer; HTTP 200 on a real product. Corporate marketing also leads bun.com—the mature split: .sh for curl | bash, .com for institutional trust.

nvm.sh — Redirects to the nvm-sh/nvm GitHub README—the Node Version Manager install brand; infrastructure redirect, not a content site.

skl.sh — Skillshare short redirect to skillshare.com; classic left-of-dot hack.

nah.sh — Schleswig-Holstein regional public-transport portal (NAH.SH); proof .sh ≠ shell scripts in German.

osu.ppy.sh — osu! rhythm-game infrastructure under ppy.sh; gaming use case unrelated to DevOps.

sta.sh — DeviantArt Sta.sh upload service; creative-platform hack (bot checks may 403; product is real).

railway.com / *.up.railway.app — Counterexample: Railway no longer resolves railway.sh (HTTP 404 mid-2026). CLI install moved to railway.com/install.sh and agents.railway.com. Proof that .sh launch stories graduate off the suffix.

Brochure deletes:

curl.sh — Placeholder "Not implemented yet!" — not an install-script hub.

warp.sh — Unrelated personal site titled "The WARP" — not Cloudflare Warp (one.one.one.one, warp.dev).

Railway.sh, Bun.sh as eternal proof — Check canonical URLs before citing; brands split or migrate.

Trash the old guide's lazy equivalence between "shell script" and ".sh mandatory." The suffix is file-extension semantics plus hack density on a tiny zone, not a CLI requirement—and .dev offers gccTLD treatment with HTTPS enforcement if SEO geo-neutrality matters.

Pricing: $30 promos, $45 renewals, ICB portfolio markup

.sh is mid-tier expensive—cheaper than peak .io renewals at legacy racks, pricier than .com, with wide registrar spread:

| Action | Typical range (USD, mid-2026) | |--------|------------------------------| | New registration (1 yr) | $30–$55 (Sav.com promo ~$29.99; competitive shelves ~$40–$50) | | Renewal (1 yr) | $45–$70 (Above.com ~$45 floor per dot.bs; legacy racks higher) | | Best 3-year average | ~$40/yr (Above.com per dot.bs) | | Transfer | $30–$55 (+1 year typical) | | Premium / dictionary aftermarket | Four to six figures asks—always quote before checkout |

The old guide's blanket "$50–$85/year" overstated competitive shelves and understated legacy markup variance. Model three years at renewal, not the hero banner. ICB/Identity Digital does not publish .sh-specific wholesale tables the way .io's $50→$56 January 2027 hike made headlines (Domain Name Wire)—but shared portfolio economics mean .sh rarely gets cheap permanently.

For macro TLD comparisons, see How Much Do Domains Cost?.

Disputes: WIPO .SH policy—not a trademark dead zone

.sh disputes go to WIPO under the .SH Domain Name Dispute Resolution Policy—a UDRP variant, not absence of policy (WIPO .SH service page). Critical difference from standard ICANN UDRP: complainants need prove either registration or use in bad faith, not both—same threshold as .io. Proceedings are English; Courts of England are mutual jurisdiction.

Trademark holders should monitor typosquats on scarce two-letter hacks; founders should not assume tiny-zone laxity—WIPO transfer orders bite.

SEO and AI search: Saint Helena ccTLD, not generic vanity

Because .sh is not a gccTLD, Google retains a Saint Helena country association on the domain itself—you cannot flip that off in Search Console the way you can ignore BIOT signals on .io. Rankings still follow normal quality signals; John Mueller's standing guidance applies: keywords in the TLD are not a ranking boost. International reach requires hreflang, language, links, and content—same playbook as .gg, not .io.

For install-script landing pages, SEO value often accrues to GitHub repos and documentation through redirects—nvm.sh → GitHub is the pattern. For primary product brands (brew.sh, bun.sh), E-E-A-T and structured data matter as always—see Does Your Domain Name Affect SEO?.

AI surfaces (ChatGPT Search, Perplexity, Google AI Overviews) cite known products and authoritative pages, not ccTLD file extensions. brew.sh appears because Homebrew is infrastructure, not because .sh whispers "bash" to model weights. No audited AIO preference layer exists for .sh over .com. Delete the old guide's SoftwareApplication / TechArticle schema boilerplate pretending otherwise.

One routing question—not a who-should matrix

Skip symmetric columns. Ask:

Are you buying file-extension semantics for a three-year developer launch—or a permanent brand that must survive Saint Helena ccTLD geo signals and ~$45+/year renewals on a three-thousand-name zone?

Choose .sh when you ship CLI installers, Unix-native tools, or shell-script brands where yourtool.sh shortens explanation in README files and conference talks, your audience already parses .sh as " runnable script," and you accept $40–$70/year renewals plus non-gccTLD geo semantics. Register defensive .com and plan a canonical migration path before enterprise procurement—see Domain Hacks for the bun.sh / bun.com split.

Skip .sh when you sell to non-technical consumers (.sh reads as terminal jargon), when global SEO geo-neutrality matters (prefer .dev or .io—both gccTLDs), when mainland China is core (operate on .cn/.com.cn for ICP—see Country-Code Domains for Global Brands), or when you need ICANN-contract price stability (.com has caps; Jamestown does not).

Alternatives worth comparing:

• .dev — Google-operated; gccTLD; HTTPS-enforced; developer-native without South Atlantic baggage.
• .io — Broader tech vanity; gccTLD; ~1.7M zone; separate Chagos sovereignty stack.
• .ac — Ascension Island sibling ccTLD under the same ICB stack; "academic" semantic hijack; also not on Google's gccTLD list (see .io).
• .com — Institutional email, press, and conservative procurement default.

FAQ

Who operates .sh in 2026?

NIC.SH, run by Internet Computer Bureau Ltd (ICB)—a wholly owned subsidiary of Identity Digital. Sponsor: Government of Saint Helena. Same corporate stack as .io and .ac.

Is .sh on Google's gccTLD list?

No. .sh is absent from Google's published gccTLD list. It carries Saint Helena ccTLD geo semantics Search Console cannot neutralize like .io.

How many .sh domains exist?

Roughly ~3,029 delegated names per Hurricane Electric's July 2026 DNS census. Registry marketing cites "11,000+" including third-level and historical figures—treat HE as the audit-grade footprint.

Why do developers use .sh?

.sh is the Unix shell-script file extension. Brands like brew.sh and bun.sh exploit that coincidence for install URLs and README clarity—not because the registry requires it.

Is .sh expensive?

Mid-tier. Competitive shelves: ~$30–$55 new, ~$45–$70 renewals. Legacy racks run higher. Cheaper than peak .ai wholesale; pricier than .com.

Does .sh have UDRP?

Yes—a WIPO-administered .SH policy; bad-faith threshold is registration OR use, not both (WIPO comparison).

Can Saint Helena residents get free domains?

Yes—third-level only. Residents with British Overseas Territories passports can apply for free .co.sh / .com.sh / .net.sh / .nom.sh / .org.sh via nic.sh's Name.com program. Second-level .sh remains paid for everyone.

Did Railway stay on .sh?

No. railway.sh returns 404 mid-2026. Product lives at railway.com with *.up.railway.app service domains.

---

Mapping CLI brand architecture across suffixes? Use our AI domain generator to compare .sh, .dev, .io, and .com in one pass—or read Domain Hacks: Creative Naming before you rent a file extension from a South Atlantic ccTLD.