403 forbidden on user profile due to name

If a profile ends with .sh you get a 403 forbidden. Example: https://defendtheweb.net/profile/a.sh (Don't think he's still active)