HTTPS is now free, easy and increasingly ubiquitous. It's also now required if you don't want Google Chrome flagging the site as "Not secure". Yet still, many of the world's largest websites continue to serve content over unencrypted connections, putting users at risk even when no sensitive data is involved.

Following is a list of the world's top 100 websites by Tranco rank not automatically redirecting insecure requests to secure ones. You'll then find the top 50 sites by country underneath that. The data is driven by Scott Helme's nightly crawl and is explained in detail in the launch blog post for this project.

The World's Most Popular Websites Loaded Insecurely

Each of the following websites loads over an insecure connection without redirecting to a secure, encrypted connection. The 100 websites below represent 6 % of the world's largest 1,803 websites.

Tranco Rank Website
13. China baidu.com
44. China xinhuanet.com
60. United States of America apache.org
64. United States of America myshopify.com
72. United States of America w3.org
116. China tianya.cn
159. United States of America gnu.org
167. United States of America go.com
181. United States of America nginx.org
221. China babytree.com
244. United States of America hugedomains.com
319. United States of America washington.edu
323. United States of America deviantart.com
329. China rednet.cn
402. Poland swiat-kamienia.pl
410. United States of America allaboutcookies.org
436. United States of America moatads.com
443. Netherlands eepurl.com
456. China people.com.cn
464. India example.com
470. China jiameng.com
478. United States of America yimg.com
578. Germany youronlinechoices.com
623. China soso.com
634. China www.gov.cn
657. China 360.com
671. India fao.org
673. Egypt videocampaign.co
674. China cnnic.cn
684. India comodoca.com
688. China chinadaily.com.cn
717. United States of America redfin.com
760. United States of America padlet.com
807. China sonhoo.com
831. United States of America sectigo.com
837. United States of America adsymptotic.com
898. United States of America genius.com
901. Canada pinterest.ca
946. United States of America icio.us
947. United States of America tremorhub.com
953. United States of America myworkdayjobs.com
961. Venezuela, Bolivarian Republic of neobux.com
970. United States of America typekit.net
973. United States of America crunchyroll.com
1,006. China 360doc.com
1,009. China ih5.cn
1,012. United States of America rs6.net
1,041. Indonesia cnnindonesia.com
1,046. India dmoz.org
1,048. United States of America netdna-ssl.com
1,050. United States of America wa.gov
1,088. United States of America bu.edu
1,108. United States of America wildapricot.org
1,116. China gusuwang.com
1,119. Indonesia creativecdn.com
1,131. Taiwan, Province of China dcard.tw
1,193. United States of America pendo.io
1,214. United States of America faqs.org
1,243. United States of America brightcove.net
1,266. United States of America taleo.net
1,270. China it168.com
1,296. China chinanews.com
1,305. United States of America wikidot.com
1,315. United States of America ihg.com
1,321. Japan dmm.co.jp
1,347. Japan biglobe.ne.jp
1,356. China dedecms.com
1,372. United States of America youronlinechoices.eu
1,378. China house365.com
1,402. China renren.com
1,405. China cygwin.com
1,429. India git-scm.com
1,431. Montserrat 1drv.ms
1,457. India justdial.com
1,459. United States of America videolan.org
1,473. United States of America tinypic.com
1,512. China china.com.cn
1,547. Russian Federation rutracker.org
1,556. China chinanetrank.com
1,587. China hexun.com
1,612. Philippines axieinfinity.com
1,613. United States of America etherscan.io
1,614. China shippingchina.com
1,625. Canada ssense.com
1,645. United States of America metmuseum.org
1,659. United States of America openoffice.org
1,660. China dangdang.com
1,661. China southcn.com
1,664. Canada royalbank.com
1,666. China dianping.com
1,675. Brazil onmarshtompor.com
1,695. Canada acuityplatform.com
1,723. Korea, Republic of cafe24.com
1,738. Germany samsungapps.com
1,755. Korea, Republic of 11st.co.kr
1,766. United States of America zazzle.com
1,782. Montenegro loopme.me
1,790. United States of America sourceware.org
1,802. China recaptcha.net
1,803. Russian Federation consultant.ru

Reports by Country

Each of the following countries has a localised report of the top 50 websites not redirecting to secure connections.

Andorra AD United Arab Emirates AE Afghanistan AF Antigua and Barbuda AG Anguilla AI Albania AL Armenia AM Angola AO Argentina AR American Samoa AS Austria AT Australia AU Azerbaijan AZ Bosnia and Herzegovina BA Barbados BB Bangladesh BD Belgium BE Burkina Faso BF Bulgaria BG Bahrain BH Burundi BI Benin BJ Bermuda BM Brunei Darussalam BN Bolivia, Plurinational State of BO Brazil BR Bahamas BS Bhutan BT Botswana BW Belarus BY Belize BZ Canada CA Cocos (Keeling) Islands CC Congo, the Democratic Republic of the CD Central African Republic CF Congo CG Switzerland CH Côte d'Ivoire CI Chile CL Cameroon CM China CN Colombia CO Costa Rica CR Cuba CU Christmas Island CX Cyprus CY Czechia CZ Germany DE Denmark DK Dominican Republic DO Algeria DZ Ecuador EC Estonia EE Egypt EG Eritrea ER Spain ES Ethiopia ET Finland FI Fiji FJ Micronesia, Federated States of FM Faroe Islands FO France FR Gabon GA United Kingdom of Great Britain and Northern Ireland GB Grenada GD Georgia GE French Guiana GF Guernsey GG Ghana GH Gibraltar GI Greenland GL Guinea GN Equatorial Guinea GQ Greece GR South Georgia and the South Sandwich Islands GS Guatemala GT Guyana GY Hong Kong HK Honduras HN Croatia HR Haiti HT Hungary HU Indonesia ID Ireland IE Israel IL Isle of Man IM India IN British Indian Ocean Territory IO Iraq IQ Iran, Islamic Republic of IR Iceland IS Italy IT Jamaica JM Jordan JO Japan JP Kenya KE Kyrgyzstan KG Cambodia KH Korea, Republic of KR Kuwait KW Kazakhstan KZ Lao People's Democratic Republic LA Lebanon LB Saint Lucia LC Liechtenstein LI Sri Lanka LK Lithuania LT Luxembourg LU Latvia LV Libya LY Morocco MA Monaco MC Moldova, Republic of MD Montenegro ME Madagascar MG Macedonia, the former Yugoslav Republic of MK Mali ML Myanmar MM Mongolia MN Macao MO Mauritania MR Montserrat MS Malta MT Mauritius MU Maldives MV Malawi MW Mexico MX Malaysia MY Mozambique MZ Namibia NA Niger NE Nigeria NG Nicaragua NI Netherlands NL Norway NO Nepal NP Nauru NR Niue NU New Zealand NZ Oman OM Panama PA Peru PE French Polynesia PF Papua New Guinea PG Philippines PH Pakistan PK Poland PL Saint Pierre and Miquelon PM Puerto Rico PR Palestine, State of PS Portugal PT Palau PW Paraguay PY Qatar QA Réunion RE Romania RO Serbia RS Russian Federation RU Rwanda RW Saudi Arabia SA Solomon Islands SB Seychelles SC Sudan SD Sweden SE Singapore SG Saint Helena, Ascension and Tristan da Cunha SH Slovenia SI Slovakia SK San Marino SM Senegal SN Somalia SO Suriname SR Sao Tome and Principe ST El Salvador SV Sint Maarten (Dutch part) SX Syrian Arab Republic SY Eswatini SZ Turks and Caicos Islands TC Chad TD French Southern Territories TF Togo TG Thailand TH Tajikistan TJ Tokelau TK Timor-Leste TL Turkmenistan TM Tunisia TN Tonga TO Turkey TR Trinidad and Tobago TT Tuvalu TV Taiwan, Province of China TW Tanzania, United Republic of TZ Ukraine UA Uganda UG United States of America US Uruguay UY Uzbekistan UZ Saint Vincent and the Grenadines VC Venezuela, Bolivarian Republic of VE Virgin Islands, British VG Viet Nam VN Vanuatu VU Wallis and Futuna WF Samoa WS Yemen YE South Africa ZA Zambia ZM Zimbabwe ZW

Resources for Going HTTPS

If you're responsible for a website and aren't sure why HTTPS is important or would like resources to help make the transition, try these:

  1. Does My Site Need HTTPS?
  2. HTTPS Is Easy!
  3. Here's Why Your Static Website Needs HTTPS
  4. Is TLS Fast Yet?
  5. HTTP vs HTTPS Speed Test
  6. Understanding HTTP Strict Transport Security (HSTS)
  7. What Every Developer Must Know About HTTPS