Heartbleed - List of vulnerable sites in the Alexa 10000


Let’s be clear from the start. I’m not going to provide yet another explanation of what Heartbleed is. If you live in a cave and haven’t heard about it yet then check out these links for an explanation.

What I am going to do, however, is post the list of the sites in the Alexa top 10000 that have been impacted. There are 630 sites in this list out of the original 10000, meaning that 6.3% of the original list was detected as being vulnerable.

Disclaimer

This list is actually just a filtered version of Mustafa Al-Bassam’s full list of both compromised and non-comprimised Alexa 10000 sites as detected on 08/04/2014. That list can be found here. As I did not compile the original list I cannot vouch for its or this list’s accuracy. While I do have confidence in this data, it should only be used for informative purposes.

I recommend following the password changing advice found in the “layman’s explanation” article above.

The list (in order of popularity)

  • yahoo.com
  • imgur.com
  • stackoverflow.com
  • kickass.to
  • flickr.com
  • sogou.com
  • adf.ly
  • outbrain.com
  • archive.org
  • addthis.com
  • stackexchange.com
  • popads.net
  • php.net
  • avito.ru
  • kaskus.co.id
  • web.de
  • chaturbate.com
  • zeobit.com
  • beeg.com
  • seznam.cz
  • okcupid.com
  • pch.com
  • xda-developers.com
  • steamcommunity.com
  • scoop.it
  • hidemyass.com
  • 123rf.com
  • m-w.com
  • dreamstime.com
  • majesticseo.com
  • amung.us
  • duckduckgo.com
  • leo.org
  • eventbrite.com
  • wetransfer.com
  • sh.st
  • entrepreneur.com
  • zoho.com
  • yts.re
  • usmagazine.com
  • letitbit.net
  • fool.com
  • digitalpoint.com
  • picmonkey.com
  • petflow.com
  • squidoo.com
  • avazutracking.net
  • elegantthemes.com
  • 500px.com
  • wpmudev.org
  • junbi-tracker.com
  • gogetlinks.net
  • freelotto.com
  • cheezburger.com
  • weather.gov
  • zergnet.com
  • city-data.com
  • mail.com
  • bab.la
  • internettrafficformula.com
  • startimes.com
  • homeshop18.com
  • rollingstone.com
  • smi2.ru
  • gogvo.com
  • indiegogo.com
  • livetv.sx
  • infowars.com
  • zap2it.com
  • breitbart.com
  • fatwallet.com
  • internetdownloadmanager.com
  • yjc.ir
  • chess.com
  • doodle.com
  • sendspace.com
  • similarweb.com
  • inc.com
  • bomnegocio.com
  • studiopress.com
  • privatbank.ua
  • juicyads.com
  • theatlantic.com
  • chefkoch.de
  • mirtesen.ru
  • clickey.com
  • letras.mus.br
  • tusfiles.net
  • reverbnation.com
  • digitaltrends.com
  • searchenginejournal.com
  • torcache.net
  • yify-torrents.com
  • championat.com
  • arstechnica.com
  • sme.sk
  • zomato.com
  • economist.com
  • slimspots.com
  • jasmin.com
  • lonelyplanet.com
  • unity3d.com
  • androidcentral.com
  • wanggou.com
  • tubegalore.com
  • gi-akademie.com
  • rarbg.com
  • prezentacya.ru
  • watchtower.com
  • xxxbunker.com
  • kaspersky.com
  • adxcore.com
  • depositfiles.com
  • xtool.ru
  • rantlifestyle.com
  • xml-sitemaps.com
  • banglanews24.com
  • worldoftanks.ru
  • webpagetest.org
  • rapidshare.com
  • funnie.st
  • vipzona.info
  • bizrate.com
  • creativecommons.org
  • izlesene.com
  • therichest.com
  • dailycaller.com
  • newsnow.co.uk
  • webutations.org
  • srclick.ru
  • tokopedia.com
  • minus.com
  • cyberciti.biz
  • tune.pk
  • filmaffinity.com
  • skrill.com
  • paipai.com
  • oschina.net
  • fitbit.com
  • myanimelist.net
  • bidorbuy.co.za
  • rantsports.com
  • wikispaces.com
  • worldoftanks.eu
  • cdn4711.net
  • hotukdeals.com
  • zovi.com
  • dfiles.ru
  • zone-telechargement.com
  • drugs.com
  • mediatemple.net
  • xmarks.com
  • rozetka.com.ua
  • appannie.com
  • thestreet.com
  • arvixe.com
  • transfermarkt.de
  • worldoftanks.com
  • affiliatewindow.com
  • bigpoint.com
  • zdf.de
  • profitcentr.com
  • mydealz.de
  • ssisurveys.com
  • toshiba.com
  • indowebster.com
  • dsdomination.com
  • utorrent.com
  • nosub.tv
  • filelist.ro
  • gazzetta.gr
  • medium.com
  • imperiaonline.org
  • vic.gov.au
  • creditkarma.com
  • online-convert.com
  • myegy.to
  • searchfunmoods.com
  • fark.com
  • scamadviser.com
  • bizdec.ru
  • bannersbroker.com
  • joomlart.com
  • webinarjam.net
  • pornyaz.com
  • unetenet.com
  • joyreactor.cc
  • globallshare.com
  • tuniu.com
  • csfd.cz
  • uservoice.com
  • trafficfactory.biz
  • barclaycardus.com
  • mci.ir
  • noulinx.com
  • ingbank.pl
  • gonzoxxxmovies.com
  • cabelas.com
  • khamsat.com
  • 2gis.ru
  • fab.com
  • digitalmarketer.com
  • billionuploads.com
  • efukt.com
  • shaparak.ir
  • radiojavan.com
  • christianpost.com
  • pons.com
  • ymlp.com
  • btcclicks.com
  • mythemeshop.com
  • seo-fast.ru
  • mojo-themes.com
  • draugiem.lv
  • final.ir
  • madmimi.com
  • sinaapp.com
  • ptcsolution.com
  • bytes.com
  • attracta.com
  • dek-d.com
  • dfiles.eu
  • graphicstock.com
  • europe1.fr
  • fineartamerica.com
  • text.ru
  • dastelefonbuch.de
  • enter.ru
  • awempire.com
  • docnhat.net
  • megaindex.ru
  • ucla.edu
  • wisegeek.com
  • flightaware.com
  • peerfly.com
  • wistia.com
  • extremetracking.com
  • ghatreh.com
  • depositfiles.org
  • palcomp3.com
  • uiuc.edu
  • fancy.com
  • tagesanzeiger.ch
  • dynadot.com
  • soup.io
  • ip138.com
  • jumia.com.ng
  • worthofweb.com
  • adage.com
  • talktalk.co.uk
  • playcast.ru
  • congratulations-you-won.com
  • ge.tt
  • informador.com.mx
  • hammihan.com
  • onedio.com
  • olx.co.th
  • gi-backoffice.com
  • gorillavid.in
  • talkingpointsmemo.com
  • 518.com.tw
  • fast-torrent.ru
  • animoto.com
  • webinarjam.com
  • arioo.com
  • gogoanime.com
  • mojomarketplace.com
  • nanapi.jp
  • bahseazad.ir
  • serpbook.com
  • libsyn.com
  • playxn.com
  • classifiedads.com
  • myus.com
  • q.gs
  • lijit.com
  • joxi.ru
  • vbox7.com
  • ocj.com.cn
  • giga.de
  • tomoson.com
  • alkislarlayasiyorum.com
  • overclock.net
  • domainnamesales.com
  • appthemes.com
  • katestube.com
  • lupoporno.com
  • windguru.cz
  • designmodo.com
  • berlin.de
  • lifo.gr
  • diepresse.com
  • postjoint.com
  • bittorrent.com
  • worldoftanks.asia
  • okitspace.com
  • sparkasse.at
  • nascar.com
  • slate.fr
  • njuskalo.hr
  • astro.com
  • lavozdegalicia.es
  • androidpolice.com
  • longtailvideo.com
  • webbirga.net
  • idwebgame.com
  • gfan.com
  • webempresa.com
  • bibsonomy.org
  • wenyard.com
  • readwrite.com
  • vmoptions.com
  • wowkeren.com
  • ay.gy
  • ibtimes.co.in
  • ss.lv
  • coinmill.com
  • memecenter.com
  • dhnet.be
  • ifttt.com
  • songmeanings.com
  • kicktipp.de
  • graphixshare.com
  • jango.com
  • zoomit.ir
  • userscripts.org
  • uyan.cc
  • down1oads.com
  • full-stream.net
  • 1001freefonts.com
  • hotnews.ro
  • mightydeals.com
  • zimbra.free.fr
  • apktops.ir
  • selfhtml.org
  • shopzilla.com
  • dha.com.tr
  • copy.com
  • coderanch.com
  • darty.com
  • 24tv.ua
  • smashwords.com
  • castorama.fr
  • solidtrustpay.com
  • yatedo.com
  • neurs.com
  • mdir.ir
  • thewire.com
  • futbol24.com
  • keek.com
  • elitetorrent.net
  • ecosia.org
  • j.gs
  • jonloomer.com
  • deseretnews.com
  • spinding.com
  • theme123.net
  • biography.com
  • check24.de
  • cplusplus.com
  • safecart.com
  • healthkart.com
  • baskino.com
  • cifraclub.com.br
  • exactseek.com
  • expatriates.com
  • saharareporters.com
  • feebbo.com
  • adshostnet.com
  • webartex.ru
  • pond5.com
  • wpml.org
  • dl-protect.com
  • seocentro.com
  • flexmls.com
  • a2hosting.com
  • gov.cl
  • savenkeep.com
  • internetlifestylenetwork.com
  • uploadbaz.com
  • optimizepress.com
  • mttbsystem.com
  • pulptastic.com
  • theme.co
  • swansonvitamins.com
  • afterbuy.de
  • zorpia.com
  • 1c-bitrix.ru
  • holidaylettings.co.uk
  • premiere.fr
  • socialadr.com
  • sixrevisions.com
  • hypovereinsbank.de
  • themefuse.com
  • roodo.com
  • cbr.ru
  • marunadanmalayali.com
  • jquery4u.com
  • powtoon.com
  • ubersuggest.org
  • markethealth.com
  • freelogoservices.com
  • readthedocs.org
  • mandrillapp.com
  • pixeden.com
  • nukistream.com
  • tractionize.com
  • avito.ma
  • 101domain.com
  • sinemalar.com
  • weathernews.jp
  • nasgo.net
  • luxup.ru
  • wasanga.com
  • realself.com
  • matadornetwork.com
  • ee.co.uk
  • lovoo.net
  • paperblog.com
  • technobuffalo.com
  • zoom.com.br
  • bimlatino.com
  • dramafever.com
  • xojane.com
  • azhibo.com
  • edgecastcdn.net
  • duke.edu
  • mobilelikez.com
  • cooperativa.cl
  • asiatech.ir
  • phpnuke.org
  • avsforum.com
  • 99wed.com
  • wine-searcher.com
  • cyberchimps.com
  • umd.edu
  • t24.com.tr
  • imgsrc.ru
  • farnell.com
  • phpbb.com
  • fermasosedi.ru
  • smartinsights.com
  • pik.ba
  • qq163.com
  • pciconcursos.com.br
  • hsoub.com
  • sixfigurefunnelformula.com
  • kingworldnews.com
  • heritage.org
  • quidco.com
  • mediapost.com
  • watchcric.com
  • vodafone.co.uk
  • viki.com
  • bplans.com
  • all-union.com
  • clickprime8.com
  • competitor.com
  • beliefnet.com
  • pingler.com
  • worthytoshare.com
  • millenium.org
  • encuentra24.com
  • skimlinks.com
  • mubasher.info
  • marksdailyapple.com
  • buenosaires.gob.ar
  • gelbeseiten.de
  • lalibre.be
  • mobikwik.com
  • affilorama.com
  • appcelerator.com
  • invisionpower.com
  • tz4.com
  • favstar.fm
  • zenhabits.net
  • customink.com
  • templateism.com
  • getsatisfaction.com
  • rosnet.ru
  • digitalriver.com
  • joomlashine.com
  • fide.com
  • lyricsmode.com
  • trovit.it
  • socialfabric.us
  • rcgroups.com
  • directadmin.com
  • hrsmart.com
  • eprize.com
  • qoinpro.com
  • path.com
  • mobeoffice.com
  • taz.de
  • authorityroi.com
  • jqueryscript.net
  • wakeupnow.com
  • abakus-internet-marketing.de
  • cinepolis.com
  • dlisted.com
  • joomlaportal.de
  • ncsu.edu
  • imasters.com.br
  • adworkmedia.com
  • entropay.com
  • unionpaysecure.com
  • maxpark.com
  • popupads.ir
  • getrichradio.com
  • proranktracker.com
  • androidpit.com
  • polki.pl
  • ip2location.com
  • radiko.jp
  • wisegeek.org
  • trovit.com
  • jobisjob.co.in
  • quondos.com
  • softportal.com
  • nationaljournal.com
  • ebesucher.de
  • zive.cz
  • neurs.net
  • telewebion.com
  • performancehorizon.com
  • springpad.com
  • theync.com
  • mg.gov.br
  • globus-inter.com
  • osclass.org
  • cpasuperaffiliate.com
  • naukrigulf.com
  • trovit.com.mx
  • eventbrite.co.uk
  • paris.fr
  • kenrockwell.com
  • zagat.com
  • 444.hu
  • barchart.com
  • edlen24.com
  • peixeurbano.com.br
  • flamingtext.com
  • speedyshare.com
  • seratnews.ir
  • bizpowa.com
  • grasscity.com
  • downloadab.com
  • sportdog.gr
  • programmableweb.com
  • fontpalace.com
  • head-fi.org
  • bitterstrawberry.com
  • responsinator.com
  • cuisineaz.com
  • work.ua
  • utsandiego.com
  • foozine.com
  • androidpit.de
  • invisionzone.com
  • top.de
  • rememberthemilk.com
  • infogr.am
  • blizko.ru
  • elle.fr
  • aremo.com.br
  • static.squarespace.com
  • fotki.com
  • datropy.com
  • adscendmedia.com
  • spartoo.com
  • wordcounter.net
  • example.com
  • turkcealtyazi.org
  • worthytoshare.net
  • ideeli.com
  • trthaber.com
  • romedic.ro
  • vudu.com
  • aplus.com
  • lavozdelmuro.com
  • citruspay.com
  • optimizehub.com
  • hobo-web.co.uk
  • dailybasis.com
  • sports.fr
  • dressupgamesite.com
  • smartbrief.com
  • scoopwhoop.com
  • dev7studios.com
  • longurl.it
  • privatbank.ru
  • wannonce.com
  • topnews.ru
  • 55188.com
  • cinepolis.com.mx
  • gorilla-evolution.com
  • keyandway.com
  • perfectworld.eu
  • shopware.de
  • kyivpost.com
  • bavotasan.com
  • gnetwork.biz
  • farsisubtitle.com
  • kat.ph
  • vocabulary.com
  • daveramsey.com
  • mumsnet.com
  • alfajertv.com
  • gordonua.com
  • friendorfollow.com
  • peeplo.com
  • free-ebooks.net
  • adslzone.net
  • adultbay.org
  • softcoin.com
  • trovit.es
  • evsuite.com
  • waseet.net
  • sudaneseonline.com
  • mobypicture.com
  • pinkbike.com
  • fizzle.co
  • telly.com
  • blip.tv
  • basketball-reference.com
  • resellerratings.com
  • quirktools.com
  • afrihost.com
  • 18qt.com
  • winscp.net