The DROWN Attack

Examples of Vulnerable Popular Sites

These sites in the Alexa Top 10,000 were vulnerable to man-in-the-middle attacks shortly before DROWN was publicly disclosed on March 1, 2016. This list includes only sites for which name.com, www.name.com, or login.name.com was vulnerable. Many more sites were vulnerable on other subdomains or to other forms of the attack.

RankVulnerable Site
5.yahoo.com
15.sina.com.cn
18.weibo.com
29.360.cn
39.sohu.com
48.gmw.cn
60.alibaba.com
68.tianya.cn
76.haosou.com
90.jd.com
93.xhamster.com
102.indiatimes.com
114.163.com
117.dailymotion.com
120.dmm.co.jp
123.buzzfeed.com
149.weather.com
165.flickr.com
171.snapdeal.com
189.mediafire.com
193.taboola.com
204.akamaihd.net
246.udn.com
256.speedtest.net
259.rambler.ru
273.groupon.com
276.mama.cn
279.icicibank.com
303.so.com
304.wp.pl
308.iqiyi.com
331.rediff.com
338.samsung.com
366.1688.com
374.dmm.com
399.blackboard.com
405.stumbleupon.com
409.taleo.net
442.4shared.com
466.xunlei.com
485.hatena.ne.jp
528.nba.com
548.billdesk.com
598.sakura.ne.jp
601.wikiwiki.jp
617.kdnet.net
638.zing.vn
652.youdao.com
653.myway.com
672.shaparak.ir
674.asus.com
679.cnbc.com
690.interia.pl
694.gmarket.co.kr
708.chron.com
734.drom.ru
756.php.net
782.cbssports.com
800.hostgator.com
810.aliyun.com
852.eastmoney.com
886.11st.co.kr
900.excite.co.jp
903.126.com
918.statcounter.com
933.lemonde.fr
967.abril.com.br
972.banggood.com
989.wiley.com
1011.line.me
1028.usnews.com
1051.apache.org
1053.suning.com
1054.wiocha.pl
1056.duowan.com
1057.wargaming.net
1065.clarin.com
1075.lockerdome.com
1080.bluehost.com
1121.saramin.co.kr
1177.autotrader.com
1178.starsports.com
1195.wildberries.ru
1214.chefkoch.de
1236.dict.cc
1292.td.com
1305.elevenia.co.id
1336.mainichi.jp
1411.miniclip.com
1412.virgilio.it
1413.airasia.com
1425.gemius.pl
1432.lightinthebox.com
1458.ravelry.com
1460.sammydress.com
1493.idealo.de
1504.over-blog.com
1506.healthline.com
1513.gaana.com
1529.189.cn
1583.cleartrip.com
1584.epochtimes.com
1585.autohome.com.cn
1595.unam.mx
1603.mheducation.com
1606.shop-pro.jp
1621.telegraaf.nl
1624.nature.com
1659.vmware.com
1682.cityheaven.net
1711.monotaro.com
1723.nate.com
1735.chosun.com
1756.mos.ru
1757.dealnews.com
1779.tradedoubler.com
1786.meteofrance.com
1788.marketgid.com
1800.gamme.com.tw
1806.avast.com
1820.21cn.com
1848.ibtimes.co.uk
1870.rutube.ru
1915.variety.com
1916.beeline.ru
1935.terra.com.br
1941.filmon.com
1948.danawa.com
1964.trademe.co.nz
1968.flipboard.com
1973.vector.co.jp
2012.concursolutions.com
2035.trafficshop.com
2049.wisc.edu
2051.i.ua
2052.interpark.com
2158.voyages-sncf.com
2160.frys.com
2183.sinaimg.cn
2189.sat.gob.mx
2228.payu.in
2238.timesjobs.com
2251.mundosexanuncio.com
2261.teacherspayteachers.com
2267.pps.tv
2288.willhaben.at
2313.css-tricks.com
2314.proboards.com
2317.made-in-china.com
2371.ad4game.com
2407.jd.hk
2410.mathworks.com
2423.rosegal.com
2443.thrillist.com
2456.scholastic.com
2465.yunpan.cn
2472.one.com
2512.passportindia.gov.in
2528.magicbricks.com
2592.twitcasting.tv
2603.ipeen.com.tw
2618.xueqiu.com
2671.caixin.com
2687.jofogas.hu
2719.literotica.com
2738.cnr.cn
2762.mudah.my
2826.un.org
2871.everydayhealth.com
2905.slrclub.com
2933.ultipro.com
2968.thomann.de
2974.korrespondent.net
2987.megafon.ru
3002.fudan.edu.cn
3013.tune.pk
3087.cafe24.com
3108.umd.edu
3119.finalfantasyxiv.com
3172.webassign.net
3175.usc.edu
3181.name.com
3187.wemakeprice.com
3189.draugiem.lv
3245.oriflame.com
3318.anandabazar.com
3359.zoom.us
3364.alibaba-inc.com
3373.mxtoolbox.com
3376.etnet.com.hk
3395.societe.com
3408.tvb.com
3471.funnyjunk.com
3482.trivago.com
3555.magazineluiza.com.br
3562.flightaware.com
3571.freeones.com
3574.on.cc
3594.ouest-france.fr
3604.nintendo.co.jp
3607.qyer.com
3621.nzherald.co.nz
3633.ole.com.ar
3643.carters.com
3660.bigmir.net
3668.meb.gov.tr
3707.hola.com
3759.msi.com
3821.sportmaster.ru
3864.ucweb.com
3874.estadao.com.br
3887.post-survey.com
3895.rai.it
3901.powerschool.com
3913.osu.edu
3929.kakao.com
3949.sport-express.ru
3958.csair.com
3961.zum.com
3963.qip.ru
3999.symplicity.com
4028.livechatinc.com
4083.miercn.com
4087.flexmls.com
4144.mci.ir
4150.virginia.edu
4164.ets.org
4179.wondershare.com
4207.synxis.com
4256.cosme.net
4270.zhcw.com
4299.rt.ru
4310.myvidster.com
4311.myheritage.com
4349.hangame.co.jp
4355.bbvanet.com.mx
4358.kompass.com
4363.rosewholesale.com
4365.loc.gov
4369.startribune.com
4380.apsense.com
4407.xdf.cn
4453.beatport.com
4457.homeshop18.com
4554.95516.com
4575.lenovo.com.cn
4576.uptodate.com
4634.uidai.net.in
4650.webgains.com
4659.meizu.com
4715.gingersoftware.com
4720.mag2.com
4732.shatel.ir
4758.sirsi.net
4797.boohoo.com
4828.notebookcheck.net
4838.liberation.fr
4869.uludagsozluk.com
4898.lrytas.lt
4925.delfi.ee
4927.kia.com
4983.ge.com
4992.rte.ie
5007.etoro.com
5031.wolfram.com
5032.wdc.com
5034.naftemporiki.gr
5073.awwwards.com
5088.tori.fi
5128.finam.ru
5196.yes24.com
5206.marvel.com
5287.calculator.net
5321.fruitmail.net
5327.alternet.org
5353.cyberlink.com
5380.purewow.com
5396.byu.edu
5400.vbox7.com
5401.infoq.com
5403.postimees.ee
5427.eventful.com
5441.bisnis.com
5442.telmex.com
5458.classifiedads.com
5463.librus.pl
5475.firestorage.jp
5485.wn.com
5502.ehanex.com
5510.mk.co.kr
5538.iol.pt
5599.pracuj.pl
5614.narvar.com
5649.ringcentral.com
5690.ziggo.nl
5698.mt.co.kr
5741.virginamerica.com
5755.quoka.de
5790.vueling.com
5832.ladepeche.fr
5840.pearson.com
5844.99.com
5853.gsshop.com
5873.weibo.cn
5890.casa.it
5908.epa.gov
5917.webike.net
5923.hasznaltauto.hu
5927.vatgia.com
5936.seositecheckup.com
5964.lineq.jp
5972.nic.ir
6007.tuniu.com
6009.24ur.com
6011.beautyexchange.com.hk
6026.unext.jp
6066.ut.ac.ir
6090.chobirich.com
6110.fastweb.it
6113.cmsite.co.jp
6183.instaforex.com
6223.gencat.cat
6281.irancell.ir
6287.spring.io
6296.colostate.edu
6305.miaopai.com
6311.cheetahmail.com
6356.sbs.co.kr
6363.sunat.gob.pe
6385.mumsnet.com
6465.uc.cn
6477.internations.org
6500.wustl.edu
6501.liontravel.com
6528.elecom.co.jp
6534.cutv.com
6564.blog.163.com
6594.utah.gov
6617.zbj.com
6641.woobox.com
6772.suomi24.fi
6895.acm.org
6914.kingsoft.jp
6963.propellerads.com
7014.bakeca.it
7026.jobkorea.co.kr
7030.jst.go.jp
7031.gaiaonline.com
7065.sublimetext.com
7109.hujiang.com
7181.scmp.com
7214.gou.com
7242.myfxbook.com
7265.visual.ly
7293.hhs.gov
7305.olleh.com
7308.whmcs.com
7324.appsflyer.com
7372.band.us
7380.dresslily.com
7391.hc360.com
7396.realitatea.net
7401.zacks.com
7406.tenpay.com
7408.fengniao.com
7420.unesco.org
7439.tophotels.ru
7492.vivino.com
7535.nielsen.com
7542.infopanel.jp
7569.brighthouse.com
7587.cognizant.com
7621.brown.edu
7694.trojmiasto.pl
7715.zaq.ne.jp
7716.india.gov.in
7723.hiweb.ir
7724.nexon.com
7728.nazwa.pl
7763.zorpia.com
7774.wileyplus.com
7792.feidee.com
7797.beenverified.com
7824.yy.com
7851.hyundai.com
7865.360safe.com
7885.meta.ua
7922.hide.me
7923.vodafone.com.eg
7935.iporter.com
7944.web-hosting.com
7983.amap.com
8011.copart.com
8016.editorialmanager.com
8025.lesoir.be
8031.sifyitest.com
8072.adriver.ru
8094.tadawul.com.sa
8113.hvg.hu
8129.tripit.com
8142.24tv.ua
8162.rarlab.com
8203.cricket.com.au
8262.kaixin001.com
8289.liverpool.com.mx
8345.vfsglobal.com
8351.football.ua
8367.hkej.com
8411.correos.es
8412.nus.edu.sg
8417.mediatemple.net
8429.arvixe.com
8464.gmo.jp
8481.flightstats.com
8522.jia.com
8540.ladbrokes.com
8546.jeep.com
8555.akc.org
8560.a1.net
8573.my-shop.ru
8586.wikimart.ru
8611.linio.com.co
8622.hellomagazine.com
8707.sfu.ca
8716.unibo.it
8741.hotnews.ro
8750.denik.cz
8758.liquidweb.com
8759.viber.com
8778.altema.jp
8833.uv.es
8939.gfk.com
8988.mingpao.com
9007.ceair.com
9017.kbs.co.kr
9020.libertatea.ro
9032.rs.gov.br
9041.onthehub.com
9058.utk.edu
9064.linkprice.com
9120.ncsoft.com
9140.shopserve.jp
9179.weatherzone.com.au
9228.b-ch.com
9252.avm.de
9271.datpiff.com
9281.mt5.com
9292.comunio.de
9357.mundogaturro.com
9376.videomore.ru
9381.artmoney.club
9426.infor.pl
9481.dynadot.com
9489.hdfclife.com
9501.sokmil.com
9518.barchart.com
9529.leroymerlin.pl
9536.resona-gr.co.jp
9540.lotteimall.com
9554.gelbeseiten.de
9575.usen.com
9588.gsn.com
9618.crowdworks.jp
9709.epost.go.kr
9748.flvs.net
9764.sina.com
9873.benchmarkemail.com
9914.warhistoryonline.com