Since 2010 I think most "famous" sites have already decided to move to mandatory SSL. I'm sure facebook have already done that, probably Twitter too.

Are there any sites left that are still vulnerable AND this tool knows about them?