The 500 Most Popular Websites, With a Method You Can Check

Every "top 500 websites" list you will find has the same two problems: no stated source and no date. Some rank by backlink counts or domain authority, which measure how many sites link to a domain rather than how many people visit it. Others are copies of a list that was stale when it was copied.

This one names its source, its date, and its method, and it tells you where the ranking is misleading. The data is the Tranco list generated on 4 November 2026, which aggregates 30 days of traffic data (6 October to 4 November 2026) from five independent providers. If you want to check any row, you can regenerate the list yourself.

The Method, Stated Up Front

Tranco is a research-grade ranking built for reproducibility, and it works by combining five separate popularity datasets rather than trusting any one of them:

• Chrome User Experience Report, real Chrome page loads
• Cloudflare Radar, DNS query volume
• Farsight, passive DNS observation
• Majestic, a link-based ranking
• Cisco Umbrella, DNS resolver traffic

Those are combined using the Dowdall rule, which rewards domains that appear high across several lists and penalises a domain that is high in only one. The list is filtered to pay-level domains, so bbc.co.uk counts as one domain rather than being split, and a 30-day averaging window stops a single viral day from distorting the order.

That design matters because the alternative approaches fail in predictable ways. A pure link-count ranking promotes old, heavily-linked domains and domain-parking services. A single-provider DNS ranking promotes whatever that provider's user base happens to query. Combining five reduces both effects without eliminating them, which brings us to the part most lists skip.

What This Ranking Gets Wrong

A list built from network traffic measures domains your devices talk to, which is not the same as websites you choose to visit. Four artifacts show up clearly in the top 50.

Infrastructure outranks destinations. gstatic.com at 7, akamai.net at 13 and fbcdn.net at 6 are content delivery and asset domains. You have never typed one into a browser, and your devices contact them thousands of times a day. They are correctly ranked and they are not websites in the sense you mean.

Internet-connected cameras distort the top ten. ezviz7.com at 3 and hicloudcam.com at 11 are cloud endpoints for consumer security cameras. Millions of devices phoning home on a fixed interval generate enormous query volume from a small number of households.

At least one entry is machine-generated. Rank 47 is w2rt6byl5nf1opmc-a.com. That string is characteristic of a domain generation algorithm, the technique malware uses to find its command server without a fixed address. It ranks because infected machines query it relentlessly, which is a genuine finding about the internet rather than a recommendation.

Some owners are not publicly obvious. triplinkintl.com (19), gwfb.net (22), shiabank.com (30) and lsrelayaccess.com (39) show the traffic signature of device or telemetry endpoints, and we are not going to assign them an owner we cannot verify. Other lists would fill that cell with a confident guess.

None of this is a reason to distrust the ranking. It is a reason to read it as what it is, and to use the type column below rather than the rank alone.

The Top 50, Annotated

#	Domain	What it is	Type
1	google.com	Search	Consumer
2	cloudflare.com	CDN, DNS and security	Infrastructure
3	ezviz7.com	Consumer security camera cloud	Device
4	amazonaws.com	Amazon Web Services	Infrastructure
5	facebook.com	Social network	Consumer
6	fbcdn.net	Meta's content delivery network	Infrastructure
7	gstatic.com	Google static asset hosting	Infrastructure
8	googleapis.com	Google API endpoints	Infrastructure
9	microsoft.com	Software and corporate	Consumer
10	youtube.com	Video	Consumer
11	hicloudcam.com	Security camera cloud	Device
12	apple.com	Hardware, software, services	Consumer
13	akamai.net	Content delivery network	Infrastructure
14	instagram.com	Social network	Consumer
15	akamaiedge.net	Akamai edge delivery	Infrastructure
16	twitter.com	Social network, legacy domain	Consumer
17	linkedin.com	Professional network	Consumer
18	azure.com	Microsoft cloud platform	Infrastructure
19	triplinkintl.com	Device or telemetry endpoint	Unverified
20	mail.ru	Email and portal	Consumer
21	akadns.net	Akamai DNS	Infrastructure
22	gwfb.net	Device or telemetry endpoint	Unverified
23	domaincontrol.com	GoDaddy DNS	Infrastructure
24	googlevideo.com	YouTube video delivery	Infrastructure
25	googletagmanager.com	Tag and script delivery	Ads and analytics
26	gtld-servers.net	Top-level domain name servers	Infrastructure
27	appsflyersdk.com	Mobile attribution SDK	Ads and analytics
28	cloudfront.net	Amazon CDN	Infrastructure
29	amazon.com	Ecommerce	Consumer
30	shiabank.com	Unclear, traffic-pattern entry	Unverified
31	dzen.ru	Content platform	Consumer
32	office.com	Microsoft productivity suite	Consumer
33	live.com	Microsoft accounts and mail	Consumer
34	github.com	Code hosting	Consumer
35	sharepoint.com	Microsoft collaboration	Consumer
36	aaplimg.com	Apple asset delivery	Infrastructure
37	trafficmanager.net	Azure traffic routing	Infrastructure
38	wikipedia.org	Encyclopedia	Consumer
39	lsrelayaccess.com	Relay or telemetry endpoint	Unverified
40	fastly.net	Content delivery network	Infrastructure
41	cloud.microsoft	Microsoft cloud services	Infrastructure
42	apple-dns.net	Apple DNS	Infrastructure
43	netflix.com	Streaming	Consumer
44	whatsapp.net	Messaging infrastructure	Infrastructure
45	office.net	Microsoft service endpoints	Infrastructure
46	bing.com	Search	Consumer
47	w2rt6byl5nf1opmc-a.com	Algorithmically generated domain	Malicious or automated
48	x.com	Social network, current domain	Consumer
49	googleusercontent.com	Google-hosted user content	Infrastructure
50	doubleclick.net	Ad serving	Ads and analytics

Of those fifty, roughly twenty are sites a person would describe as a website. That ratio is the most useful single fact on this page.

Three Findings Worth More Than the List

Twitter still beats X. twitter.com sits at 16 and x.com at 48. Years after the rename, the old domain carries more traffic than the new one, because embedded links, bookmarks, apps and muscle memory all outlive a rebrand. Any business that has changed domain should read that as a warning about how long a redirect has to live.

The AI sites are smaller than the discourse suggests. chatgpt.com ranks 113 and openai.com 129. Both are inside the top 150 globally, which is a remarkable position for products this young, and both sit well below Wikipedia at 38. The strategic implication is not that AI traffic can be ignored. It is that the gap between how much AI search is discussed and how much of total web traffic it currently represents remains large, which is why AI engine optimization is an addition to search strategy rather than a replacement for it.

Microsoft occupies more of the top 50 than any other company. Counting microsoft.com, azure.com, office.com, live.com, sharepoint.com, trafficmanager.net, cloud.microsoft and office.net, eight of the top 50 are Microsoft properties. Google holds a comparable cluster. Concentration at the top of the web is a story about a handful of owners, not a thousand sites.

The Regional Skew, Measured

Any global ranking inherits the geography of whoever collected the data, and this one is worth quantifying rather than hand-waving about.

Across all 500 domains, the top-level domain distribution runs: 302 .com, 76 .net, 26 .org, 18 .ru, 9 .io, 6 .me, then a long tail of country codes in single figures. Only three .cn domains appear in the entire list.

Set that against what is present. Baidu ranks 86 and QQ 91, both inside the top 100. Weibo is 325, Bilibili 351, Taobao 457. Absent from the top 500 entirely: Tmall, JD, Alipay and Douyin, each of which serves hundreds of millions of users.

Russian domains outnumber Chinese ones six to one here, which is not a claim about the relative size of those internets. It is a measurement of the data sources. Four of the five providers draw on Western browsers, resolvers and crawlers, so an internet that largely runs inside Chinese apps and resolvers is systematically under-observed, while Russian web use, which happens in ordinary browsers, is captured normally.

The practical lesson generalises past this list. Every traffic estimate you will ever read, including the ones in your own analytics, is shaped by what the measuring instrument can see. The right question about a ranking is never just "how big is this number" but "who was counted".

Ranks 51 to 500

Domains only, in rank order, from the same dataset.

#	Domain	#	Domain	#	Domain
51	youtu.be	52	pv-cdn.net	53	googlesyndication.com
54	pinterest.com	55	icloud.com	56	windows.net
57	gandi.net	58	cloudflare.net	59	myfritz.net
60	goo.gl	61	adobe.com	62	microsoftonline.com
63	tiktok.com	64	zoom.us	65	h264.io
66	whatsapp.com	67	wordpress.org	68	windowsupdate.com
69	googledomains.com	70	yahoo.com	71	gvt1.com
72	wa.me	73	skype.com	74	edgekey.net
75	digicert.com	76	tiktokcdn.com	77	spotify.com
78	opera.com	79	roblox.com	80	a2z.com
81	b-cdn.net	82	amazonvideo.com	83	workers.dev
84	tiktokv.com	85	epicgames.com	86	baidu.com
87	ntp.org	88	vimeo.com	89	blogspot.com
90	3gppnetwork.org	91	qq.com	92	mozilla.org
93	msn.com	94	nginx.org	95	akam.net
96	aws.dev	97	yandex.net	98	f5.com
99	wordpress.com	100	t.me	101	cdn77.org
102	dotaplabs.net	103	sentry.io	104	nginx.com
105	lencr.org	106	virginm.net	107	reddit.com
108	edgesuite.net	109	2mdn.net	110	ui.com
111	intuit.com	112	europa.eu	113	chatgpt.com
114	cdninstagram.com	115	t-online.de	116	yandex.ru
117	gvt2.com	118	bit.ly	119	aliyuncs.com
120	root-servers.net	121	ipify.org	122	samsung.com
123	fastly-edge.com	124	yccdn.ru	125	amazon.dev
126	registrar-servers.com	127	azurefd.net	128	office365.com
129	openai.com	130	okcdn.ru	131	adobe.io
132	android.com	133	dropbox.com	134	outlook.com
135	github.io	136	ytimg.com	137	nih.gov
138	cloudflare-dns.com	139	skybridge.click	140	webex.com
141	akamaized.net	142	windows.com	143	nflxso.net
144	apache.org	145	static.microsoft	146	nic.ru
147	discord.gg	148	dns-parking.com	149	supertms.com
150	tm-azurefd.net	151	vk.ru	152	duckdns.org
153	archive.org	154	forms.gle	155	tumblr.com
156	azurewebsites.net	157	snapchat.com	158	crashlytics.com
159	dnsowl.com	160	vk.com	161	godaddy.com
162	nytimes.com	163	spo-msedge.net	164	jomodns.com
165	telegram.org	166	gravatar.com	167	ubuntu.com
168	reg.ru	169	amazon-adsystem.com	170	trbcdn.net
171	shopify.com	172	samsungcloud.com	173	telekom.net
174	ax-msedge.net	175	paypal.com	176	google-analytics.com
177	example.com	178	kaspersky.com	179	pages.dev
180	astrumu.io	181	scorecardresearch.com	182	tbcache.com
183	flickr.com	184	meraki.com	185	ksyuncdn.com
186	nflximg.com	187	discord.com	188	w3.org
189	creativecommons.org	190	comcast.net	191	awswaf.com
192	cnn.com	193	ebay.com	194	soundcloud.com
195	unity3d.com	196	macromedia.com	197	pki.goog
198	quickconnect.to	199	theguardian.com	200	hichina.com
201	afternic.com	202	forter.com	203	youtube-nocookie.com
204	medium.com	205	stripe.com	206	firefox-portal-detection.com
207	mts.ru	208	vkuserphoto.ru	209	doi.org
210	msedge.net	211	omtrdc.net	212	iiko.it
213	mtgglobals.com	214	skyhigh.cloud	215	oracle.com
216	azureedge.net	217	ttdns2.com	218	app-measurement.com
219	hcaptcha.com	220	bybanking.com	221	bbc.com
222	criteo.com	223	publicnode.com	224	licdn.com
225	cdngslb.com	226	wikimedia.org	227	xiaomi.com
228	forbes.com	229	ailawandorder.com	230	weather.com
231	twitch.tv	232	researchgate.net	233	roku.com
234	sciencedirect.com	235	mit.edu	236	rbxcdn.com
237	applovin.com	238	googletagservices.com	239	nist.gov
240	namecheap.com	241	bbc.co.uk	242	amplitude.com
243	cpanel.net	244	shifen.com	245	msftconnecttest.com
246	t.co	247	cisco.com	248	playstation.net
249	wsdvs.com	250	sourceforge.net	251	adtrafficquality.google
252	aliyuncsslbintl.com	253	bytefcdn-oversea.com	254	dnsmadeeasy.com
255	yandexcloud.net	256	icanhazip.com	257	name-services.com
258	alibabadns.com	259	sfx.ms	260	hubspot.com
261	avcdn.net	262	brave.com	263	imdb.com
264	linktr.ee	265	cdn-apple.com	266	vedcdnlb.com
267	alidns.com	268	namebrightdns.com	269	who.int
270	googleblog.com	271	mybluehost.me	272	akamaihd.net
273	wixsite.com	274	geobasket.ru	275	ttvnw.net
276	ozon.ru	277	googleadservices.com	278	xcal.tv
279	ibm.com	280	arubanetworks.com	281	datadoghq.com
282	reuters.com	283	hp.com	284	demdex.net
285	launchpad.net	286	salesforce.com	287	canva.com
288	booking.com	289	telegram.me	290	userapi.com
291	app-analytics-services.com	292	tinyurl.com	293	www.gov.uk
294	launchdarkly.com	295	nature.com	296	myshopify.com
297	steampowered.com	298	slack.com	299	archive.ph
300	media-amazon.com	301	ggpht.com	302	gamepass.com
303	tiktokcdn-us.com	304	alibaba.com	305	springer.com
306	grammarly.com	307	byteoversea.net	308	jsdelivr.net
309	miui.com	310	manulife-sinochem.com	311	wac-msedge.net
312	msftncsi.com	313	online-metrix.net	314	cloudflareinsights.com
315	avast.com	316	crcdn.pro	317	ip-api.com
318	douyincdn.com	319	vungle.com	320	centinel-analytica.com
321	wiley.com	322	debian.org	323	heytapmobile.com
324	anthropic.com	325	weibo.com	326	onelink.me
327	steamserver.net	328	harvard.edu	329	autodesk.com
330	telecid.ru	331	amazon.co.uk	332	rubiconproject.com
333	ok.ru	334	etsy.com	335	archive.is
336	pubmatic.com	337	zendesk.com	338	casalemedia.com
339	imcmdb.net	340	gmail.com	341	volcfcdndvs.com
342	vercel-dns-016.com	343	unisys.com	344	mi.com
345	clarity.ms	346	spov-msedge.net	347	php.net
348	smartadserver.com	349	naver.com	350	espn.com
351	bilibili.com	352	ea.com	353	nflxvideo.net
354	trustpilot.com	355	browser-intake-datadoghq.com	356	gnu.org
357	branch.io	358	tp-link.com	359	weebly.com
360	dell.com	361	nvidia.com	362	tradingview.com
363	checkpoint.com	364	aliyun.com	365	cdc.gov
366	paloaltonetworks.com	367	dotomi.com	368	grammarly.io
369	un.org	370	plex.direct	371	cm.com
372	worldnic.com	373	wsj.com	374	google.cn
375	cdnbuild.net	376	okta.com	377	gitlab.com
378	amazon.de	379	allawnos.com	380	stanford.edu
381	nasa.gov	382	dns.google	383	wps.com
384	issuu.com	385	bsky.app	386	opendns.com
387	myhuaweicloud.com	388	shopifysvc.com	389	globo.com
390	on.aws	391	netease.com	392	bloomberg.com
393	name.com	394	xboxlive.com	395	washingtonpost.com
396	go.com	397	live-video.net	398	tiktokv.us
399	adnxs.com	400	charter.net	401	plesk.com
402	cookiedatabase.org	403	samsungcloudsolution.com	404	dynatrace.com
405	githubusercontent.com	406	amazontrust.com	407	elasticbeanstalk.com
408	awsglobalaccelerator.com	409	ripn.net	410	atlassian.net
411	ibyteimg.com	412	spaceweb.pro	413	spotifycdn.com
414	claude.ai	415	yandex.com	416	capcutapi.com
417	scdn.co	418	impervadns.net	419	calendly.com
420	firetvcaptiveportal.com	421	chatgpt.site	422	sberbank.ru
423	duckduckgo.com	424	adobe.net	425	163.com
426	substack.com	427	line.me	428	vkuser.net
429	gcdn.co	430	indeed.com	431	aol.com
432	expireddomains.com	433	unsplash.com	434	steamcommunity.com
435	temu.com	436	nr-data.net	437	kwai-pro.com
438	tiktokcdn-eu.com	439	mangosip.ru	440	telekom.de
441	tencent-cloud.net	442	tiktokv.eu	443	heytapdl.com
444	dailymotion.com	445	beian.gov.cn	446	drom.ru
447	netcraze.io	448	netangels.ru	449	tiktokpangle.us
450	statsigapi.net	451	intel.com	452	gandi-ns.fr
453	hostgator.com	454	arxiv.org	455	myqcloud.com
456	bluehost.com	457	taobao.com	458	dropcatch.com
459	eye4.cn	460	adobedc.net	461	g.page
462	yahoo.co.jp	463	lijit.com	464	vercel-dns-017.com
465	pixabay.com	466	pushy.io	467	run.app
468	featureassets.org	469	aliexpress.com	470	duolingo.com
471	mcafee.com	472	prodregistryv2.org	473	speedtest.net
474	withgoogle.com	475	inmobi.com	476	twimg.com
477	huawei.com	478	kaspersky-labs.com	479	ampproject.org
480	businessinsider.com	481	shein.com	482	azure-dns.com
483	walmart.com	484	cnbc.com	485	kwai.net
486	goodreads.com	487	wp.com	488	alicdn.com
489	dual-s-msedge.net	490	facebook.net	491	ietf.org
492	trendmicro.com	493	amazon.co.jp	494	ui-dns.com
495	mzstatic.com	496	scribd.com	497	fandom.com
498	nexthink.cloud	499	bx-msedge.net	500	nmrodam.com

Why Backlink-Based "Popularity" Lists Mislead

Several widely circulated top-500 lists rank by linking root domains or a domain authority score. Both are link metrics. They answer "how many sites reference this domain", which correlates with popularity and is not a measure of it.

Three failure modes follow predictably. Domain marketplaces and parking services rank highly, because parked pages accumulate links at scale. Hundreds of entries tie on the same authority score, leaving their relative order arbitrary. And newer sites are systematically understated, which is why a link-ranked list can omit a site like Reddit entirely while this traffic-based list places it at 107.

If a list does not tell you its metric, assume it is link-based, and treat the word "popular" in its title as decoration. The distinction between link authority and audience is the same one that trips up site owners reading their own Search Console data, where impressions and links tell you different things about the same page.

How to Actually Use This

For most businesses the ranking is context rather than a to-do list. Three uses hold up.

Benchmarking your own scale honestly. If rank 500 in the world is a domain most people have never heard of, the gap between your traffic and a realistic target is smaller than it feels.

Reading the infrastructure rows as a performance checklist. Your site almost certainly loads assets from several domains in this top 50, and every one of them is a third-party dependency with its own latency and failure mode. That is the practical content of a technical SEO audit.

Spotting the tracking load. googletagmanager.com, doubleclick.net and appsflyersdk.com rank where they do because they are embedded nearly everywhere, including, probably, on your site more times than you intended.

Frequently Asked Questions

What is the most popular website in the world? google.com, on this dataset and on every credible alternative method.

Where does the data come from? The Tranco list generated 4 November 2026, combining Chrome User Experience Report, Cloudflare Radar, Farsight, Majestic and Cisco Umbrella over the 30 days to 4 November 2026.

Why are domains like gstatic.com and akamai.net so high? They deliver assets for other sites. Your devices contact them constantly without you visiting them, and a traffic-based ranking counts that.

Why is twitter.com ranked above x.com? Old links, bookmarks and embeds keep resolving to the original domain years after a rename.

Is this the same as a list of most-visited websites? Close but not identical. This measures domain traffic including machine-to-machine requests, so infrastructure appears alongside destinations. Filter by the type column for the destinations.

How often does this change? The underlying list regenerates daily, and the top 50 is fairly stable month to month. We will refresh this page and update the date when we do.

Why 500 and not 1,000? Beyond a few hundred, a global ranking is dominated by regional portals and infrastructure, and the marginal value of each additional row falls sharply.

What to Do First

Take one thing from this page rather than the whole list. Open your own site in a browser's network tab and count how many of these top 50 domains it contacts. Most sites touch between six and fifteen, and most owners guess low by half. Each one is a dependency you chose, or that a plugin chose for you.

Our SEO service starts from that kind of measurement, because the gap between what a site owner believes their site does and what it actually requests is where most performance problems live.

Want to know what your site is actually loading, and what it costs you?

A Free Visibility Audit covers your third-party request load, your Core Web Vitals field data, and where your technical setup is holding back pages that should already be ranking.

Get a Free Growth Audit →

---

Related reading: The Complete Guide to Technical SEO | What Is Google Search Console | AI Engine Optimization Guide