Ubersuggest tool opens up http version of site

[b3pot6]

I was doing keyword research on https://neilpatel.com/ubersuggest/ for my domain.

When you type your keyword in they will show you on the right hand side the top 100 Google rankings for the particular keyword entered.

When my domain name shows up and I click it, it takes me to my page - however, the page that opens is the http version and not the https version.

This is strange because as far as I know everything I have done is correct in terms of SSL setup. I even checked my domain with https://www.whynopadlock.com and all checks out. I even forced the https version in my .htaccess file.

It’s not a problem on ubersuggest either because when I click on my competitors links it takes me straight to the https versions of their site. Also, when I enter my domain name into google - even the http version it only brings up the https version.

So why is it that when ubersuggest’s Google results takes me to an http version with no redirection?

Does anyone know why this might be happening?

[JuergenAuer]

Hi @b3pot6

@b3pot6

When my domain name shows up and I click it, it takes me to my page - however , the page that opens is the http version and not the https version.

This is strange because as far as I know everything I have done is correct in terms of SSL setup. I even checked my domain with https://www.whynopadlock.com and all checks out. I even forced the https version in my .htaccess file.

looks like your redirect http -> https isn't complete. But to check that, please share your domain name.

PS: Such a tool may be buggy or uses outdated data. But with correct redirects, this isn't really a problem.

[b3pot6]

Thanks for the quick reply.

Domain is morejapanplease.com

[JuergenAuer]

You have incomplete redirects. The first three standard-redirects http + non-www-> https+non-www etc. are ok.

Summary

D:\temp>download http://morejapanplease.com/ -h
Vary: User-Agent
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 617
Content-Type: text/html
Date: Sun, 23 Sep 2018 14:01:39 GMT
Location: https://morejapanplease.com/
Server: LiteSpeed

Status: 301 MovedPermanently

338,30 milliseconds
0,34 seconds

D:\temp>download http://www.morejapanplease.com/ -h
Vary: User-Agent
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 617
Content-Type: text/html
Date: Sun, 23 Sep 2018 14:01:46 GMT
Location: https://morejapanplease.com/
Server: LiteSpeed

Status: 301 MovedPermanently

366,30 milliseconds
0,37 seconds

D:\temp>download https://www.morejapanplease.com/ -h
SSL-Zertifikat is valide
Vary: User-Agent
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43"
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 617
Content-Type: text/html
Date: Sun, 23 Sep 2018 14:01:49 GMT
Location: https://morejapanplease.com/
Server: LiteSpeed

Status: 301 MovedPermanently

674,82 milliseconds
0,67 seconds

Your https is correct:

D:\temp>download https://morejapanplease.com/ -h
SSL-Zertifikat is valide
Link: https://morejapanplease.com/wp-json/; rel="https://api.w.org/",https://morejapanplease.com/; rel=shortlink
Transfer-Encoding: chunked
Vary: User-Agent
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43"
Connection: close
Accept-Ranges: bytes
Cache-Control: public, max-age=30
Content-Type: text/html; charset=UTF-8
Date: Sun, 23 Sep 2018 14:01:57 GMT
Expires: Sun, 23 Sep 2018 14:02:27 GMT
Server: LiteSpeed
X-Powered-By: W3 Total Cache/0.9.4.6.4

Status: 200 OK

821,51 milliseconds
0,82 seconds

But loading your subfolder

D:\temp>download http://morejapanplease.com/japanese-culture/ -h
Link: https://morejapanplease.com/wp-json/; rel="https://api.w.org/",https://morejapanplease.com/?p=243; rel=shortlink
Pragma: public
Transfer-Encoding: chunked
Vary: User-Agent
Connection: close
Accept-Ranges: bytes
Cache-Control: max-age=30, public, must-revalidate, proxy-revalidate
Content-Type: text/html; charset=UTF-8
Date: Sun, 23 Sep 2018 14:02:35 GMT
Expires: Sun, 23 Sep 2018 14:03:05 GMT
ETag: 9eceaa4461dcba516f52071feef7b5a2
Last-Modified: Sun, 23 Sep 2018 14:02:35 GMT
Server: LiteSpeed
X-Powered-By: W3 Total Cache/0.9.4.6.4

Status: 200 OK

541,90 milliseconds
0,54 seconds

there is no redirect to https. So if Google or another tool has old links and a new user uses this link, the user isn't redirected to https.

So find your redirect rules and change them.

Perhaps you may add a Strict Transport Security Header:

Strict-Transport-Security: max-age=31536000; includeSubDomains

[b3pot6]

It worked!

Thank you so much.