diff --git a/Appendix-A---Test-Sites.md b/Appendix-A---Test-Sites.md
index 069cdd9..bc175cd 100644
--- a/Appendix-A---Test-Sites.md
+++ b/Appendix-A---Test-Sites.md
@@ -54,7 +54,7 @@ These are good sources to grab information on your results in one hit, but **do
    * Article: https://robertheaton.com/2014/01/20/cookieless-user-tracking-for-douchebags/
 - [CSS Exfil Vulnerability](https://www.mike-gualtieri.com/css-exfil-vulnerability-tester) - **h**ttps://www.mike-gualtieri.com/css-exfil-vulnerability-tester
    * [CSS Keylogger with no CSP](https://no-csp-css-keylogger.badsite.io/) - **h**ttps://no-csp-css-keylogger.badsite.io/
-- [CSS History Leak](http://lcamtuf.coredump.cx/yahh/) <sup>1</sup> - **h**ttp://lcamtuf.coredump.cx/yahh/
+- [CSS History Leak](https://earthlng.github.io/testpages/visited_links.html) <sup>1</sup> - **h**ttps://earthlng.github.io/testpages/visited_links.html
 - CSS Media: disable JS, resize the browser with the tests open
    * [@media window size leak](https://demos.traudt.xyz/css/media/index.html) - **h**ttps://demos.traudt.xyz/css/media/index.html
    * [screen & inner window measurements](https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html) - **h**ttps://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
@@ -74,7 +74,7 @@ These are good sources to grab information on your results in one hit, but **do
 - [rel=noopener](https://mathiasbynens.github.io/rel-noopener/) - **h**ttps://mathiasbynens.github.io/rel-noopener/
 - [WebRTC](https://browserleaks.com/webrtc) - **h**ttps://browserleaks.com/webrtc
 
-<sup>1</sup> This test is a PoC (proof of concept). You will need `layout.css.visited_links_enabled` set as `true`. You will also need a normal window (not a Private Browsing one). The PoC only covers a handful of sites, and many of those will not "leak" as the code is checking HTTP and the site has moved to HTTPS - i.e the full URL has changed. For best results:
+<sup>1</sup> This test is a PoC (proof of concept). You will need `layout.css.visited_links_enabled` set as `true`. You will also need a normal window (not a Private Browsing one). The PoC only covers a handful of sites. For best results:
  * Open a normal window in a vanilla Firefox. Clear everything (Ctrl-Shift-Del).
- * Go to http://www.cnn.com/ and http://www.foxnews.com/
- * Go to the [test page](http://lcamtuf.coredump.cx/yahh/) and play a game (takes 30 seconds or so)
+ * Go to some of the sites in the source: e.g. https://www.cnn.com/ and https://www.foxnews.com/
+ * Go to the [test page](https://earthlng.github.io/testpages/visited_links.html) and play a game (takes 30 seconds or so)