Why won't my .dev domain load without HTTPS?

You register a .dev domain, open it for the first time, and the browser refuses to connect. Your server is fine. That’s just how this TLD works.

What is HSTS preload?

Browsers ship with a built-in list of domains that may only be loaded over HTTPS: the HSTS preload list. Google added the entire .dev TLD to it. In practice http://yourname.dev doesn’t exist: the browser rewrites the URL to https:// before any request leaves your machine.

With no valid certificate, the page simply won’t load, and users don’t even get a “proceed anyway” option.

Fixing it on Hostinger

1. Go to hPanel → Security → SSL.
2. Pick your domain and install the free Let’s Encrypt certificate.
3. Repeat for every subdomain (blog., demo. and so on). They’re covered by the rule too.
4. It usually takes a few minutes. Then test in a private window.

Bonus: redirect HTTP anyway

Browsers enforce HTTPS, but tools like curl and some bots don’t. Adding this to .htaccess is a good habit:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

In short: on .dev, SSL isn’t optional. The upside is that your site is secure by default.