Stay away from secure sites until you are sure they have been patched.
The following email services are patched and can be used.
Hotmail.com,outlook.con etc at Microsoft
Facebook.com (but not every Facebook app or game.
Primesouthbank.com is OK to use as the Heartbleed is blocked by the ISP
Go to the bank or use their web to check your account.
Do NOT use non bank owned ATM's to withdraw money of check your ballance.
Be aware that some ATM's at banks are NOT operated by the bank. Don't use them.
Before using any other site check it with the following tool:
Type in a site name like Twitter.com then hit Go.
If it is red, do not use it
If it is green read the green message, It will tell if the site has been patched or simply had some functions turned off as a way of preventing the heartbleed.