Mixed Content Checker
Scans an HTTPS page for anything still loaded over plain HTTP — images, scripts, styles, frames — plus protocol-relative URLs that inherit the scheme.
About
An HTTPS page that loads some of its resources over plain HTTP is mixed content. Browsers block scripts, stylesheets and frames in that situation outright, and they upgrade or warn about images, so the page looks broken in ways that are hard to trace. This tool scans the markup for every remaining http reference.
How to use
- Enter the https address of the page.
- Submit to have the HTML source fetched and parsed.
- Fix the references listed, then rescan until none remain.
Frequently asked questions
Why do some images still load over HTTP?
Browsers auto-upgrade passive content such as images in many cases, but only when the host serves HTTPS too. If it does not, the image fails silently.
What is a protocol-relative URL?
One that starts with two slashes and takes its scheme from the page. It is safe on an HTTPS page, but it breaks the moment the page is served over HTTP.
Can this find everything?
No. It reads the page source only. Scripts that insert images or styles at runtime can still create mixed content, and those need a browser console to catch.