Mixed Content Detector
Detect mixed content issues where HTTP resources are loaded on HTTPS pages.
No result yet
Enter a URL to scan it for HTTP resources on HTTPS pages.
What this check means
Mixed content happens when an HTTPS page loads images, scripts, styles or frames over plain HTTP. Browsers block the riskier cases outright and mark the rest, which breaks pages and undermines the padlock your visitors expect.
Common issues
- Hard-coded http:// URLs — old templates and content pasted from other sites are the usual sources.
- Third-party embeds — widgets and trackers that only serve HTTP no longer work on secure pages.
- CORS-blocked scans — some sites stop this tool reading their HTML; use your browser's developer console for a definitive local check.
How to fix them
Change references to https:// (or protocol-relative URLs), replace embeds that cannot serve HTTPS, and consider a
Content-Security-Policy: upgrade-insecure-requests header while you migrate.
Related tools
Check the page's headers and redirects with the HTTP tester, and confirm your HTTPS set-up with the TLS tester.