Mixed Content Checker

Find HTTP resources loading on an HTTPS page, the kind that trigger browser warnings or get silently blocked. Free, no account needed.

An HTTPS page with one insecure HTTP resourcehttps://example.comscript.js (https)banner.jpg (http)insecure requestcan be intercepted

3 free checks per day. No signup needed.

What gets scanned

This tool fetches the page and scans its HTML for the common resource-loading tags, images, scripts, stylesheets, iframes, video, audio, and embeds, that reference a plain http:// URL. It's a single-page scan of what's directly in the HTML, not a full crawl, and it doesn't inspect CSS url() references or scripts that construct URLs at runtime.

Frequently asked

What is mixed content?

When an HTTPS page loads a resource over plain HTTP. Browsers block the highest-risk kinds outright and warn on lower-risk ones, since an HTTP resource can be intercepted or altered in transit even on an otherwise secure page.

Why does mixed content happen on a site that's already using HTTPS?

Usually leftover hardcoded http:// URLs from before the site migrated, or a third-party embed, ad, or old CDN link that was never updated to https://.