Mixed Content Checker
Detect insecure resources that browsers may block or downgrade before they break page functionality and trust.
Inspect mixed HTTP resources on HTTPS pages
It inventories page resources and reports absolute HTTP images, scripts, stylesheets, frames, media and links embedded in the secure page.
Interpret the result
Replace each insecure reference with a verified HTTPS URL or remove the dependency, then retest the rendered production page.
Prioritize fixes
The static scan does not execute JavaScript, inspect every imported stylesheet or prove that an HTTP resource was loaded by the browser.
How to interpret mixed HTTP resources on HTTPS pages
It inventories page resources and reports absolute HTTP images, scripts, stylesheets, frames, media and links embedded in the secure page. The static scan does not execute JavaScript, inspect every imported stylesheet or prove that an HTTP resource was loaded by the browser.
What the tool evaluates
It inventories page resources and reports absolute HTTP images, scripts, stylesheets, frames, media and links embedded in the secure page.
- It inventories page resources and reports absolute HTTP images, scripts, stylesheets, frames, media and links embedded in the secure page.
- Replace each insecure reference with a verified HTTPS URL or remove the dependency, then retest the rendered production page.
- The static scan does not execute JavaScript, inspect every imported stylesheet or prove that an HTTP resource was loaded by the browser.
Problems and next steps
Replace each insecure reference with a verified HTTPS URL or remove the dependency, then retest the rendered production page.
Frequently asked questions
What does this tool check?
It inventories page resources and reports absolute HTTP images, scripts, stylesheets, frames, media and links embedded in the secure page.
How should I use the result?
Replace each insecure reference with a verified HTTPS URL or remove the dependency, then retest the rendered production page.
What are the limits?
The static scan does not execute JavaScript, inspect every imported stylesheet or prove that an HTTP resource was loaded by the browser.
Related URL tools and guides
Security Headers Checker
Check CSP, HSTS, frame, content type, referrer and permissions headers.
Learn more →URL Link Extractor
Extract unique HTTP links and separate internal, external and nofollow references.
Learn more →HTTP Status Code Checker
Check live 200, 301, 404 and 500 responses for any public URL.
Learn more →