Mixed Content Checker
Find HTTP resources referenced by an HTTPS page — the kind that trigger browser security warnings.
About this tool — and its scope
When an HTTPS page loads a resource (an image, script, stylesheet) over plain HTTP, browsers flag
it as "mixed content" — at minimum a security warning, and for scripts/stylesheets specifically, many
browsers block the resource outright. This tool scans a page's own markup for HTTP references in
src, href, and CSS url() — the same references a browser itself
would flag.
This checks the page you request directly, not the whole site, and it identifies references in the markup rather than fetching each individual resource — a deliberate, strict scope limit rather than an open-ended crawl.
Why this matters
Mixed content is a common leftover from migrating a site to HTTPS — old hardcoded http://
links in templates, embedded widgets, or CMS content that never got updated. Passive content (images)
triggers a lesser warning; active content (scripts, stylesheets, iframes) is blocked by most browsers
entirely, which can silently break page functionality.
Related tools: