Mixed content checker

What is a Mixed Content Checker?

The Mixed Content Checker scans an HTTPS webpage for resources — images, scripts, stylesheets, iframes, forms, and more — that are still loaded over plain HTTP, a configuration browsers flag as mixed content.

Why Mixed Content Is a Problem

• Broken padlock — Browsers show a "not fully secure" warning or strip the padlock icon entirely when a page loads any insecure resources.
• Active vs passive risk — Insecure scripts (active mixed content) are especially dangerous since they can be tampered with in transit to inject malicious code; many browsers block these outright.
• Common after HTTPS migration — This almost always happens when a site moves to HTTPS but leaves some hardcoded http:// URLs in old content or third-party embeds.