Mixed Content Checker
Find http:// references on an https:// page, split by what browsers block.
About this tool
Scans an https:// page for resources referenced over plain http:// and separates the ones browsers block from the ones they merely downgrade.
That split is the whole point. Active content — scripts, stylesheets, frames — is blocked outright, because a script fetched over http can rewrite the page around it. Passive content, mostly images, loads with a warning and costs you the padlock. The first breaks your site; the second only looks bad, and they need different urgency.
Common questions
Why does my padlock have a warning?
Something on the page loads over http. Even one image is enough. The browser console names the exact resource; this tool finds them in the HTML without you opening dev tools.
What is the difference between blocked and downgraded?
Active content — scripts, stylesheets, frames, fetch calls — is blocked, so features simply stop working. Passive content like images loads anyway with a warning. Fix the active ones first; they are breaking something.
How do I fix it?
Change the reference to https:// where the resource supports it, or use a protocol-relative path. If a third party has no https version, replace it — that is the honest answer, however unwelcome.
Does this find everything?
No, and it says so. It reads the HTML as delivered. Resources injected later by JavaScript are invisible to it, so a clean report here plus a clean browser console is the real check.