Checks

Passive mixed content

This HTTPS page's HTML loads an image, stylesheet, or media file over HTTP.

Why it matters

Those responses can be tampered with on the network. Browsers may still display them.

What to do

Point images, styles, and media at HTTPS URLs.

Reference

HTTPS pages must not load scripts, frames, or other subresources over HTTP.

MDN — Mixed content