659,120 homepages served over secure HTTPS, 4.5% of them, still pull in at least one image, script or other file over insecure HTTP. Websites outside the 10 million most visited do it at more than twice the rate of the 10,000 most visited.

Source: 659,120 Secure Homepages Still Load Files Over Insecure HTTP - Suff Digital