"Not secure" flag on Chrome for Inovado theme on new WordPress site

We’ve been having issues rooting out non https:// links in Inovado on our current site at http://www.ekitabu.com. We grep’d the site and found some http:// links deep in the theme, which were not accessible through the WordPress admin UI.

We just stood up a new WP server here http://102.133.234.0/ and are still getting a Not Secure warning. Note that we have made no changes to the site beyond installing Inovado.

Could you help us identify the http:// links and then remove them from the theme itself?

Thank you

Ticket