other

suspicious phishing

malicious

e-commerce

English

Within the commercial generic top-level domain (.com), 'ios-api-2.duolingo.com' is registered, featuring subdomain 'ios-api-2'. Its registrable label 'duolingo' stretches across 8 characters holding 4 vowels versus four consonants. Breaking it apart gives two words: duo, lingo. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

html/1c/62/1c6210fe-04b5-4ced-a494-b1f458bb4082_fallback.html.gz

ios-api-2.duolingo.com

846af7f3b9efe192673dec75c2cc12e20c42d1c53beb22ed255b3f610064224a

d921d6f968e6a183729d521eb5d7df6e9cf7b4080e3b4ec74ff04cced1956a2f

color-scheme

theme-color

width=device-width, initial-scale=1.0,
                                 maximum-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon Registrar, Inc.

DUOLINGO.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z

// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
function assert(value,message){if(value){return}throw new

var loadTimeDataRaw = {"details":"Details","errorCode":"HTTP ERROR 401","fontfamily":"\"sans\", Arial, sans-serif","fontfamilyMd":"Roboto, \"sans\", Arial, sans-serif","fontsize":"75%","heading":{"msg":"This page isn’t working"},"hideDetails":"Hide details","iconClass":"icon-generic","language":"en","reloadButton":{"msg":"Reload","reloadUrl":"https://ios-api-2.duolingo.com/"},"suggestionsDetails":[],"suggestionsSummaryList":[],"summary":{"msg":"If the problem continues, contact the site owner."},"textdirection":"ltr","title":"ios-api-2.duolingo.com"};

✅ Low Risk - https://ios-api-2.duolingo.com/

Requests	IP Address	Location	AS Autonomous System
1	34.230.142.187	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	54.196.108.60	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	52.4.181.128	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	98.89.255.226	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	18.213.141.127	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	13.216.39.143	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	44.220.121.109	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	34.204.101.137	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	3.234.93.52	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	9	-	-

Security Scan Report: ios-api-2.duolingo.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History