education learning

corporate

English

AWSALBCORS

g_state

AWSALB

initial_referrer

lang

OptanonConsent

wuuid

logged_out_uuid

The domain name 'duolingo.com' uses the commercial generic top-level domain (.com). The second-level label 'duolingo' is 8 characters long with 4 vowels and 4 consonants. Breaking it apart gives two words: duo, lingo. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

html/94/2b/942b28f7-d766-47f1-bd21-633be14f8465_fallback.html.gz

Duolingo - The world’s most popular way to learn

html/94/2b/942b28f7-d766-47f1-bd21-633be14f8465.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'report-sample' 'nonce-w1idMycQuBau19hD2LUSRg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

a-3eppf3p597gv

reCAPTCHA

74ae53b83e6ced0e9c2674f047f961be867e814e87e9281dce5102c721036ddd

767d445947d14b5e1bd5d1b08c6670eadb5fdddcfec2030cacd736cba8d58aa0

64e515d1a49221d9eaa320bbe0c952f0e0a40ccd66a3df0392ec4903308b5f7c

Do Not Sell or Share My Personal Information

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width,initial-scale=1,user-scalable=no

viewport

robots

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

google

mobile-web-app-capable

apple-itunes-app

facebook-domain-verification

twitter:site

https://www.duolingo.com/images/facebook/duo200.png

twitter:image

Duolingo - Learn a language for free @duolingo

twitter:title

twitter:card

https://www.duolingo.com/images/facebook/duo-08523a2.jpg

learn, spanish, german, french, portuguese, italian, english, free, lessons, course, language, study, flashcards

keywords

Free, fun, and effective courses in languages and more. Learn with quick, science-based lessons personalized to you.

description

twitter:description

og:description

A8o5T4MyEkRZqLA9WeG2XTFdV5tsX2Prg85xyQ+RL1btVuybB1K/EQ+7JUsPK+J32oBMTnsoF9B4A+qTlL6efgQAAABweyJvcmlnaW4iOiJodHRwczovL2FjY291bnRzLmdvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkZlZENtQnV0dG9uTW9kZSIsImV4cGlyeSI6MTc0NDY3NTIwMCwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

AMAZON

window.duo={"detUiLanguages":["en","es","pt","it","fr","de","ja","zs","zt","ko","ru","hi","hu","tr"],"removeNativeAppBanner":false,"uiLanguage":"en","troubleshootingForumId":647,"oldWebUrlWhitelist":["^/comment/","^/design$","^/discussion$","^/topic/"]}

"use strict";(self.webpackChunk=self.webpackChunk||[]).push([[7979],{57340:(e,o,f)=>{var d=f(83141),n=f(38020);const t=f.p+"vendor/68d22534874c554b0c9ebabea379fc60.woff2",a=f.p+"fonts/a96f1b78ebf295556c0e9500cde6dd64.woff2",r=f.p+"fonts/642e24bb0295f3aee4dedcd8eecd8007.woff2",c=f.p+"fonts/9a7b142e254cc4aaae3dab3017c7ee53.woff2",w=new FontFace("din-round",window.duo.dinExperiment?`url(${r}) format("woff2")`:`url(${n}) format("woff2")`,{style:"normal",weight:"500"}),s=new FontFace("din-round",window.duo.dinExperiment?`url(${a}) format("woff2")`:`url(${d}) format("woff2")`,{style:"normal",weight:"700"}),l=new FontFace("feather",`url(${t}) format("woff2")`,{style:"normal",weight:"700"}),u=new FontFace("Noto Sans Math",`url(${c}) format("woff2")`,{style:"normal",weight:"400"});document.fonts.add(w),document.fonts.add(s),document.fonts.add(l),document.fonts.add(u),w.load(),s.load()},83141:(e,o,f)=>{e.exports=f.p+"vendor/dcf3e686284c5e7eeca4f8e200392c01.woff2"},38020:(e,o,f)=>{e.exports=f.p+"vendor/8df26391f330be315074ddd7b74b66b8.woff2"}},e=>{e(e.s=57340)}])

Duolingo

if("/errors/not-supported.html"!==window.location.pathname)for(var supportsAbortController=("AbortController"in window&&"Request"in window&&Object.hasOwnProperty.call(Request.prototype,"signal")),supportsElementAnimate=("animate"in Element.prototype),supportsES2015=function(){if("undefined"==typeof Symbol||"undefined"==typeof Proxy)return!1;try{return new Function("(a = 0) => a")(),new Function("class MyEvent extends Event{}")(),!1===new Function("return new Boolean(Symbol.match)")()?!1:(new Function("new.target")(),new Function('class ಠ_ಠ extends Array {constructor(j = "a", ...c) {const q = (({u: e}) => {return { [`s${c}`]: Symbol(j) };})({});super(j, q, ...c);}}new Promise((f) => {const a = function* (){return "𠮷".match(/./u)[0].length === 2 || true;};for (let vre of a()) {const [uw, as, he, re] = [new Set(), new WeakSet(), new Map(), new WeakMap()];break;}f(new Proxy({}, {get: (han, h) => h in han ? han[h] : "42".repeat(0o10)}));}).then(bi => new ಠ_ಠ(bi.rd));')(),!!new Function("return (a, b,) => a.padStart(5, '0') === '0000x' && Object.values(b).length === 2")()("x",{a:1,b:2}))}catch(e){return!1}}(),supportsEs2019=("flat"in Array.prototype&&"flatMap"in Array.prototype&&"fromEntries"in Object&&"trimStart"in String.prototype&&"trimEnd"in String.prototype&&"description"in Symbol.prototype),supportsIntersectionObserver=("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype&&"isIntersecting"in window.IntersectionObserverEntry.prototype),supportsWebAssembly=("WebAssembly"in window),supportsResizeObserver=("ResizeObserver"in window),features=[supportsEs2019,supportsWebAssembly,supportsAbortController,supportsElementAnimate,supportsES2015,supportsIntersectionObserver,supportsResizeObserver],i=0;i<features.length;i++)features[i]||(window.location.href="/errors/not-supported.html");window.duo.disableMonetization=/[?&]utm_source=pwa_launch/.test(window.location.search),window.duo.l10n={strings:{},contextualVariableMapping:{}},window.duo.uiLanguage=window.duo.uiLanguage||"en",window.duo.version="1.294.0",window.duo.versionHash="c855e9352e0628e365ff4f2386255cc3a723750f";var isAbc=/^\/abc/.test(window.location.pathname),HIDE_APP_SMART_BANNER_PATH=["/2022-campaigns","/share/sm","/share-direct/sm","/super","/plus","/getplus","/youtubeplus","/campaigns","/ios-super-purchase-flow","/ios-max-purchase-flow"];if(HIDE_APP_SMART_BANNER_PATH.includes(window.location.pathname))(el=document.querySelector("[name=apple-itunes-app]"))&&el.remove();else if(isAbc){var el;(el=document.querySelector("[name=apple-itunes-app]"))&&el.setAttribute("content","app-id=1440502568")}try{if(window.location.pathname.startsWith("/reset_password")&&window.location.search.includes("email=")){const e=new URLSearchParams(window.location.search);e.delete("email"),window.history.replaceState(null,"",`${window.location.pathname}?${e.toString()}`)}}catch(e){console.error("Error removing email query parameter on reset_password page",e)}

Ubuntu

Google authentication and security services

Requests	IP Address	Location	AS Autonomous System
103	3.174.45.41	United States	AS16509AMAZON-02
8	52.86.7.45	Ashburn, Virginia, United States	AS14618AMAZON-AES
7	44.220.121.109	Ashburn, Virginia, United States	AS14618AMAZON-AES
6	142.250.184.227	United States	AS15169GOOGLE
6	104.18.87.42	United States	AS13335CLOUDFLARENET
2	216.58.206.72	United States	AS15169GOOGLE
2	104.18.86.42	United States	AS13335CLOUDFLARENET
2	3.174.45.129	United States	AS16509AMAZON-02
2	99.84.152.126	United States	AS16509AMAZON-02
2	3.93.84.192	Ashburn, Virginia, United States	AS14618AMAZON-AES
141	57	-	-

Security Scan Report: duolingo.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History