education learning

corporate

English

g_state

OptanonConsent

initial_referrer

lang

wuuid

logged_out_uuid

Domain 'ios-api-cf.duolingo.com' uses the commercial generic top-level domain (.com) and includes subdomain 'ios-api-cf'. Count 8 characters in 'duolingo' split between 4 vowels and 4 consonants. Splitting it apart reveals 2 words: duo, lingo. Median word length is four characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'report-sample' 'nonce-Zw9QAeRb9jPG4ZebRUNQ3Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

a-uwspmwxglhuc

reCAPTCHA

c4fd4e7b9ac29a13306e32d94c695a34571b1bd0120c1bf693e86823d8998f1a

99b98bcda0bd41f0c67dca41a5354950c5ad61c3f1d6e9e56f25299e54a275f2

d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768

c48e27e3e6dcdcb122726f575736a32398d126f61f506427a2b26c900009a75d

20335701d73d948be4e46c711de18a7fc971be056bc0dc2e43c6d806d631e6ef

1106a7c748ee1e5d4a91c4fa46fb911b4333c777ca93488ba180ca25e411cbbf

7cc6965594559c5ab2892388e0fe61e4e489280acf0ad5dac7849a66877c1c33

b7508a7f7c613b46f8be49556d779d68e174ed446827f922cb3dac7b7f289f68

15b6a908175a104279e17f2720e3128ba093222b0c7ae1e1fa50ffb1b2104419

0e3624f0dff9bb421d32062daa8637c47bcc6d146db01f0345f0e7cd3497c5e9

9179ef7271b73ff2bda6115717edd59c35b5516a59e75a84b80210f05657cdec

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

5c5a549a211a4f06ce4c8f4db04de9cbe176d7838f6bca2f4fd7ffa322eb1126

f2d4ab9d2dff0e7dce8e81c2f13c53db9fdacb6c16445e7188176e06ca638317

60b210d44bbbc47d3b215ee165e57a5694b9de7955ab8ded8c45c66a455cff3f

fbdef10f82e07b58c71b0f94e5f9ece510dd7ba228905176df085e1e31550ac4

4debbd354eb371ae1dfcb9c7058122f28fa4acfe3e9ee03cf585344cb1d3a7d6

05c58c759cab8d50d5e7f9d3b2faedcc0dd45fa3fb50899a224363a1dea93605

783dc561fa32b7b11b2745eccba8923d14804cc53ae458dbb9b9f445b9330b58

Do Not Sell or Share My Personal Information

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width,initial-scale=1,user-scalable=no

viewport

robots

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

google

mobile-web-app-capable

apple-itunes-app

facebook-domain-verification

twitter:site

https://www.duolingo.com/images/facebook/duo200.png

twitter:image

Duolingo - Learn a language for free @duolingo

twitter:title

twitter:card

https://www.duolingo.com/images/facebook/duo-08523a2.jpg

learn, spanish, german, french, portuguese, italian, english, free, lessons, course, language, study, flashcards

keywords

Free, fun, and effective courses in languages and more. Learn with quick, science-based lessons personalized to you.

description

twitter:description

og:description

A8o5T4MyEkRZqLA9WeG2XTFdV5tsX2Prg85xyQ+RL1btVuybB1K/EQ+7JUsPK+J32oBMTnsoF9B4A+qTlL6efgQAAABweyJvcmlnaW4iOiJodHRwczovL2FjY291bnRzLmdvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkZlZENtQnV0dG9uTW9kZSIsImV4cGlyeSI6MTc0NDY3NTIwMCwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

script-src 'report-sample' 'nonce-I3GtqGriQp9LTDbfHEOm6w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/38fac9d5b82543fc4729580d18ff2d3d

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD

window.duo={"detUiLanguages":["en","es","pt","it","fr","de","ja","zs","zt","ko","ru","hi","hu","tr"],"removeNativeAppBanner":false,"uiLanguage":"en","troubleshootingForumId":647,"oldWebUrlWhitelist":["^/comment/","^/design$","^/discussion$","^/topic/"]}

"use strict";(self.webpackChunk=self.webpackChunk||[]).push([[7979],{89788:(e,o,f)=>{var t=f(83141),a=f(38020);const n=f.p+"vendor/68d22534874c554b0c9ebabea379fc60.woff2",d=f.p+"fonts/9a7b142e254cc4aaae3dab3017c7ee53.woff2",c=new FontFace("din-round",`url(${a}) format("woff2")`,{style:"normal",weight:"500"}),r=new FontFace("din-round",`url(${t}) format("woff2")`,{style:"normal",weight:"700"}),s=new FontFace("feather",`url(${n}) format("woff2")`,{style:"normal",weight:"700"}),w=new FontFace("Noto Sans Math",`url(${d}) format("woff2")`,{style:"normal",weight:"400"});document.fonts.add(c),document.fonts.add(r),document.fonts.add(s),document.fonts.add(w),c.load(),r.load()},83141:(e,o,f)=>{e.exports=f.p+"vendor/dcf3e686284c5e7eeca4f8e200392c01.woff2"},38020:(e,o,f)=>{e.exports=f.p+"vendor/8df26391f330be315074ddd7b74b66b8.woff2"}},e=>{e(e.s=89788)}])

Duolingo

if("/errors/not-supported.html"!==window.location.pathname)for(var supportsAbortController=("AbortController"in window&&"Request"in window&&Object.hasOwnProperty.call(Request.prototype,"signal")),supportsElementAnimate=("animate"in Element.prototype),supportsES2015=function(){if("undefined"==typeof Symbol||"undefined"==typeof Proxy)return!1;try{return new Function("(a = 0) => a")(),new Function("class MyEvent extends Event{}")(),!1===new Function("return new Boolean(Symbol.match)")()?!1:(new Function("new.target")(),new Function('class ಠ_ಠ extends Array {constructor(j = "a", ...c) {const q = (({u: e}) => {return { [`s${c}`]: Symbol(j) };})({});super(j, q, ...c);}}new Promise((f) => {const a = function* (){return "𠮷".match(/./u)[0].length === 2 || true;};for (let vre of a()) {const [uw, as, he, re] = [new Set(), new WeakSet(), new Map(), new WeakMap()];break;}f(new Proxy({}, {get: (han, h) => h in han ? han[h] : "42".repeat(0o10)}));}).then(bi => new ಠ_ಠ(bi.rd));')(),!!new Function("return (a, b,) => a.padStart(5, '0') === '0000x' && Object.values(b).length === 2")()("x",{a:1,b:2}))}catch(e){return!1}}(),supportsEs2019=("flat"in Array.prototype&&"flatMap"in Array.prototype&&"fromEntries"in Object&&"trimStart"in String.prototype&&"trimEnd"in String.prototype&&"description"in Symbol.prototype),supportsIntersectionObserver=("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype&&"isIntersecting"in window.IntersectionObserverEntry.prototype),supportsWebAssembly=("WebAssembly"in window),supportsResizeObserver=("ResizeObserver"in window),features=[supportsEs2019,supportsWebAssembly,supportsAbortController,supportsElementAnimate,supportsES2015,supportsIntersectionObserver,supportsResizeObserver],i=0;i<features.length;i++)features[i]||(window.location.href="/errors/not-supported.html");window.duo.disableMonetization=/[?&]utm_source=pwa_launch/.test(window.location.search),window.duo.l10n={strings:{},contextualVariableMapping:{}},window.duo.uiLanguage=window.duo.uiLanguage||"en",window.duo.version="1.293.0",window.duo.versionHash="78d1a19b0433afc746e9e859b82ad4b40fee4e9a";var isAbc=/^\/abc/.test(window.location.pathname),HIDE_APP_SMART_BANNER_PATH=["/2022-campaigns","/share/sm","/share-direct/sm","/super","/plus","/getplus","/youtubeplus","/campaigns","/ios-super-purchase-flow","/ios-max-purchase-flow"];if(HIDE_APP_SMART_BANNER_PATH.includes(window.location.pathname))(el=document.querySelector("[name=apple-itunes-app]"))&&el.remove();else if(isAbc){var el;(el=document.querySelector("[name=apple-itunes-app]"))&&el.setAttribute("content","app-id=1440502568")}try{if(window.location.pathname.startsWith("/reset_password")&&window.location.search.includes("email=")){const e=new URLSearchParams(window.location.search);e.delete("email"),window.history.replaceState(null,"",`${window.location.pathname}?${e.toString()}`)}}catch(e){console.error("Error removing email query parameter on reset_password page",e)}

Requests	IP Address	Location	AS Autonomous System
104	3.174.45.129	Unknown	Unknown
28	3.213.127.153	Unknown	Unknown
8	52.21.12.80	Unknown	Unknown
6	104.18.86.42	Unknown	Unknown
4	3.225.116.108	Unknown	Unknown
4	142.250.186.99	Unknown	Unknown
3	3.174.46.128	Unknown	Unknown
2	3.220.93.54	Unknown	Unknown
2	34.231.9.42	Unknown	Unknown
2	108.177.15.84	Unknown	Unknown
140	57	-	-

Security Scan Report: ios-api-cf.duolingo.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History