education learning

corporate

English

g_state

OptanonConsent

initial_referrer

lang

wuuid

logged_out_uuid

Domain 'ios-api-cf.duolingo.com' uses the commercial generic top-level domain (.com) and includes subdomain 'ios-api-cf'. Count 8 characters in 'duolingo' split between 4 vowels and 4 consonants. Splitting it apart reveals 2 words: duo, lingo. Median word length is four characters. No strong language cues emerged from the frequency lists.

html/c1/90/c19006a6-b99c-49c9-a4c6-96eb0a339056_fallback.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'report-sample' 'nonce-Zw9QAeRb9jPG4ZebRUNQ3Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

a-uwspmwxglhuc

reCAPTCHA

c4fd4e7b9ac29a13306e32d94c695a34571b1bd0120c1bf693e86823d8998f1a

99b98bcda0bd41f0c67dca41a5354950c5ad61c3f1d6e9e56f25299e54a275f2

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768

15b6a908175a104279e17f2720e3128ba093222b0c7ae1e1fa50ffb1b2104419

c48e27e3e6dcdcb122726f575736a32398d126f61f506427a2b26c900009a75d

4debbd354eb371ae1dfcb9c7058122f28fa4acfe3e9ee03cf585344cb1d3a7d6

20335701d73d948be4e46c711de18a7fc971be056bc0dc2e43c6d806d631e6ef

f2d4ab9d2dff0e7dce8e81c2f13c53db9fdacb6c16445e7188176e06ca638317

1106a7c748ee1e5d4a91c4fa46fb911b4333c777ca93488ba180ca25e411cbbf

9179ef7271b73ff2bda6115717edd59c35b5516a59e75a84b80210f05657cdec

0e3624f0dff9bb421d32062daa8637c47bcc6d146db01f0345f0e7cd3497c5e9

783dc561fa32b7b11b2745eccba8923d14804cc53ae458dbb9b9f445b9330b58

b7508a7f7c613b46f8be49556d779d68e174ed446827f922cb3dac7b7f289f68

fbdef10f82e07b58c71b0f94e5f9ece510dd7ba228905176df085e1e31550ac4

60b210d44bbbc47d3b215ee165e57a5694b9de7955ab8ded8c45c66a455cff3f

05c58c759cab8d50d5e7f9d3b2faedcc0dd45fa3fb50899a224363a1dea93605

5c5a549a211a4f06ce4c8f4db04de9cbe176d7838f6bca2f4fd7ffa322eb1126

7cc6965594559c5ab2892388e0fe61e4e489280acf0ad5dac7849a66877c1c33

Do Not Sell or Share My Personal Information

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

width=device-width,initial-scale=1,user-scalable=no

viewport

robots

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

google

mobile-web-app-capable

apple-itunes-app

facebook-domain-verification

twitter:site

https://www.duolingo.com/images/facebook/duo200.png

twitter:image

Duolingo - Learn a language for free @duolingo

twitter:title

twitter:card

https://www.duolingo.com/images/facebook/duo-08523a2.jpg

learn, spanish, german, french, portuguese, italian, english, free, lessons, course, language, study, flashcards

keywords

Free, fun, and effective courses in languages and more. Learn with quick, science-based lessons personalized to you.

description

twitter:description

og:description

A8o5T4MyEkRZqLA9WeG2XTFdV5tsX2Prg85xyQ+RL1btVuybB1K/EQ+7JUsPK+J32oBMTnsoF9B4A+qTlL6efgQAAABweyJvcmlnaW4iOiJodHRwczovL2FjY291bnRzLmdvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkZlZENtQnV0dG9uTW9kZSIsImV4cGlyeSI6MTc0NDY3NTIwMCwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

script-src 'report-sample' 'nonce-I3GtqGriQp9LTDbfHEOm6w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/38fac9d5b82543fc4729580d18ff2d3d

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD

window.duo={"detUiLanguages":["en","es","pt","it","fr","de","ja","zs","zt","ko","ru","hi","hu","tr"],"removeNativeAppBanner":false,"uiLanguage":"en","troubleshootingForumId":647,"oldWebUrlWhitelist":["^/comment/","^/design$","^/discussion$","^/topic/"]}

"use strict";(self.webpackChunk=self.webpackChunk||[]).push([[7979],{89788:(e,o,f)=>{var t=f(83141),a=f(38020);const n=f.p+"vendor/68d22534874c554b0c9ebabea379fc60.woff2",d=f.p+"fonts/9a7b142e254cc4aaae3dab3017c7ee53.woff2",c=new FontFace("din-round",`url(${a}) format("woff2")`,{style:"normal",weight:"500"}),r=new FontFace("din-round",`url(${t}) format("woff2")`,{style:"normal",weight:"700"}),s=new FontFace("feather",`url(${n}) format("woff2")`,{style:"normal",weight:"700"}),w=new FontFace("Noto Sans Math",`url(${d}) format("woff2")`,{style:"normal",weight:"400"});document.fonts.add(c),document.fonts.add(r),document.fonts.add(s),document.fonts.add(w),c.load(),r.load()},83141:(e,o,f)=>{e.exports=f.p+"vendor/dcf3e686284c5e7eeca4f8e200392c01.woff2"},38020:(e,o,f)=>{e.exports=f.p+"vendor/8df26391f330be315074ddd7b74b66b8.woff2"}},e=>{e(e.s=89788)}])

Duolingo

if("/errors/not-supported.html"!==window.location.pathname)for(var supportsAbortController=("AbortController"in window&&"Request"in window&&Object.hasOwnProperty.call(Request.prototype,"signal")),supportsElementAnimate=("animate"in Element.prototype),supportsES2015=function(){if("undefined"==typeof Symbol||"undefined"==typeof Proxy)return!1;try{return new Function("(a = 0) => a")(),new Function("class MyEvent extends Event{}")(),!1===new Function("return new Boolean(Symbol.match)")()?!1:(new Function("new.target")(),new Function('class ಠ_ಠ extends Array {constructor(j = "a", ...c) {const q = (({u: e}) => {return { [`s${c}`]: Symbol(j) };})({});super(j, q, ...c);}}new Promise((f) => {const a = function* (){return "𠮷".match(/./u)[0].length === 2 || true;};for (let vre of a()) {const [uw, as, he, re] = [new Set(), new WeakSet(), new Map(), new WeakMap()];break;}f(new Proxy({}, {get: (han, h) => h in han ? han[h] : "42".repeat(0o10)}));}).then(bi => new ಠ_ಠ(bi.rd));')(),!!new Function("return (a, b,) => a.padStart(5, '0') === '0000x' && Object.values(b).length === 2")()("x",{a:1,b:2}))}catch(e){return!1}}(),supportsEs2019=("flat"in Array.prototype&&"flatMap"in Array.prototype&&"fromEntries"in Object&&"trimStart"in String.prototype&&"trimEnd"in String.prototype&&"description"in Symbol.prototype),supportsIntersectionObserver=("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype&&"isIntersecting"in window.IntersectionObserverEntry.prototype),supportsWebAssembly=("WebAssembly"in window),supportsResizeObserver=("ResizeObserver"in window),features=[supportsEs2019,supportsWebAssembly,supportsAbortController,supportsElementAnimate,supportsES2015,supportsIntersectionObserver,supportsResizeObserver],i=0;i<features.length;i++)features[i]||(window.location.href="/errors/not-supported.html");window.duo.disableMonetization=/[?&]utm_source=pwa_launch/.test(window.location.search),window.duo.l10n={strings:{},contextualVariableMapping:{}},window.duo.uiLanguage=window.duo.uiLanguage||"en",window.duo.version="1.293.0",window.duo.versionHash="78d1a19b0433afc746e9e859b82ad4b40fee4e9a";var isAbc=/^\/abc/.test(window.location.pathname),HIDE_APP_SMART_BANNER_PATH=["/2022-campaigns","/share/sm","/share-direct/sm","/super","/plus","/getplus","/youtubeplus","/campaigns","/ios-super-purchase-flow","/ios-max-purchase-flow"];if(HIDE_APP_SMART_BANNER_PATH.includes(window.location.pathname))(el=document.querySelector("[name=apple-itunes-app]"))&&el.remove();else if(isAbc){var el;(el=document.querySelector("[name=apple-itunes-app]"))&&el.setAttribute("content","app-id=1440502568")}try{if(window.location.pathname.startsWith("/reset_password")&&window.location.search.includes("email=")){const e=new URLSearchParams(window.location.search);e.delete("email"),window.history.replaceState(null,"",`${window.location.pathname}?${e.toString()}`)}}catch(e){console.error("Error removing email query parameter on reset_password page",e)}

Requests	IP Address	Location	AS Autonomous System
104	3.174.45.129	Unknown	Unknown
28	3.213.127.153	Unknown	Unknown
8	52.21.12.80	Unknown	Unknown
6	104.18.86.42	Unknown	Unknown
4	3.225.116.108	Unknown	Unknown
4	142.250.186.99	Unknown	Unknown
3	3.174.46.128	Unknown	Unknown
2	3.220.93.54	Unknown	Unknown
2	34.231.9.42	Unknown	Unknown
2	108.177.15.84	Unknown	Unknown
140	57	-	-

Security Scan Report: ios-api-cf.duolingo.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History