duolingo.com favicon

duolingo.com

Category: Education

Scanned: May 2, 2026, 06:03 PM UTC · First seen: May 2, 2026 · Threat Engines: 0 / 91 · Times Scanned: 1
90 / 100 Trust Score Based on scan findings at the time of analysis
No Threats Found
0 - High Risk50 - Moderate100 - No Threats
Fresh scan recommended
Last scanned 10 days ago - security status may have changed since then.
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Screenshot of duolingo.com Captured May 2, 2026
https://duolingo.com
Screenshot of duolingo.com
16 years
Extremely Popular - #465 Tranco rank (>100M monthly visitors)
Not listed (91 checked)
✓ Valid (TLS)
AWS EC2 (us-east-1)
Ashburn, United States
duo-api
Unknown
3.226.128.118
Domain & WHOIS Information
Registrar Amazon Registrar, Inc.
Registered January 26, 2010
Expires January 26, 2027
Name Servers ns-247.awsdns-30.com
DNSSEC Unsigned
Hosting AWS EC2 (us-east-1)
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
19 files scanned
No threats
18
Low Risk
0
Medium Risk
1
High Risk
0
No threats Low Risk Medium Risk High Risk
www.duolingo.com/# 21.7 KB Flagged: medium risk
www.duolingo.com.http-redirect 84 B No threats
www.googletagmanager.com/ns.html?id=GTM-TX6Z97C 266 B No threats
www.duolingo.com/manifest.json 488 B No threats
cdn.cookielaw.org/scripttemplates/otSDKStub.js 26.2 KB No threats
www.recaptcha.net/recaptcha/enterprise.js?render=6LcLOdsjAAAAAFfwGusLLnnn492SOGhsCh-uEAvI 1.1 KB No threats
d35aaqx5ub95lt.cloudfront.net/js/8553-a0eeda7a.js 9.1 KB No threats
d35aaqx5ub95lt.cloudfront.net/js/1319-d381a65f.js 236.9 KB No threats
d35aaqx5ub95lt.cloudfront.net/js/9819-f06f72ab.js 65.2 KB No threats
d35aaqx5ub95lt.cloudfront.net/js/app-bcc74b51.js 324.6 KB No threats
d35aaqx5ub95lt.cloudfront.net/js/manifest-45b0cbb8.js 6.3 KB No threats
Show 8 more...
Quttera flagged medium risk files - is this your website?
Investigate and remove potential threats with Quttera
Remove Malware

Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.

External Links & Domains
65
External Links
All Clean
0
Iframes
Clean
44
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://duolingo.com/data:image/x-icon%3B,Not flagged
http://duolingo.com/errors/not-supported.htmlNot flagged
http://duolingo.com/images/error_pages/sad.svgNot flagged
http://duolingo.com/manifest.jsonNot flagged
https://ar.duolingo.com/Not flagged
https://bn.duolingo.com/Not flagged
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsNot flagged
https://cloud.google.com/recaptcha/docs/billing-informationNot flagged
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-errorNot flagged
https://cs.duolingo.com/Not flagged
https://d35aaqx5ub95lt.cloudfront.net/css/1319-8091c681.cssNot flagged
https://d35aaqx5ub95lt.cloudfront.net/css/app-7a706392.cssNot flagged
https://d35aaqx5ub95lt.cloudfront.net/favicon.icoNot flagged
https://d35aaqx5ub95lt.cloudfront.net/images/duolingo-touch-icon2.pngNot flagged
https://d35aaqx5ub95lt.cloudfront.net/js/1319-d381a65f.jsNot flagged
Show 50 more...
ar.duolingo.comNot flagged
bn.duolingo.comNot flagged
cdn.cookielaw.orgNot flagged
cloud.google.comNot flagged
cs.duolingo.comNot flagged
d35aaqx5ub95lt.cloudfront.netNot flagged
de.duolingo.comNot flagged
developers.google.comNot flagged
docs.cloud.google.comNot flagged
duolingo.comNot flagged
el.duolingo.comNot flagged
es.duolingo.comNot flagged
fr.duolingo.comNot flagged
google.comNot flagged
hi.duolingo.comNot flagged
Show 29 more...
duolingo.com Overview

Description of duolingo.com

Duolingo appears to be a major online education platform focused on language learning, with additional learning content such as math and chess shown on the homepage. The site presents itself as a free, gamified learning service with short lessons, multilingual localization, and account-based access for returning users.

Based on the domain, page metadata, and global popularity signals, this website appears to be the official web presence of Duolingo, a well-known educational technology company. The homepage design, localized subdomains, and supporting infrastructure suggest a mature, actively maintained service intended for a broad international audience.

Safety Assessment for duolingo.com

The scan results are broadly reassuring at the time of this scan. No detections were reported by 0 out of 91 security engines, and the domain was not listed on the checked blacklist databases. External links and referenced domains also did not show flagged results in the provided scan data, which may indicate a relatively low level of observable malicious activity from the homepage during this assessment.

One malware scan labeled the site as suspicious and marked a single entry related to the homepage fragment URL, but no specific threat name was provided. In context, that isolated result may reflect a heuristic or non-specific scan artifact rather than confirmed malicious behavior, especially given the domain's long operating history, strong reputation indicators, and absence of corroborating detections from other scanners.

The domain is longstanding, highly ranked, and consistent with a widely recognized educational platform. Based on available scan data, no significant threats were detected at the time of this scan.

Technical Description

The site uses a valid SSL/TLS certificate issued through Amazon infrastructure, with certificate validity extending to late 2026. Hosting appears to be on AWS EC2 in the United States, and the domain uses Amazon nameservers. The observed web server identifier was "duo-api," and the site references assets from a CloudFront content delivery domain, which is consistent with a large-scale web application.

DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses may not benefit from that additional integrity layer. Aside from the single non-specific suspicious heuristic in one malware scan, the provided technical indicators do not show major infrastructure-level security concerns at the time of this scan.

HTTP Redirect Chain
302 https://duolingo.com
200 https://www.duolingo.com/
Website Insights
#465
Tranco Rank
Extremely Popular
Visitors >100M/mo
Category: Education
Rank History (30 days)
Mar 23 May 1
18 cookies detected
Essential12
Analytics4
Advertising2
Social0
18 1st party cookies
0 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step..
To submit your dispute for duolingo.com, please click the verification link we just emailed you. Once verified, we'll review it within 1–2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?