duolingo.com

HTML metadata

Title

Duolingo

Description

Duolingo is the world's most popular way to learn a language. It's 100% free, fun and science-based. Practice online on duolingo.com or on the apps!

Canonical

https://www.duolingo.com/

Translations

ar
bn
cs
de
el
en
es
fr
hi
hu
id
it
ja
ko
nl
pa
pl
pt
ro
ru
sv
ta
te
th
tl
tr
uk
ur
vi
zh

Open Graph

url: https://www.duolingo.com/
title: Learn a language for free
site name: Duolingo
description: Learn languages by playing a game. It's 100% free, fun, and scientifically proven to work.

Technology

CDN: Amazon CloudFront
Server: duo-api

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (4)

d35aaqx5ub95lt.cloudfront.net×12
cdn.cookielaw.org×1
www.duolingo.cn×1
www.googletagmanager.com×1

Registration

Registrar

Amazon Registrar, Inc.

Created

2010-01-26

Expires

2027-01-26 252 days left

Updated

2026-05-15

Name servers

ns-1020.awsdns-63.net
ns-1117.awsdns-11.org
ns-1904.awsdns-46.co.uk
ns-247.awsdns-30.com

DNS records live

NS

ns-1020.awsdns-63.net
ns-1117.awsdns-11.org
ns-1904.awsdns-46.co.uk
ns-247.awsdns-30.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com
30 aspmx4.googlemail.com
30 aspmx5.googlemail.com

TXT

Show 22 TXT records

e622flctk14s3cs3ccdauh8uth
anthropic-domain-verification-z4335b=YssTBALPY7K784Sri4FjVHjd3
_vg2bua41v8x489g1y55hg3hr4h3qmj0
amazonses:+SIz2NZPqYri3C+PSIyKShZIbuI4rNpbLlES7lmvpu4=
h1-domain-verification=sjPBeaGqQwEe8YhJ3W8JVNJa7WDQFAzc6AHkURoErkh324Yy
pardot_208162_*=c15d5cb1b9f31e26058e1f30bda9e5d65c57cfeea37b34af8e1dd88474460e90
klaviyo-site-verification=TGmZS7
google-site-verification=975UaH3lkKONB88HjWDDg34p8cdCqyTVSq_KGBAXrmU
apple-domain-verification=bMPI889zOgALUenN
atlassian-sending-domain-verification=423a5faf-1cfa-4704-a38a-f7adae302dd6
MS=ms66530579
pardot_208162_*=610bfb45f202232a79db94c298b30d14332a62a6894e695b025fa7949d7b03fa
aliyun-site-verification=1acfc148-50be-45c8-a021-3c933fc8eff9
jetbrains-domain-verification=bt8q7duih10l9pmf5fo5yy8wf
docker-verification=b4ead4c5-fd66-42a5-a684-8f2e7f4c1417
openai-domain-verification=dv-ieCpefZUqvVQwb8f7o4SlFye
klaviyo-site-verification=RKdcF3
rippling-domain-verification=9692f0635321f04d
stripe-verification=c8d270a115adc8c5a0a84fb24e17b7d05f66aad648d01e86f15548c6d0254ff5
spacelift-domain-verification=519xtPXm
openai-domain-verification=dv-A4cFxdrYIEodfG6UiQU0qxnT
slack-domain-verification=iuNWYimCCkEpnistAJvWc4YOZF8izoZ23TCDek0I

Email authentication strong

SPF

v=spf1 ip4:100.25.59.11 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ip4:52.73.203.75 ip4:52.70.130.33 include:amazonses.com include:_spf.google.com include:_spf.salesforce.com include:mail.zendesk.com include:aspmx.pardot.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; fo=1; rua=mailto:re+lhqmqj57zra@DMARC.postmarkapp.com,mailto:re+xu5r3a1wrlo@inbound.dmarcdigests.com,mailto:dmarcreports@duolingo.com; ruf=mailto:dmarcreports@duolingo.com; adkim=r; aspf=r

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzNuM4gb1XRWRkI3wae2j3rWxEeNf9NkV0QkP7GZQ60sw5RrLfL1IOTMoBO+gaHmbCIN3q+MMvr6IDFDCowE…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qDhbTY2OUYl7U1Y7l+noNJJcunu5vp48saPRTRf3hcrhvwCNvPQOojK8atee3D1GXxxLu3cNGwpBcgLkx…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+sTGHrk7kAA58yA5O9k82+O4Gnn3myecYppLg8LaMn7JItFwMH8wGpI2rpLZJ2NIcsSinG17rBqavw/bz…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-25 to 2026-12-25

Expires in 220 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://www.duolingo.com/

present

x-frame-options

findings

missing HSTS
missing Content Security Policy
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN