Verisite checked store.duolingo.com on July 9, 2026 and gave it a trust score of 88/100. Out of 94 checks, 62 passed, with 20 warning(s) and 12 failed check(s).
store.duolingo.com
Last checked 22 hours ago
Part of duolingo.comTrust Score
Good
Security Headers
Checks HTTP security headers and cookie security configuration.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
DNS & Server
Checks DNS records, server information and hosting details.
Security Headers
Checks HTTP security headers and cookie security configuration.
- Domain
- store.duolingo.com
- Cookies
-
- Total: 5
- Issues: localization: missing Secure flag, cart_currency: missing Secure flag, _shopify_s: missing Secure flag, _shopify_y: missing Secure flag
- Secure cookies: 1
- Insecure cookies: 4
- HSTS max-age
- 7889238
- Missing headers
- Referrer-Policy, Permissions-Policy
- HSTS preload
- No
- Used browser fallback
- Yes
- Referrer-Policy
- No
- X-Frame-Options
- Yes
- HSTS includes subdomains
- No
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- Yes
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
- Detected CMS
-
- Name: Shopify
- Slug: shopify
- Version:
- Detected: Yes
- Confidence: high
- Domain
- store.duolingo.com
- Detected CMS
- Shopify
- JavaScript libraries
-
- jQuery — 3.2.1
- Bootstrap — 3.3.7
- Pages scanned
- 8
- Vulnerable libraries
-
- CVE-2020-11023 — jQuery — 3.2.1 — 3.5.0 — medium
- CVE-2019-8331 — Bootstrap — 3.3.7 — 3.4.0 — medium
- Server technology
-
- Server: cloudflare
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
- Domain
- store.duolingo.com
- Exposures
-
- /.DS_Store — medium — macOS directory structure exposed
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths: /admin
- Paths checked
- 18
- Exposures found
- 1
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
- SPF
-
- Exists: No
- Policy:
- Record:
- Mechanisms:
- Policy label:
- Authorized senders:
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: No
- Policy:
- Record:
- Percentage:
- Policy label:
- Has reporting: No
- Subdomain policy:
- Domain
- store.duolingo.com
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
- Domain
- duolingo.com
- Registrar
- Amazon Registrar, Inc.
- Registered
- 2010-01-26
- Age (days)
- 5969
- Expires
- 2027-01-26
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
- Domain
- store.duolingo.com
- Detected trackers
- Pages scanned
- 7
- Total cookies
- 7
- Third-party trackers found
- 0
- Tracking cookies
- Consent mechanism detected
- No
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
- Domain
- store.duolingo.com
- Open ports
- Mixed content domains
- Pages scanned
- 7
- Redirect chain
- http://store.duolingo.com, https://store.duolingo.com/
- HTTP/2 support
- No
- HTTP/3 support
- Yes
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
- Domain
- store.duolingo.com
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
- Domain
- store.duolingo.com
- Email address present
- Yes
- Phone number present
- Yes
- Terms and conditions present
- No
- Chamber of Commerce number found
- No
- VAT number found
- No
- Physical address present
- Yes
- Pages scanned
- 11
- Return policy present
- Yes
- Return policy page
- /pages/returns-and-exchanges
- Privacy policy present
- No
- Contact details found
- 3
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
- Domain
- store.duolingo.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Trustpilot page
- https://www.trustpilot.com/review/store.duolingo.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
- Checked domain
- store.duolingo.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
- Expiry date
- 2026-09-03
- Issuer
- Let's Encrypt
- Subject
- store.duolingo.com
- Valid until
- 2026-09-03
- Valid from
- 2026-06-05
- TLS version
- TLSv1.3
- Serial number
- 06A3EF166D9A0970F0DAE700C24457B87EF5
DNS & Server
Checks DNS records, server information and hosting details.
- IP Address
- 23.227.38.74
- SPF record
- No
- IPv6 support
- Yes
- DMARC record
- No
- DNSSEC
- Yes
- MX Records
- Nameservers
- Reverse DNS
- shops.myshopify.com
- IP Addresses
- 23.227.38.74
- IPv6 Addresses
- 2620:127:f00f:e::