duck.ai

.ai crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 345 ms crawled 2026-05-18

NL · 40.114.177.156 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title

Duck.ai by DuckDuckGo. Private AI chat. Free.

Description

Use ChatGPT, Claude, and other AIs, privately. Protect chats from hackers, scammers, and companies. Keep info confidential. Free. No account required.

Language

en-CA

Canonical

https://duck.ai/

Translations

af-za
ar-dz
ar-eg
ar-jo
ar-sa
ast-es
az-az
be-by
bg-bg
bn-bd
bn-in
bo-cn
br-fr
bs-ba
ca-es
cs-cz
cy-gb
da-dk
de-ch
de-de
el-gr
en-au
en-ca
en-gb
en-us
eo-xx
es-ar
es-cl
es-co
es-cr
es-ec
es-es
es-mx
es-pe
es-uy
es-ve
et-ee
eu-es
fa-ir
fi-fi
fr-be
fr-ca
fr-ch
fr-fr
ga-ie
gd-gb
gl-es
gu-in
he-il
hi-in
hr-hr
hu-hu
hy-am
id-id
io-xx
is-is
it-it
ja-jp
ka-ge
kab-dz
kn-in
ko-kr
ku
kw-gb
ky-kg
ln-cd
lt-lt
lv-lv
ml-in
mn-mn
mr-in
ms-my
nb-no
ne-np
nl-be
nl-nl
nn-no
od-in
pl-pl
ps-af
pt-br
pt-pt
ro-ro
ru-ru
sc-it
si-lk
sk-sk
sl-si
sq-al
sr-rs
sv-se
ta-in
te-in
th-th
tl-ph
tokipona-xx
tpi-pg
tr-tr
uk-ua
ur-pk
vi-vn
zh-cn
zh-tw

Open Graph

url: https://duck.ai/
title: Duck.ai
site name: Duck.ai
description: Use ChatGPT, Claude, and other AIs, privately. Protect chats from hackers, scammers, and companies. Keep info confidential. Free. No account required.

Technology

Server: nginx

Registration

Registrar

NameCheap, Inc.

Created

2017-12-15

Expires

2027-12-18 577 days left

Updated

2025-11-23

Name servers

dns4.p02.nsone.net
dns3.p02.nsone.net
dns2.p02.nsone.net
dns1.p02.nsone.net

DNS records live

NS

dns1.p08.nsone.net
dns2.p08.nsone.net
dns3.p08.nsone.net
dns4.p08.nsone.net

TXT

google-site-verification=1ZzTSUskRYVuwWHsoDbgSl7kbRIfxG3g6WD8WjfcWhQ

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-03-25 to 2026-06-23

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://duck.ai/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duck.ai https://*.duck.ai ; form-a
strict-transport-security: max-age=0

Links to (1)

duckduckgo.com×4