What Gridinsoft observed on ducktask.xyz
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261008185133-59a48d9c
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Scoped public-page review
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
Reviewed public content does not substantiate a broad security warning. This decision covers only the explicitly reviewed hosts and pages.
Analyst findings
Review 3 documented observations View evidence
The public DuckTask pages describe surveys, offers, paid-to-click ads and shortlinks with reward withdrawals. These commercial and crypto-payout categories alone do not demonstrate malware. The public material says no deposits are required and describes withdrawal minimums, holds and possible offer reversals. No specific credential-stealing or malware object was reproduced in the reviewed public scope. Accounts, external offers, ads, shortlink destinations, withdrawals and private wallet handling were not tested. Business registration, provider relationships, payout performance and absence of secret-key requests in private flows were not independently verified. The result is inconclusive for those untested objects and transactions.
- Public artifact URL https://ducktask.xyz/
- Public artifact URL https://www.ducktask.xyz/
- Public artifact URL https://ducktask.xyz/academy/is-ducktask-legit
- Public artifact URL https://ducktask.xyz/privacy-policy
- Public artifact URL https://ducktask.xyz/terms-of-service
Public indexes, URL scanners, threat intelligence and archives were searched for the exact reviewed hosts and their parent where applicable. Available domain-level records are context, not reproduced harmful objects; absent records and unavailable archives do not establish safety.
- Public artifact URL https://otx.alienvault.com/api/v1/indicators/domain/ducktask.xyz/general
Actual Firefox visits to both root hosts displayed the ordinary DuckTask earning, wallet and developer-product homepage; www redirected to the apex. Public terms dated September 19, 2026 require age 18+, describe free access, virtual accounting credits and conditional withdrawals without guaranteed minimum earnings. The October 1 privacy policy discloses account, activity and device-fingerprint information. These are public disclosures, not verification of their implementation.
- Public artifact URL https://ducktask.xyz/terms-of-service
- Public artifact URL https://ducktask.xyz/privacy-policy
Scope and limitations
- Review covers only the inspected public pages; private accounts, transactions, server files and all delegated content were not audited.
Help protect others by sharing this page on social media! The more people who know about ducktask.xyz, the fewer chances they have to deceive someone else. Help others evaluate ducktask.xyz by sharing this page on social media!