Infrastructure - https://canva.com BeaverCheck Audit

B

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

REVIEW

www/non-www, trailing slash, HTTP→HTTPS

Both www and non-www versions serve content

Got: Both variants return 200 Expected: One variant 301-redirects to the other

HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.canva.com/

200https://canva.com/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://canva.com/ → https://canva.com/

Consistent

B

TLS Certificate Expiry & Recommendations

257 days until leaf cert expires — 2 issues to address

REVIEW

Certificate validity

257

days left

0d 30d 60d 90d+

Recommended actions

Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

B

CDN & Delivery

AWS CloudFront (FunctionGeneratedResponse from cloudfront)

REVIEW

AWS CloudFront (FunctionGeneratedResponse from cloudfront)

Site is served via AWS CloudFront CDN (edge: WAW51-P6)

Got: x-amz-cf-id: ibLHQKSegkQ2PKTf2En3efL8r5sUHdkj3My26HZJgsdAmw15kIyCAw==

CDN cache status: FunctionGeneratedResponse from cloudfront

CDN Detected: AWS CloudFront

Provider AWS CloudFront Cache Status FunctionGeneratedResponse from cloudfront Evidence x-amz-cf-id: ibLHQKSegkQ2PKTf2En3efL8r5sUHdkj3My26HZJgsdAmw15kIyCAw==

A

DNS Records

4 A records, 822 ms lookup

PASS

4 A records, 822 ms lookup

Resolves to 4 IPv4 address(es)

Got: 3.174.230.24, 3.174.230.36, 3.174.230.52, 3.174.230.34

Has 8 IPv6 (AAAA) record(s)

Got: 2600:9000:290c:6000:b:add6:7500:93a1, 2600:9000:290c:f200:b:add6:7500:93a1, 2600:9000:290c:e00:b:add6:7500:93a1, 2600:9000:290c:7200:b:add6:7500:93a1, 2600:9000:290c:1a00:b:add6:7500:93a1, 2600:9000:290c:f600:b:add6:7500:93a1, 2600:9000:290c:b600:b:add6:7500:93a1, 2600:9000:290c:fc00:b:add6:7500:93a1

4 nameserver(s) configured

Got: ns-253.awsdns-31.com, ns-1851.awsdns-39.co.uk, ns-730.awsdns-27.net, ns-1421.awsdns-49.org

5 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution is slow (822 ms)

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Got: 822 ms

A	3.174.230.24, 3.174.230.36, 3.174.230.52, 3.174.230.34
AAAA	2600:9000:290c:6000:b:add6:7500:93a1, 2600:9000:290c:f200:b:add6:7500:93a1, 2600:9000:290c:e00:b:add6:7500:93a1, 2600:9000:290c:7200:b:add6:7500:93a1, 2600:9000:290c:1a00:b:add6:7500:93a1, 2600:9000:290c:f600:b:add6:7500:93a1, 2600:9000:290c:b600:b:add6:7500:93a1, 2600:9000:290c:fc00:b:add6:7500:93a1
CNAME	—
NS	ns-253.awsdns-31.com, ns-1851.awsdns-39.co.uk, ns-730.awsdns-27.net, ns-1421.awsdns-49.org
MX	1 aspmx.l.google.com 5 alt2.aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com
TXT	google-site-verification=Nj3tLWEXpg6645jNi89eJ4d-f3EKhg0mywGniT6cnP0 google-site-verification=MfIUBrtfhRkfARKs7m47C8eRPrJet6cRCq8M18-bHLo google-site-verification=1uigN3ZKYSw5lr4ZdVugeteeJpy31qMbRecLJ_1ZVJU stripe-verification=ec89fd8a56a7c9b8a0271fb890adecdfe20b8c157ade22d326b0ab9389b4... stripe-verification=bbf18c986f16d71344fe2d0a77ef8b893ad8083e09a53e5fb59a864553c4... twilio-domain-verification=f221ae68020aa3916d82bef6ca2fcbc0 apple-domain-verification=AAz7BIDOOK5bj9VF docker-verification=5298cfeb-b2af-4973-a4ae-72cfba77efa8 google-site-verification=2dvQv03NLacULRWLTE7UGnoYc0P18AKoAAg91FRtOTo gauntlet-domain-verification=H9sUOdHq/SMDoMyBvXJiKkoNcY9g+3uSQ17NNxJ/kY37wSJe8i7... airtable-verification=e13696d96fe5c6f38c47676debdd401e have-i-been-pwned-verification=b633a4fdd0ff3575f1580524a28c9c7d mongodb-site-verification=stxOuL7yJeLEHCRwM4KlS0w3Qn5QDXkt google-site-verification=TwtsJNfrmc2RPw6q28QiKM-wnDaowIdVWWX7VhmTDvA liveramp-site-verification=7cfkiVRS0afhs5IQ7o96bHcblYCH-SI_0G-eu7r9LsM MS=ms92090372 https://issues.sonatype.org/browse/OSSRH-53881 google-site-verification=0UOVvHC1k0nMb_2YKhFkMRkp4yRlqN-9Va_WB8b1qV0 google-site-verification=OORAEPphyRjSBXDWDBGtbZo0oElHFsUfxPQBesBvU6s atlassian-domain-verification=rie8jGbQjxwFnUfEJ5DhYCdtEResa9Vg773/vaE2DtJwnEbS2t... 1password-site-verification=CEUWLSG27ZBI3NCDNFPDQXMJBY adobe-idp-site-verification=2be841675181663752bc242d59d2428df60b607824db83ed808c... yahoo-verification-key=fksNKRwkSoLGj4TIoVX0Iybviy7x0xpgDkRv/8s9Vw4= google-site-verification=JqtkyfjBz-Uq1Xqk7REatNCxZnlo4gYFis8EdI_gVQ0 google-site-verification=bn-oB_Sgkg-cPqCil91EY6tVtaRlq2x68HktpHFloeM openai-domain-verification=dv-X62J0FmW8lDn4eDouDTtdvnm postman-domain-verification=de148d23ecf7857ca6894818bd6b04d811b8e7bebcd91e5060df... hubspot-developer-verification=ZWRmOWRlMjEtZGU1Zi00MTJiLWE4YjktNWQ3NmIyNDA5NDhm stripe-verification=f4e689eb94442db29e022a6d99d0d5225c45eb72488d9fdf1510b94fe6e8... google-site-verification=ZZHXa27FmPeiiZ1sM6N3i3widAseyqpbpp5mfW18q5A detectify-verification=79cd57657f82d1fbb417ce3beec7cbe6 lucidlink-verification=Q8D0J05EK61V0PE82T654XJBMC mongodb-site-verification=wUQ4V3GaUzBwppXzin6kKc9AybLlHJ14 cdc0ecd8-b767-4b2a-961d-056ff91c50cf google-site-verification=DW2cTgo6bXtus9wdZWW_20IB3HhMUoH2dLyitWm5VZU google-site-verification=MJYHtvI-o93g5yti0Uey9u-hglJQ6UnPfV0djrxlT9M google-site-verification=Y907KhOV3MD6WEXxbbTsYtSj1k5r3lDAVtM7bT8Tw58 hubspot-developer-verification=NDU5MWU5ODItY2E1Zi00YTY0LWEwNGEtNWU5M2EzOGIwZDll google-site-verification=CVeAVsJ3_hxhfhDQTbtvIbpzUIIvUZ03vQCSCx7fCZk google-site-verification=YGcdBuAhkMJMRa5khtl9hTKLAHlayiapf0pxJph2ZcU monday-com-verification=LnZZjRw2c6n_jXge5OWXu9GWtGGjlxNtMteJuNqM0bQ google-site-verification=xDNuQ7HHiwzDPok6K8T5BcxOhJ5fB0IL9vf2xLc0YAs google-site-verification=bQC1cPBMACHUOt271BPTfL6k2qsoXlrHkNNTW0bVGKg docusign=4c293e32-cbde-4ddf-bec8-79108891d648 bugcrowd-verification=400b9a149f7cdd8664c2e7e502482536 facebook-domain-verification=05c971f78w3exkut5f717mw8obqmf3 onetrust-domain-verification=857af271813b4850b88f8e48bc2b2e78 stripe-verification=5d4f5c71179a849cf68764a56809bfaada60fd51ca9a6c5b881b7477dbe9... drift-domain-verification=9cea5d6a9cc67d7d8195abc4b7afefed111d50ad43225041c8d5f7... onetrust-domain-verification=155ccaa6043f43439fb8fdbd4b1be792 stripe-verification=15ef6563e51240246ef5c70232027055e35f306d5a68e239ba4d60b65b5e... mgverify=34d839e7ad9cdafaaccc77da386dcff2c46e4a628449d8e434cd13b032c82201 google-site-verification=eAc0jqdGQQKV0P-Rce35fFYWbiRi-Ic4QZocWJC45OE shopify-verification-code=VFL6jPSmWRU2VUyhiN8qIQTeSnfgpA airtable-verification=a351d73cf64b3a7900588fe07af4eca6 neat-pulse-domain-verification-KX9q8nX=db71101a-781f-4da4-86ad-2fe12ade2c34 pinterest-site-verification=b91a2bb89d0241853d81d959d5a78f07 ahrefs-site-verification_801b8774fd779b395b1c81e48f7900e305369a5ed19eb3201a3dbc9... google-site-verification=a9fY2y2BlMyyaiLXgGNEIwYe80ZXchnC3Fib7-7CN30 google-site-verification=hZFAMgOOsawLXNZFTJ5XAsml2KJc5leHofbwIiLCl00 hubspot-domain-verification=ZGM1Zjc3YzktNjdmZC00N2JlLThiOTQtY2ViZjI2NTA2OTQw status-page-domain-verification=fgb6hyksgk8x wiz-domain-verification=7fe44deeceff62c6c3011ccf4b4ddae2fd6e94b39ec8cb2cb7e3343d... SPF v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com i... google-site-verification=vGYy48g7sb4flIluKql8BFp3_6lKKjbQEUGHUDSxCdA cursor-domain-verification-eb1g1h=nven1Rl68xcItm0SV3eqGeGaU
CAA	Lookup not available with standard resolver

Resolved in 822 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A

Redirect Chain

1 redirect(s), 883 ms total

PASS

1 redirect(s), 883 ms total

Single redirect

Got: https://canva.com → https://www.canva.com/ (301)

WWW normalization redirect

Redirect overhead: 883 ms total

Got: 883 ms

https://canva.com

346 ms · HTTP/1.1

301

https://www.canva.com/

537 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://canva.com	301	346 ms	HTTP/1.1	CloudFront
2	https://www.canva.com/	200	537 ms	HTTP/1.1	cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+

IPv6 Readiness

IPv6 reachable (22 ms)

PASS

IPv6 reachable (22 ms)

IPv6 is configured and reachable at 2600:9000:290c:6000:b:add6:7500:93a1, 2600:9000:290c:f200:b:add6:7500:93a1, 2600:9000:290c:e00:b:add6:7500:93a1, 2600:9000:290c:7200:b:add6:7500:93a1, 2600:9000:290c:1a00:b:add6:7500:93a1, 2600:9000:290c:f600:b:add6:7500:93a1, 2600:9000:290c:b600:b:add6:7500:93a1, 2600:9000:290c:fc00:b:add6:7500:93a1

Got: 22 ms connect

IPv6 Ready

AAAA Records 2600:9000:290c:6000:b:add6:7500:93a1, 2600:9000:290c:f200:b:add6:7500:93a1, 2600:9000:290c:e00:b:add6:7500:93a1, 2600:9000:290c:7200:b:add6:7500:93a1, 2600:9000:290c:1a00:b:add6:7500:93a1, 2600:9000:290c:f600:b:add6:7500:93a1, 2600:9000:290c:b600:b:add6:7500:93a1, 2600:9000:290c:fc00:b:add6:7500:93a1 Connection Reachable (22 ms)

A+

Crawlability

robots.txt present, sitemap with 3 URLs

PASS

robots.txt present, sitemap with 3 URLs

robots.txt is present

Got: 6216 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 3 entries

Sitemap index with 3 child sitemaps

robots.txt references sitemap

robots.txt 200 OK

Size 6216 B Sitemaps referenced 2 User-agents Twitterbot, Perplexity-User, Ai2Bot, Webzio-Extended, ClaudeBot, CCBot, ICC-Crawler, AdsBot-Google, Canva-Teamsapp-LinkExpanding, Scrapy, VelenPublicWebCrawler, Ai2Bot-Dolma, Google-InspectionTool, Canva-Slackapp-LinkExpanding, Bytespider, meta-externalagent, Diffbot, FriendlyCrawler, LinkedInBot, Applebot-Extended, anthropic-ai, Claude-Web, *, facebookexternalhit, PerplexityBot, img2dataset, AdsIdxBot, ImagesiftBot, GPTBot, Timpibot, FacebookBot, omgili Blocking No — crawling allowed

#              vnacccan
#           nVCCCNVccNCCNv
#         cCCCAa      aCCC
#       nCCCCa        nCCC
#      cCCCAv         ACCa                                           CACCn
#     aCCCCv         nVa     vcVNn  nVVa    cVc    aVNVv     cNNv   Cc  Cc    vaVNVa vcVa
#     CCCCa                nACCAcaAACCCc   nCCCa aCCCCCC    NCCCv   Cc  Cn  cNCCCVaNACCCA
#    aCCCC                cCCCV   cCCCA    VCCCaAA  CCCA    CCCCv    CACNvnVCCCAv  vCCCCv
#    cCCCC               aCCCN    VCCCa   vCCCCCV   CCCc    CCCCv    aCA  cCCCCv   nCCCN
#    aCCCC              nCCCCv    CCCA    ACCCCc    CCC    nCCCCn   vCN   VCCCc    NCCCn
#    aCCCCa            aCCCCC    NCCCc   NCCCCV    CCCN   C aCCCc  aCc    NCCCn   aCCCA   Nc
#     aCCCCn         nNV CCCCa nAACCCc  AACCCN    vCCCAaVC   ACCCaNAv     cCCCN vVACCCA vNA
#      aCCCCNav  vncACc   NCCCNn  VCCCcVvvCCCv     cCCCCV    vACCNn        cCCCCAa  aCCCAa
#        aNCCCCCCCCNa
#
#                See something you can improve? We're hiring SEOs and Engineers!
#                          Checkout canva.com/careers and get in touch
User-agent: *
Disallow: 
Disallow: /media/*
Disallow: /template/*
Disallow: /_ok
Disallow: /_blank
Disallow: *v=
Disallow: *utm_expid=
Disallow: *source=
Disallow: *utm_source=
Disallow: *utm_campaign=
Disallow: *utm_content=
Disallow: *__hstc=
Disallow: *reviews_page=
Disallow: *gclid=
Disallow: *magazineName=
Disallow: *_ga=
Disallow: *like=
Disallow: *sp_url=
Disallow: *fbclid=
Disallow: *country=
Disallow: *company_size=
Disallow: *_hsenc=
Disallow: *zd_source=
Disallow: *wt.mc_id=
Disallow: *via=
Disallow: *utm_medium=
Disallow: *spc-source=
Disallow: *sp=
Disallow: *sort=
Disallow: *sf11500465=
Disallow: *sa=
Disallow: *ref=
Disallow: *preview=
Disallow: *pr=
Disallow: *o=
Disallow: *NoCode=
Disallow: *mod=
Disallow: *kui=
Disallow: *industry=
Disallow: *iframe=
Disallow: *hsLang=
Disallow: *hsCtaTracking=
Disallow: *hash=
Disallow: *gh_jid=
Disallow: *filterTags=
Disallow: *clickId=
Disallow: *ca_referer=
Disallow: *author=
Disallow: *ak_action=
Disallow: *ad=
Disallow: *__hstc=
Disallow: *__+hsfp=
Disallow: /_ajax/
Disallow: /design/
Disallow: /design?create*
Disallow: /font-combinations/search/*
Disallow: /*/followers
Disallow: /*/followers/
Disallow: /*/following
Disallow: /*/following/
Disallow: /templates/*/*/?uid=*
Disallow: /templates/?uid=*
Allow: /templates/classroom-decoration
Allow: /t/E
Disallow: /templates/M
Disallow: /pt_br/modelos/M
Disallow: /es_es/plantillas/M
Disallow: /es_mx/plantillas/M
Disallow: /fr_fr/modeles/M
Disallow: /de_de/vorlagen/M
Disallow: /ru_ru/shablony/M
Disallow: /tr_tr/sablonlar/M
Disallow: /ja_jp/templates/M
Disallow: /ar_eg/templates/M
Disallow: /id_id/contoh/M
Disallow: /es_ar/plantillas/M
Disallow: /it_it/modelli/M
Disallow: /es_co/plantillas/M
Disallow: /pl_pl/szablony/M
Disallow: /th_th/templates/M
Disallow: /pt_pt/modelos/M
Disallow: /vi_vn/mau/M
Disallow: /nl_nl/sjablonen/M
Disallow: /ko_kr/templates/M
Disallow: /sv_se/mallar/M
Disallow: /zh_tw/templates/M
Disallow: /hi_in/templates/M
Disallow: /templates/*/MA
Disallow: /*/_m2/
Disallow: /_print/*
Disallow: /en_oz/
Disallow: /join/*
Disallow: /q/*
Disallow: *?filters=
Disallow: *&filters=
Disallow: /zh_cn/
Disallow: /en_psaccent/
Disallow: /en_instrume/
Disallow: /ar/
Disallow: /ar_ae/
Disallow: /ar_sa/
Disallow: /en_ph/
Disallow: /cdn-cgi/
Disallow: /*/login/verify-email
Disallow: /M/

User-agent: AdsBot-Google
User-agent: AdsIdxBot
User-agent: Google-InspectionTool
User-agent: facebookexternalhit
User-agent: LinkedInBot
User-agent: PerplexityBot
User-agent: Perplexity-User
User-agent: Canva-Slackapp-LinkExpanding
User-agent: Canva-Teamsapp-LinkExpanding
Allow: /

User-agent: GPTBot
User-agent: ClaudeBot
User-agent: CCBot
User-agent: Applebot-Extended
User-agent: anthropic-ai
User-agent: Claude-Web
Disallow: /
Allow: /create/
Allow: /ar_eg/create/
Allow: /da_dk/skabe/
Allow: /de_de/erstellen/
Allow: /es_ar/crear/
Allow: /es_co/crear/
Allow: /es_es/crear/
Allow: /es_mx/crear/
Allow: /es_us/crear/
Allow: /fr_fr/creer/
Allow: /hi_in/banaye/
Allow: /id_id/membuat/
Allow: /it_it/creare/
Allow: /ja_jp/create/
Allow: /ko_kr/create/
Allow: /ms_my/buat/
Allow: /nb_no/skape/
Allow: /nl_nl/maken/
Allow: /pl_pl/tworzyc/
Allow: /pt_br/criar/
Allow: /pt_pt/criar/
Allow: /ru_ru/sozdat/
Allow: /sv_se/skapa/
Allow: /th_th/create/
Allow: /uk_ua/stvoryty/
Allow: /vi_vn/thiet-ke/
Allow: /zh_hk/create/
Allow: /zh_tw/create/
Allow: /features/
Allow: /ar_eg/features/
Allow: /da_dk/funktioner/
Allow: /de_de/funktionen/
Allow: /es_ar/funciones/
Allow: /es_co/funciones/
Allow: /es_es/funciones/
Allow: /es_mx/funciones/
Allow: /es_us/funciones/
Allow: /fr_fr/outils/
Allow: /hi_in/features/
Allow: /id_id/fitur/
Allow: /it_it/strumenti/
Allow: /ja_jp/features/
Allow: /ko_kr/features/
Allow: /nl_nl/functies/
Allow: /pt_pt/ferramentas/
Allow: /sv_se/funktioner/
Allow: /th_th/features/
Allow: /vi_vn/tinh-nang/
Allow: /zh_hk/features/
Allow: /zh_tw/features/
Allow: /graphs/
Allow: /ar_eg/graphs/
Allow: /da_dk/grafer/
Allow: /de_de/diagramme/
Allow: /es_ar/graficos/
Allow: /es_co/graficos/
Allow: /es_es/graficos/
Allow: /es_mx/graficas/
Allow: /es_us/graficas/
Allow: /fr_fr/graphiques/
Allow: /hi_in/graphs/
Allow: /it_it/diagramma/
Allow: /ja_jp/graphs/
Allow: /ko_kr/graphs/
Allow: /nb_no/grafer/
Allow: /nl_nl/grafieken/
Allow: /pt_br/graficos/
Allow: /pt_pt/graficos/
Allow: /sv_se/grafer/
Allow: /th_th/graphs/
Allow: /vi_vn/bieu-do/
Allow: /zh_hk/graphs/
Allow: /zh_tw/graphs/
Allow: /learn/
Allow: /de_de/lernen/
Allow: /fr_fr/decouvrir/
Allow: /ja_jp/learn/
Allow: /ko_kr/learn/
Allow: /pt_br/aprenda/
Allow: /ru_ru/obuchenie/
Allow: /help/
Allow: /*/help/

User-agent: Bytespider
User-agent: meta-externalagent
User-agent: ImagesiftBot
User-agent: Timpibot
User-agent: Scrapy
User-agent: Ai2Bot
User-agent: Diffbot
User-agent: img2dataset
User-agent: ICC-Crawler
User-agent: FacebookBot
User-agent: VelenPublicWebCrawler
User-agent: FriendlyCrawler
User-agent: omgili
User-agent: Webzio-Extended
User-agent: Ai2Bot-Dolma
Disallow: /

User-agent: Twitterbot
Allow: /


Sitemap: https://sitemap.canva.com/sitemap_index.xml
Sitemap: https://www.canva.com/landing_page_sitemap_index.xml

sitemap.xml 200 OK

Type Sitemap Index URLs 3 entries Valid XML Yes

Child Sitemaps:

A+

Domain Intelligence

canva.com — via Gandi SAS, 25 years, 3 months old

PASS

canva.com — via Gandi SAS, 25 years, 3 months old

Domain registered until May 5, 2030 (4 years, 1 months remaining)

DNSSEC is enabled

Registrar: Gandi SAS

Domain expiry

1357 days

May 5, 2030

SSL certificate

257 days

Issued by Amazon

Domain age

25 years, 3 months

Registered May 5, 2001

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Unknown

2600:9000:290c:2e00:b:add6:7500:93a1

Registrar

Gandi SAS

Lock status unknown 4 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Registrar Gandi SAS

Created May 5, 2001 (25 years, 3 months ago)

Expires May 5, 2030 (4 years, 1 months)

Last Updated January 14, 2026

Name Servers ns-1421.awsdns-49.org, ns-1851.awsdns-39.co.uk, ns-253.awsdns-31.com, ns-730.awsdns-27.net

DNSSEC Enabled

Hosting

IP Address 2600:9000:290c:2e00:b:add6:7500:93a1

Data source: rdap (0.6s)

A+

HTTP Probe Timing

Total 350 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

279 ms

TCP Connect

21 ms

TLS Handshake

27 ms

Time to First Byte

351 ms

Total Time

351 ms

Connection waterfall

DNS Lookup 279 ms TCP Connect 21 ms TLS Handshake 27 ms Server Processing 24 ms Content Transfer 0 ms