Skip to content
https://canva.com

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
95
GRADE
A
FIX
0
REVIEW
5
PASS
12
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
17
12 PASS 5 REVIEW
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
B
Reverse DNS
0/12 IPs match cert SAN
REVIEW
0/12 IPs match cert SAN
Info::
PTR for 52.222.154.104 does not match any cert SAN: server-52-222-154-104.cdg52.r.cloudfront.net
Common when behind a CDN or shared hosting (PTR points at the provider's hostname). Mismatch can also affect mail deliverability if this IP sends email -- many MTAs reject mail when forward+reverse DNS disagree.
Info::
PTR for 52.222.154.33 does not match any cert SAN: server-52-222-154-33.cdg52.r.cloudfront.net
Common when behind a CDN or shared hosting (PTR points at the provider's hostname). Mismatch can also affect mail deliverability if this IP sends email -- many MTAs reject mail when forward+reverse DNS disagree.
Info::
PTR for 52.222.154.112 does not match any cert SAN: server-52-222-154-112.cdg52.r.cloudfront.net
Common when behind a CDN or shared hosting (PTR points at the provider's hostname). Mismatch can also affect mail deliverability if this IP sends email -- many MTAs reject mail when forward+reverse DNS disagree.
Info::
PTR for 52.222.154.129 does not match any cert SAN: server-52-222-154-129.cdg52.r.cloudfront.net
Common when behind a CDN or shared hosting (PTR points at the provider's hostname). Mismatch can also affect mail deliverability if this IP sends email -- many MTAs reject mail when forward+reverse DNS disagree.
Info::
PTR lookup failed for 2600:9000:218e:8c00:b:add6:7500:93a1: lookup 2600:9000:218e:8c00:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:9000:b:add6:7500:93a1: lookup 2600:9000:218e:9000:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:c400:b:add6:7500:93a1: lookup 2600:9000:218e:c400:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:8600:b:add6:7500:93a1: lookup 2600:9000:218e:8600:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:da00:b:add6:7500:93a1: lookup 2600:9000:218e:da00:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:1200:b:add6:7500:93a1: lookup 2600:9000:218e:1200:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:9600:b:add6:7500:93a1: lookup 2600:9000:218e:9600:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2600:9000:218e:e00:b:add6:7500:93a1: lookup 2600:9000:218e:e00:b:add6:7500:93a1: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
B
TLS Certificate Expiry & Recommendations
178 days until leaf cert expires — 1 issues to address
REVIEW

Certificate validity

178
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
B
CDN & Delivery
AWS CloudFront (FunctionGeneratedResponse from cloudfront)
REVIEW
AWS CloudFront (FunctionGeneratedResponse from cloudfront)
Info::
Document is served via AWS CloudFront CDN (edge: CDG52-P1)
Got: x-amz-cf-id: t0dMDjc4C9MI-QB6Z9oJKHysdIq9ZaeohkF4R3d5hFo7_ha99V3aeQ==
Info::
CDN cache status: FunctionGeneratedResponse from cloudfront
Document served via CDN: AWS CloudFront
Provider AWS CloudFront Cache Status FunctionGeneratedResponse from cloudfront Evidence x-amz-cf-id: t0dMDjc4C9MI-QB6Z9oJKHysdIq9ZaeohkF4R3d5hFo7_ha99V3aeQ==
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
A+
DNS Records
4 A records, 107 ms lookup
PASS
4 A records, 107 ms lookup
Info::
Resolves to 4 IPv4 address(es)
Got: 52.222.154.104, 52.222.154.33, 52.222.154.112, 52.222.154.129
Info::
Has 8 IPv6 (AAAA) record(s)
Got: 2600:9000:218e:8c00:b:add6:7500:93a1, 2600:9000:218e:9000:b:add6:7500:93a1, 2600:9000:218e:c400:b:add6:7500:93a1, 2600:9000:218e:8600:b:add6:7500:93a1, 2600:9000:218e:da00:b:add6:7500:93a1, 2600:9000:218e:1200:b:add6:7500:93a1, 2600:9000:218e:9600:b:add6:7500:93a1, 2600:9000:218e:e00:b:add6:7500:93a1
Info::
4 nameserver(s) configured
Got: ns-1851.awsdns-39.co.uk, ns-730.awsdns-27.net, ns-253.awsdns-31.com, ns-1421.awsdns-49.org
Info::
5 mail exchanger(s) configured
Info::
SPF record present in TXT
Info::
DNS resolution time: 107 ms
Got: 107 ms
A52.222.154.104, 52.222.154.33, 52.222.154.112, 52.222.154.129
AAAA2600:9000:218e:8c00:b:add6:7500:93a1, 2600:9000:218e:9000:b:add6:7500:93a1, 2600:9000:218e:c400:b:add6:7500:93a1, 2600:9000:218e:8600:b:add6:7500:93a1, 2600:9000:218e:da00:b:add6:7500:93a1, 2600:9000:218e:1200:b:add6:7500:93a1, 2600:9000:218e:9600:b:add6:7500:93a1, 2600:9000:218e:e00:b:add6:7500:93a1
CNAME—
NSns-1851.awsdns-39.co.uk, ns-730.awsdns-27.net, ns-253.awsdns-31.com, ns-1421.awsdns-49.org
MX
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
TXT
mongodb-site-verification=wUQ4V3GaUzBwppXzin6kKc9AybLlHJ14
stripe-verification=f4e689eb94442db29e022a6d99d0d5225c45eb72488d9fdf1510b94fe6e8...
google-site-verification=a9fY2y2BlMyyaiLXgGNEIwYe80ZXchnC3Fib7-7CN30
liveramp-site-verification=7cfkiVRS0afhs5IQ7o96bHcblYCH-SI_0G-eu7r9LsM
facebook-domain-verification=05c971f78w3exkut5f717mw8obqmf3
google-site-verification=CVeAVsJ3_hxhfhDQTbtvIbpzUIIvUZ03vQCSCx7fCZk
bugcrowd-verification=400b9a149f7cdd8664c2e7e502482536
monday-com-verification=LnZZjRw2c6n_jXge5OWXu9GWtGGjlxNtMteJuNqM0bQ
google-site-verification=0UOVvHC1k0nMb_2YKhFkMRkp4yRlqN-9Va_WB8b1qV0
google-site-verification=YGcdBuAhkMJMRa5khtl9hTKLAHlayiapf0pxJph2ZcU
hubspot-developer-verification=ZWRmOWRlMjEtZGU1Zi00MTJiLWE4YjktNWQ3NmIyNDA5NDhm
detectify-verification=79cd57657f82d1fbb417ce3beec7cbe6
hubspot-developer-verification=NDU5MWU5ODItY2E1Zi00YTY0LWEwNGEtNWU5M2EzOGIwZDll
mgverify=34d839e7ad9cdafaaccc77da386dcff2c46e4a628449d8e434cd13b032c82201
google-site-verification=ZZHXa27FmPeiiZ1sM6N3i3widAseyqpbpp5mfW18q5A
google-site-verification=2dvQv03NLacULRWLTE7UGnoYc0P18AKoAAg91FRtOTo
google-site-verification=eAc0jqdGQQKV0P-Rce35fFYWbiRi-Ic4QZocWJC45OE
lucidlink-verification=Q8D0J05EK61V0PE82T654XJBMC
gauntlet-domain-verification=H9sUOdHq/SMDoMyBvXJiKkoNcY9g+3uSQ17NNxJ/kY37wSJe8i7...
stripe-verification=15ef6563e51240246ef5c70232027055e35f306d5a68e239ba4d60b65b5e...
neat-pulse-domain-verification-KX9q8nX=db71101a-781f-4da4-86ad-2fe12ade2c34
google-site-verification=hZFAMgOOsawLXNZFTJ5XAsml2KJc5leHofbwIiLCl00
twilio-domain-verification=f221ae68020aa3916d82bef6ca2fcbc0
google-site-verification=bn-oB_Sgkg-cPqCil91EY6tVtaRlq2x68HktpHFloeM
google-site-verification=JqtkyfjBz-Uq1Xqk7REatNCxZnlo4gYFis8EdI_gVQ0
stripe-verification=ec89fd8a56a7c9b8a0271fb890adecdfe20b8c157ade22d326b0ab9389b4...
docusign=4c293e32-cbde-4ddf-bec8-79108891d648
atlassian-domain-verification=rie8jGbQjxwFnUfEJ5DhYCdtEResa9Vg773/vaE2DtJwnEbS2t...
airtable-verification=e13696d96fe5c6f38c47676debdd401e
browserstack-domain-verification=24f3b7bc-a461-4340-aa4b-dbf671f16381
stripe-verification=bbf18c986f16d71344fe2d0a77ef8b893ad8083e09a53e5fb59a864553c4...
have-i-been-pwned-verification=b633a4fdd0ff3575f1580524a28c9c7d
google-site-verification=DW2cTgo6bXtus9wdZWW_20IB3HhMUoH2dLyitWm5VZU
google-site-verification=xDNuQ7HHiwzDPok6K8T5BcxOhJ5fB0IL9vf2xLc0YAs
https://issues.sonatype.org/browse/OSSRH-53881
zoom-domain-verification=ZOOM_verify_108a73b936394b4d83555479d9dab5f2
parallels-domain-verification=f1c1fd03c9524b068006530a9bb9e5c99bb75ed2d50b4249aa...
google-site-verification=TwtsJNfrmc2RPw6q28QiKM-wnDaowIdVWWX7VhmTDvA
google-site-verification=MfIUBrtfhRkfARKs7m47C8eRPrJet6cRCq8M18-bHLo
google-site-verification=vGYy48g7sb4flIluKql8BFp3_6lKKjbQEUGHUDSxCdA
google-site-verification=MJYHtvI-o93g5yti0Uey9u-hglJQ6UnPfV0djrxlT9M
onetrust-domain-verification=857af271813b4850b88f8e48bc2b2e78
yahoo-verification-key=fksNKRwkSoLGj4TIoVX0Iybviy7x0xpgDkRv/8s9Vw4=
google-site-verification=OORAEPphyRjSBXDWDBGtbZo0oElHFsUfxPQBesBvU6s
ahrefs-site-verification_801b8774fd779b395b1c81e48f7900e305369a5ed19eb3201a3dbc9...
apple-domain-verification=AAz7BIDOOK5bj9VF
shopify-verification-code=VFL6jPSmWRU2VUyhiN8qIQTeSnfgpA
onetrust-domain-verification=155ccaa6043f43439fb8fdbd4b1be792
hubspot-domain-verification=ZGM1Zjc3YzktNjdmZC00N2JlLThiOTQtY2ViZjI2NTA2OTQw
drift-domain-verification=9cea5d6a9cc67d7d8195abc4b7afefed111d50ad43225041c8d5f7...
docker-verification=5298cfeb-b2af-4973-a4ae-72cfba77efa8
1password-site-verification=CEUWLSG27ZBI3NCDNFPDQXMJBY
MS=ms92090372
google-site-verification=1uigN3ZKYSw5lr4ZdVugeteeJpy31qMbRecLJ_1ZVJU
cursor-domain-verification-eb1g1h=nven1Rl68xcItm0SV3eqGeGaU
stripe-verification=5d4f5c71179a849cf68764a56809bfaada60fd51ca9a6c5b881b7477dbe9...
google-site-verification=Y907KhOV3MD6WEXxbbTsYtSj1k5r3lDAVtM7bT8Tw58
elevenlabs=P6f8fr3lI9xEMWdES8L3qlVe_hOiMQs7DN9MRcIhYx4
postman-domain-verification=de148d23ecf7857ca6894818bd6b04d811b8e7bebcd91e5060df...
google-site-verification=Nj3tLWEXpg6645jNi89eJ4d-f3EKhg0mywGniT6cnP0
status-page-domain-verification=fgb6hyksgk8x
SPF v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com i...
cdc0ecd8-b767-4b2a-961d-056ff91c50cf
google-site-verification=bQC1cPBMACHUOt271BPTfL6k2qsoXlrHkNNTW0bVGKg
openai-domain-verification=dv-X62J0FmW8lDn4eDouDTtdvnm
pinterest-site-verification=b91a2bb89d0241853d81d959d5a78f07
airtable-verification=a351d73cf64b3a7900588fe07af4eca6
tiktok-developers-site-verification=bTjMTogvil8AGPOJ6A2pysQYv811Q0ie
mongodb-site-verification=stxOuL7yJeLEHCRwM4KlS0w3Qn5QDXkt
adobe-idp-site-verification=2be841675181663752bc242d59d2428df60b607824db83ed808c...
wiz-domain-verification=7fe44deeceff62c6c3011ccf4b4ddae2fd6e94b39ec8cb2cb7e3343d...
CAALookup not available with standard resolver
Resolved in 107 ms
A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
DNSSEC
Signed and validating
PASS
Signed and validating
Info::
DNSSEC fully signed and chain validates (ECDSAP256SHA256)
A+
Multi-Resolver DNS Speed
Mean 23ms across 3 resolvers (spread 38ms)
PASS
Mean 23ms across 3 resolvers (spread 38ms)
Info::
Quad9: 2ms
Got: 2ms via 9.9.9.9:53
Info::
Google: 28ms
Got: 28ms via 8.8.8.8:53
Info::
Cloudflare: 40ms
Got: 40ms via 1.1.1.1:53
A
Redirect Chain
1 redirect(s), 166 ms total
PASS
1 redirect(s), 166 ms total
Info::
Single redirect
Got: https://canva.com → https://www.canva.com/ (301)
Info::
WWW normalization redirect

https://canva.com

54 ms · HTTP/1.1

301

https://www.canva.com/

112 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://canva.com30154 msHTTP/1.1CloudFront
2https://www.canva.com/403112 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2600:9000:218e:8c00:b:add6:7500:93a1, 2600:9000:218e:9000:b:add6:7500:93a1, 2600:9000:218e:c400:b:add6:7500:93a1, 2600:9000:218e:8600:b:add6:7500:93a1, 2600:9000:218e:da00:b:add6:7500:93a1, 2600:9000:218e:1200:b:add6:7500:93a1, 2600:9000:218e:9600:b:add6:7500:93a1, 2600:9000:218e:e00:b:add6:7500:93a1
Got: 17 ms connect
IPv6 Ready
AAAA Records 2600:9000:218e:8c00:b:add6:7500:93a1, 2600:9000:218e:9000:b:add6:7500:93a1, 2600:9000:218e:c400:b:add6:7500:93a1, 2600:9000:218e:8600:b:add6:7500:93a1, 2600:9000:218e:da00:b:add6:7500:93a1, 2600:9000:218e:1200:b:add6:7500:93a1, 2600:9000:218e:9600:b:add6:7500:93a1, 2600:9000:218e:e00:b:add6:7500:93a1 Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 3 URLs
PASS
robots.txt present, sitemap with 3 URLs
Info::
robots.txt is present
Got: 6527 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 3 entries
Info::
Sitemap index with 3 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 6527 B Sitemaps referenced 2 User-agents CCBot, img2dataset, FriendlyCrawler, *, LinkedInBot, GPTBot, Twitterbot, AdsIdxBot, PerplexityBot, ClaudeBot, anthropic-ai, Applebot-Extended, ICC-Crawler, Ai2Bot-Dolma, AdsBot-Google, Canva-Slackapp-LinkExpanding, Bytespider, Ai2Bot, Webzio-Extended, FacebookBot, Google-InspectionTool, Canva-Teamsapp-LinkExpanding, Claude-Web, meta-externalagent, Diffbot, facebookexternalhit, ImagesiftBot, Timpibot, Scrapy, omgili, Perplexity-User, VelenPublicWebCrawler Blocking No — crawling allowed
#              vnacccan
#           nVCCCNVccNCCNv
#         cCCCAa      aCCC
#       nCCCCa        nCCC
#      cCCCAv         ACCa                                           CACCn
#     aCCCCv         nVa     vcVNn  nVVa    cVc    aVNVv     cNNv   Cc  Cc    vaVNVa vcVa
#     CCCCa                nACCAcaAACCCc   nCCCa aCCCCCC    NCCCv   Cc  Cn  cNCCCVaNACCCA
#    aCCCC                cCCCV   cCCCA    VCCCaAA  CCCA    CCCCv    CACNvnVCCCAv  vCCCCv
#    cCCCC               aCCCN    VCCCa   vCCCCCV   CCCc    CCCCv    aCA  cCCCCv   nCCCN
#    aCCCC              nCCCCv    CCCA    ACCCCc    CCC    nCCCCn   vCN   VCCCc    NCCCn
#    aCCCCa            aCCCCC    NCCCc   NCCCCV    CCCN   C aCCCc  aCc    NCCCn   aCCCA   Nc
#     aCCCCn         nNV CCCCa nAACCCc  AACCCN    vCCCAaVC   ACCCaNAv     cCCCN vVACCCA vNA
#      aCCCCNav  vncACc   NCCCNn  VCCCcVvvCCCv     cCCCCV    vACCNn        cCCCCAa  aCCCAa
#        aNCCCCCCCCNa
#
#                See something you can improve? We're hiring SEOs and Engineers!
#                          Checkout canva.com/careers and get in touch
User-agent: *
Disallow: 
Disallow: /media/*
Disallow: /template/*
Disallow: /_ok
Disallow: /_blank
Disallow: *v=
Disallow: *utm_expid=
Disallow: *source=
Disallow: *utm_source=
Disallow: *utm_campaign=
Disallow: *utm_content=
Disallow: *__hstc=
Disallow: *reviews_page=
Disallow: *gclid=
Disallow: *magazineName=
Disallow: *_ga=
Disallow: *like=
Disallow: *sp_url=
Disallow: *fbclid=
Disallow: *country=
Disallow: *company_size=
Disallow: *_hsenc=
Disallow: *zd_source=
Disallow: *wt.mc_id=
Disallow: *via=
Disallow: *utm_medium=
Disallow: *spc-source=
Disallow: *sp=
Disallow: *sort=
Disallow: *sf11500465=
Disallow: *sa=
Disallow: *ref=
Disallow: *preview=
Disallow: *pr=
Disallow: *o=
Disallow: *NoCode=
Disallow: *mod=
Disallow: *kui=
Disallow: *industry=
Disallow: *iframe=
Disallow: *hsLang=
Disallow: *hsCtaTracking=
Disallow: *hash=
Disallow: *gh_jid=
Disallow: *filterTags=
Disallow: *clickId=
Disallow: *ca_referer=
Disallow: *author=
Disallow: *ak_action=
Disallow: *ad=
Disallow: *__hstc=
Disallow: *__+hsfp=
Disallow: /_ajax/
Disallow: /design/
Disallow: /design?create*
Disallow: /font-combinations/search/*
Disallow: /*/followers
Disallow: /*/followers/
Disallow: /*/following
Disallow: /*/following/
Disallow: /templates/*/*/?uid=*
Disallow: /templates/?uid=*
Allow: /templates/classroom-decoration
Allow: /t/E
Disallow: /templates/M
Disallow: /pt_br/modelos/M
Disallow: /es_es/plantillas/M
Disallow: /es_mx/plantillas/M
Disallow: /fr_fr/modeles/M
Disallow: /de_de/vorlagen/M
Disallow: /ru_ru/shablony/M
Disallow: /tr_tr/sablonlar/M
Disallow: /ja_jp/templates/M
Disallow: /ar_eg/templates/M
Disallow: /id_id/contoh/M
Disallow: /es_ar/plantillas/M
Disallow: /it_it/modelli/M
Disallow: /es_co/plantillas/M
Disallow: /pl_pl/szablony/M
Disallow: /th_th/templates/M
Disallow: /pt_pt/modelos/M
Disallow: /vi_vn/mau/M
Disallow: /nl_nl/sjablonen/M
Disallow: /ko_kr/templates/M
Disallow: /sv_se/mallar/M
Disallow: /zh_tw/templates/M
Disallow: /hi_in/templates/M
Disallow: /templates/*/MA
Disallow: /*/_m2/
Disallow: /_upload-widget
Disallow: /*/_upload-widget
Disallow: /_print/*
Disallow: /en_oz/
Disallow: /join/*
Disallow: /q/*
Disallow: *?filters=
Disallow: *&filters=
Disallow: /*/help/*?query=
Disallow: /*/help/*&query=
Disallow: /zh_cn/
Disallow: /en_psaccent/
Disallow: /en_instrume/
Disallow: /ar/
Disallow: /ar_ae/
Disallow: /ar_sa/
Disallow: /en_ph/
Disallow: /cdn-cgi/
Disallow: /*/login/verify-email
Disallow: /M/

User-agent: AdsBot-Google
User-agent: AdsIdxBot
User-agent: Google-InspectionTool
User-agent: facebookexternalhit
User-agent: LinkedInBot
User-agent: PerplexityBot
User-agent: Perplexity-User
User-agent: Canva-Slackapp-LinkExpanding
User-agent: Canva-Teamsapp-LinkExpanding
Allow: /

User-agent: GPTBot
User-agent: ClaudeBot
User-agent: CCBot
User-agent: Applebot-Extended
User-agent: anthropic-ai
User-agent: Claude-Web
Disallow: /
Allow: /create/
Allow: /ar_eg/create/
Allow: /da_dk/skabe/
Allow: /de_de/erstellen/
Allow: /es_ar/crear/
Allow: /es_co/crear/
Allow: /es_es/crear/
Allow: /es_mx/crear/
Allow: /es_us/crear/
Allow: /fr_fr/creer/
Allow: /hi_in/banaye/
Allow: /id_id/membuat/
Allow: /it_it/creare/
Allow: /ja_jp/create/
Allow: /ko_kr/create/
Allow: /ms_my/buat/
Allow: /nb_no/skape/
Allow: /nl_nl/maken/
Allow: /pl_pl/tworzyc/
Allow: /pt_br/criar/
Allow: /pt_pt/criar/
Allow: /ru_ru/sozdat/
Allow: /sv_se/skapa/
Allow: /th_th/create/
Allow: /tr_tr/yapma/
Allow: /uk_ua/stvoryty/
Allow: /vi_vn/thiet-ke/
Allow: /zh_hk/create/
Allow: /zh_tw/create/
Allow: /features/
Allow: /ar_eg/features/
Allow: /da_dk/funktioner/
Allow: /de_de/funktionen/
Allow: /es_ar/funciones/
Allow: /es_co/funciones/
Allow: /es_es/funciones/
Allow: /es_mx/funciones/
Allow: /es_us/funciones/
Allow: /fr_fr/outils/
Allow: /hi_in/features/
Allow: /id_id/fitur/
Allow: /it_it/strumenti/
Allow: /ja_jp/features/
Allow: /ko_kr/features/
Allow: /nl_nl/functies/
Allow: /pt_pt/ferramentas/
Allow: /sv_se/funktioner/
Allow: /th_th/features/
Allow: /tr_tr/ozellikler/
Allow: /vi_vn/tinh-nang/
Allow: /zh_hk/features/
Allow: /zh_tw/features/
Allow: /graphs/
Allow: /ar_eg/graphs/
Allow: /da_dk/grafer/
Allow: /de_de/diagramme/
Allow: /es_ar/graficos/
Allow: /es_co/graficos/
Allow: /es_es/graficos/
Allow: /es_mx/graficas/
Allow: /es_us/graficas/
Allow: /fr_fr/graphiques/
Allow: /hi_in/graphs/
Allow: /it_it/diagramma/
Allow: /ja_jp/graphs/
Allow: /ko_kr/graphs/
Allow: /nb_no/grafer/
Allow: /nl_nl/grafieken/
Allow: /pt_br/graficos/
Allow: /pt_pt/graficos/
Allow: /sv_se/grafer/
Allow: /th_th/graphs/
Allow: /tr_tr/grafik/
Allow: /tr_tr/sema/
Allow: /vi_vn/bieu-do/
Allow: /zh_hk/graphs/
Allow: /zh_tw/graphs/
Allow: /learn/
Allow: /de_de/lernen/
Allow: /fr_fr/decouvrir/
Allow: /ja_jp/learn/
Allow: /ko_kr/learn/
Allow: /pt_br/aprenda/
Allow: /ru_ru/obuchenie/
Allow: /help/
Allow: /*/help/
Allow: /design-school/
Allow: /*/design-school/
Allow: /ai-connector/
Allow: /*/ai-connector/
Allow: /developers/

User-agent: Bytespider
User-agent: meta-externalagent
User-agent: ImagesiftBot
User-agent: Timpibot
User-agent: Scrapy
User-agent: Ai2Bot
User-agent: Diffbot
User-agent: img2dataset
User-agent: ICC-Crawler
User-agent: FacebookBot
User-agent: VelenPublicWebCrawler
User-agent: FriendlyCrawler
User-agent: omgili
User-agent: Webzio-Extended
User-agent: Ai2Bot-Dolma
Disallow: /

User-agent: Twitterbot
Allow: /


Sitemap: https://sitemap.canva.com/sitemap_index.xml
Sitemap: https://www.canva.com/landing_page_sitemap_index.xml
sitemap.xml 200 OK
Type Sitemap Index URLs 3 entries Valid XML Yes
Child Sitemaps:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly redirects to HTTPS permanently
Got: HTTP 301

www / non-www

403https://www.canva.com/
200https://canva.com/

HTTP → HTTPS

301http://canva.com/ → https://canva.com/

Consistent

A+
Domain Intelligence
canva.com — via Gandi SAS, 25 years, 10 months old
PASS
canva.com — via Gandi SAS, 25 years, 10 months old
Info::
Domain registered until May 5, 2030 (3 years, 6 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: Gandi SAS
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

1273 days

May 5, 2030

SSL certificate

178 days

Issued by Amazon

Domain age

25 years, 10 months

Registered May 5, 2001

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Unknown

2600:9000:218e:8c00:b:add6:7500:93a1

Registrar

Gandi SAS

Unlocked 4 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar Gandi SAS
Created May 5, 2001 (25 years, 10 months ago)
Expires May 5, 2030 (3 years, 6 months)
Last Updated May 18, 2026
Name Servers ns-1421.awsdns-49.org, ns-1851.awsdns-39.co.uk, ns-253.awsdns-31.com, ns-730.awsdns-27.net
DNSSEC Enabled
Hosting
IP Address 2600:9000:218e:8c00:b:add6:7500:93a1
Data source: rdap (0.2s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 105 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
52 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
16 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
19 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
105 ms
Total Time Total request time from DNS lookup through full response.
106 ms

Connection waterfall

DNS Lookup 52 ms TCP Connect 16 ms TLS Handshake 19 ms Server Processing 18 ms Content Transfer 0 ms
A+
CDN Cache Observability
Cache state: FUNCTIONGENERATEDRESPONSE
PASS
Cache state: FUNCTIONGENERATEDRESPONSE
Info::
CDN cache state observable via 1 header(s)
Got: x-cache=FunctionGeneratedResponse from cloudfront
A+
Health Check Endpoint
Auth-protected health endpoint at https://canva.com/health (HTTP 403)
PASS
Auth-protected health endpoint at https://canva.com/health (HTTP 403)
Info::
Auth-protected health endpoint exposed at https://canva.com/health
Got: https://canva.com/health
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback