Infrastructure - https://www.canva.com BeaverCheck Audit

B

DNS Records

2 A records, 31 ms lookup

REVIEW

2 A records, 31 ms lookup

Resolves to 2 IPv4 address(es)

Got: 104.16.102.112, 104.16.103.112

Has 2 IPv6 (AAAA) record(s)

Got: 2606:4700::6810:6670, 2606:4700::6810:6770

CNAME record at zone apex

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Got: www.canva.com.cdn.cloudflare.net

No NS records found

No MX records — email not configured via DNS

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

No SPF record found in TXT records

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

DNS resolution time: 31 ms

Got: 31 ms

A	104.16.102.112, 104.16.103.112
AAAA	2606:4700::6810:6670, 2606:4700::6810:6770
CNAME	www.canva.com.cdn.cloudflare.net
NS	—
MX	—
TXT	—
CAA	Lookup not available with standard resolver

Resolved in 31 ms

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Why this matters

CNAME at the apex (example.com) breaks every other apex record (MX, TXT, NS) — DNS-protocol violation per RFC 1034.

Learn more ▾

RFC 1034 forbids CNAME alongside other records at the same name. Some DNS providers offer ALIAS / ANAME / flattened-CNAME records that work around this — use those instead. Otherwise apex-level CNAME breaks email (no MX), domain ownership verification (no TXT), and more.

Source: RFC 1034

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

B

TLS Certificate Expiry & Recommendations

256 days until leaf cert expires — 2 issues to address

REVIEW

Certificate validity

256

days left

0d 30d 60d 90d+

Recommended actions

Submit your domain to hstspreload.org to be added to the Chrome preload list
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

B

CDN & Delivery

Cloudflare

REVIEW

Cloudflare

Site is served via Cloudflare CDN (edge: CDG)

Got: cf-ray: 9e8baead2cd40f1e-CDG

CDN Detected: Cloudflare

Provider Cloudflare Evidence cf-ray: 9e8baead2cd40f1e-CDG

A+

Redirect Chain

No redirects — direct access

PASS

No redirects — direct access

Got: https://www.canva.com

https://www.canva.com

173 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://www.canva.com	200	173 ms	HTTP/1.1	cloudflare

A+

IPv6 Readiness

IPv6 reachable (16 ms)

PASS

IPv6 reachable (16 ms)

IPv6 is configured and reachable at 2606:4700::6810:6670, 2606:4700::6810:6770

Got: 16 ms connect

IPv6 Ready

AAAA Records 2606:4700::6810:6670, 2606:4700::6810:6770 Connection Reachable (16 ms)

A+

Crawlability

robots.txt present, sitemap with 2 URLs

PASS

robots.txt present, sitemap with 2 URLs

robots.txt is present

Got: 6216 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 2 entries

Sitemap index with 2 child sitemaps

robots.txt references sitemap

robots.txt 200 OK

Size 6216 B Sitemaps referenced 2 User-agents CCBot, Diffbot, VelenPublicWebCrawler, img2dataset, ICC-Crawler, *, AdsBot-Google, AdsIdxBot, LinkedInBot, GPTBot, Claude-Web, facebookexternalhit, Canva-Slackapp-LinkExpanding, Scrapy, Ai2Bot, omgili, Ai2Bot-Dolma, Google-InspectionTool, meta-externalagent, PerplexityBot, Perplexity-User, Webzio-Extended, Bytespider, Twitterbot, Applebot-Extended, ImagesiftBot, Timpibot, FriendlyCrawler, Canva-Teamsapp-LinkExpanding, ClaudeBot, anthropic-ai, FacebookBot Blocking No — crawling allowed

#              vnacccan
#           nVCCCNVccNCCNv
#         cCCCAa      aCCC
#       nCCCCa        nCCC
#      cCCCAv         ACCa                                           CACCn
#     aCCCCv         nVa     vcVNn  nVVa    cVc    aVNVv     cNNv   Cc  Cc    vaVNVa vcVa
#     CCCCa                nACCAcaAACCCc   nCCCa aCCCCCC    NCCCv   Cc  Cn  cNCCCVaNACCCA
#    aCCCC                cCCCV   cCCCA    VCCCaAA  CCCA    CCCCv    CACNvnVCCCAv  vCCCCv
#    cCCCC               aCCCN    VCCCa   vCCCCCV   CCCc    CCCCv    aCA  cCCCCv   nCCCN
#    aCCCC              nCCCCv    CCCA    ACCCCc    CCC    nCCCCn   vCN   VCCCc    NCCCn
#    aCCCCa            aCCCCC    NCCCc   NCCCCV    CCCN   C aCCCc  aCc    NCCCn   aCCCA   Nc
#     aCCCCn         nNV CCCCa nAACCCc  AACCCN    vCCCAaVC   ACCCaNAv     cCCCN vVACCCA vNA
#      aCCCCNav  vncACc   NCCCNn  VCCCcVvvCCCv     cCCCCV    vACCNn        cCCCCAa  aCCCAa
#        aNCCCCCCCCNa
#
#                See something you can improve? We're hiring SEOs and Engineers!
#                          Checkout canva.com/careers and get in touch
User-agent: *
Disallow: 
Disallow: /media/*
Disallow: /template/*
Disallow: /_ok
Disallow: /_blank
Disallow: *v=
Disallow: *utm_expid=
Disallow: *source=
Disallow: *utm_source=
Disallow: *utm_campaign=
Disallow: *utm_content=
Disallow: *__hstc=
Disallow: *reviews_page=
Disallow: *gclid=
Disallow: *magazineName=
Disallow: *_ga=
Disallow: *like=
Disallow: *sp_url=
Disallow: *fbclid=
Disallow: *country=
Disallow: *company_size=
Disallow: *_hsenc=
Disallow: *zd_source=
Disallow: *wt.mc_id=
Disallow: *via=
Disallow: *utm_medium=
Disallow: *spc-source=
Disallow: *sp=
Disallow: *sort=
Disallow: *sf11500465=
Disallow: *sa=
Disallow: *ref=
Disallow: *preview=
Disallow: *pr=
Disallow: *o=
Disallow: *NoCode=
Disallow: *mod=
Disallow: *kui=
Disallow: *industry=
Disallow: *iframe=
Disallow: *hsLang=
Disallow: *hsCtaTracking=
Disallow: *hash=
Disallow: *gh_jid=
Disallow: *filterTags=
Disallow: *clickId=
Disallow: *ca_referer=
Disallow: *author=
Disallow: *ak_action=
Disallow: *ad=
Disallow: *__hstc=
Disallow: *__+hsfp=
Disallow: /_ajax/
Disallow: /design/
Disallow: /design?create*
Disallow: /font-combinations/search/*
Disallow: /*/followers
Disallow: /*/followers/
Disallow: /*/following
Disallow: /*/following/
Disallow: /templates/*/*/?uid=*
Disallow: /templates/?uid=*
Allow: /templates/classroom-decoration
Allow: /t/E
Disallow: /templates/M
Disallow: /pt_br/modelos/M
Disallow: /es_es/plantillas/M
Disallow: /es_mx/plantillas/M
Disallow: /fr_fr/modeles/M
Disallow: /de_de/vorlagen/M
Disallow: /ru_ru/shablony/M
Disallow: /tr_tr/sablonlar/M
Disallow: /ja_jp/templates/M
Disallow: /ar_eg/templates/M
Disallow: /id_id/contoh/M
Disallow: /es_ar/plantillas/M
Disallow: /it_it/modelli/M
Disallow: /es_co/plantillas/M
Disallow: /pl_pl/szablony/M
Disallow: /th_th/templates/M
Disallow: /pt_pt/modelos/M
Disallow: /vi_vn/mau/M
Disallow: /nl_nl/sjablonen/M
Disallow: /ko_kr/templates/M
Disallow: /sv_se/mallar/M
Disallow: /zh_tw/templates/M
Disallow: /hi_in/templates/M
Disallow: /templates/*/MA
Disallow: /*/_m2/
Disallow: /_print/*
Disallow: /en_oz/
Disallow: /join/*
Disallow: /q/*
Disallow: *?filters=
Disallow: *&filters=
Disallow: /zh_cn/
Disallow: /en_psaccent/
Disallow: /en_instrume/
Disallow: /ar/
Disallow: /ar_ae/
Disallow: /ar_sa/
Disallow: /en_ph/
Disallow: /cdn-cgi/
Disallow: /*/login/verify-email
Disallow: /M/

User-agent: AdsBot-Google
User-agent: AdsIdxBot
User-agent: Google-InspectionTool
User-agent: facebookexternalhit
User-agent: LinkedInBot
User-agent: PerplexityBot
User-agent: Perplexity-User
User-agent: Canva-Slackapp-LinkExpanding
User-agent: Canva-Teamsapp-LinkExpanding
Allow: /

User-agent: GPTBot
User-agent: ClaudeBot
User-agent: CCBot
User-agent: Applebot-Extended
User-agent: anthropic-ai
User-agent: Claude-Web
Disallow: /
Allow: /create/
Allow: /ar_eg/create/
Allow: /da_dk/skabe/
Allow: /de_de/erstellen/
Allow: /es_ar/crear/
Allow: /es_co/crear/
Allow: /es_es/crear/
Allow: /es_mx/crear/
Allow: /es_us/crear/
Allow: /fr_fr/creer/
Allow: /hi_in/banaye/
Allow: /id_id/membuat/
Allow: /it_it/creare/
Allow: /ja_jp/create/
Allow: /ko_kr/create/
Allow: /ms_my/buat/
Allow: /nb_no/skape/
Allow: /nl_nl/maken/
Allow: /pl_pl/tworzyc/
Allow: /pt_br/criar/
Allow: /pt_pt/criar/
Allow: /ru_ru/sozdat/
Allow: /sv_se/skapa/
Allow: /th_th/create/
Allow: /uk_ua/stvoryty/
Allow: /vi_vn/thiet-ke/
Allow: /zh_hk/create/
Allow: /zh_tw/create/
Allow: /features/
Allow: /ar_eg/features/
Allow: /da_dk/funktioner/
Allow: /de_de/funktionen/
Allow: /es_ar/funciones/
Allow: /es_co/funciones/
Allow: /es_es/funciones/
Allow: /es_mx/funciones/
Allow: /es_us/funciones/
Allow: /fr_fr/outils/
Allow: /hi_in/features/
Allow: /id_id/fitur/
Allow: /it_it/strumenti/
Allow: /ja_jp/features/
Allow: /ko_kr/features/
Allow: /nl_nl/functies/
Allow: /pt_pt/ferramentas/
Allow: /sv_se/funktioner/
Allow: /th_th/features/
Allow: /vi_vn/tinh-nang/
Allow: /zh_hk/features/
Allow: /zh_tw/features/
Allow: /graphs/
Allow: /ar_eg/graphs/
Allow: /da_dk/grafer/
Allow: /de_de/diagramme/
Allow: /es_ar/graficos/
Allow: /es_co/graficos/
Allow: /es_es/graficos/
Allow: /es_mx/graficas/
Allow: /es_us/graficas/
Allow: /fr_fr/graphiques/
Allow: /hi_in/graphs/
Allow: /it_it/diagramma/
Allow: /ja_jp/graphs/
Allow: /ko_kr/graphs/
Allow: /nb_no/grafer/
Allow: /nl_nl/grafieken/
Allow: /pt_br/graficos/
Allow: /pt_pt/graficos/
Allow: /sv_se/grafer/
Allow: /th_th/graphs/
Allow: /vi_vn/bieu-do/
Allow: /zh_hk/graphs/
Allow: /zh_tw/graphs/
Allow: /learn/
Allow: /de_de/lernen/
Allow: /fr_fr/decouvrir/
Allow: /ja_jp/learn/
Allow: /ko_kr/learn/
Allow: /pt_br/aprenda/
Allow: /ru_ru/obuchenie/
Allow: /help/
Allow: /*/help/

User-agent: Bytespider
User-agent: meta-externalagent
User-agent: ImagesiftBot
User-agent: Timpibot
User-agent: Scrapy
User-agent: Ai2Bot
User-agent: Diffbot
User-agent: img2dataset
User-agent: ICC-Crawler
User-agent: FacebookBot
User-agent: VelenPublicWebCrawler
User-agent: FriendlyCrawler
User-agent: omgili
User-agent: Webzio-Extended
User-agent: Ai2Bot-Dolma
Disallow: /

User-agent: Twitterbot
Allow: /


Sitemap: https://sitemap.canva.com/sitemap_index.xml
Sitemap: https://www.canva.com/landing_page_sitemap_index.xml

sitemap.xml 200 OK

Type Sitemap Index URLs 2 entries Valid XML Yes

Child Sitemaps:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: www)

HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.canva.com/

301https://canva.com/

Preferred variant: www

HTTP → HTTPS

301http://www.canva.com/ → https://www.canva.com/

Consistent

A+

Domain Intelligence

canva.com — via Gandi SAS, 25 years, 3 months old

PASS

canva.com — via Gandi SAS, 25 years, 3 months old

Domain registered until May 5, 2030 (4 years, 1 months remaining)

DNSSEC is enabled

Registrar: Gandi SAS

Domain expiry

1392 days

May 5, 2030

SSL certificate

256 days

Issued by Amazon

Domain age

25 years, 3 months

Registered May 5, 2001

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Unknown

2600:9000:20a5:da00:b:add6:7500:93a1

Registrar

Gandi SAS

Lock status unknown 4 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Registrar Gandi SAS

Created May 5, 2001 (25 years, 3 months ago)

Expires May 5, 2030 (4 years, 1 months)

Last Updated January 14, 2026

Name Servers ns-1421.awsdns-49.org, ns-1851.awsdns-39.co.uk, ns-253.awsdns-31.com, ns-730.awsdns-27.net

DNSSEC Enabled

Hosting

IP Address 2600:9000:20a5:da00:b:add6:7500:93a1

Data source: rdap (0.1s)

A+

HTTP Probe Timing

Total 97 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

37 ms

TCP Connect

17 ms

TLS Handshake

20 ms

Time to First Byte

97 ms

Total Time

97 ms

Connection waterfall

DNS Lookup 37 ms TCP Connect 17 ms TLS Handshake 20 ms Server Processing 23 ms Content Transfer 0 ms