Just a moment...

technology software

corporate

entertainment media

English

g_state

cf_clearance

_cfuvid

__cf_bm

The domain 'www.canva.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The second-level label 'canva' is 5 characters long with two vowels and three consonants. Word splitting yields 2 words: can, va. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

html/30/e3/30e3d77e-8bff-457e-bd8a-56393e4094eb.html.gz

script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-5KUBlZAiV3iI5lls3m/Xmg'; base-uri 'self'; object-src 'none'; frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com https://enterprise.canva.com https://www.affinity.studio; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=9a3391f94c7ed372&app=anon_home&policyHash=53edb07b

script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static

default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;

script-src 'report-sample' 'nonce-3W-GDznuf_LFUSYDIyG0yw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com https://enterprise.canva.com https://www.affinity.studio;

frame-ancestors 'self'; report-uri https://csp.canva.com/_cspreport?app=cdn-cgi;

script-src 'report-sample' 'nonce-H12t3mofkFHnIQkAeaT7kQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

application/x-www-form-urlencoded;charset=UTF-8

script-src 'report-sample' 'nonce-tVI5OX8MPh2Cx6MzxXH-IA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

script-src 'report-sample' 'nonce-SVGWPmI5jmDHes7G6ojPUQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http

script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_content-management-files

c582221f35f581dd1680c3d52f15cea39253e1999e635570019ed2c3a1fe37dc

9be8a46c646c7d4d1eef5ca6894f0f153f164344c449f8f57cb48c398b51cecf

74afcdcda43f659c79d9c447f71bb1f4b8cb6eb27d5b614d360c46eab14b9df7

00ef3f5509b58fedc4af8e9827ef9fe7f80366a74a93056af3af2ea1bbeb9e03

27fa909708366b3d94386e9e04be65d53122dc7709aa29ee5939f40e94dc1919

8f12f51a44912b073b66e08d2fe717f641922ad8b9abb56806b0a7701d4648e2

89219489c01a6207eceef3c110509198c25c8c5f119b5cb923b6aa72d56a0860

aca04865280ce9e2663e6b4f1a4e8c8794efcdb7c85c4774cb3f5445eafd05b4

a8a2bd66c0732a52d4046f507e0785dda3f479ed9081cd5f04b21d617eb705e0

0c513ddc88a0e4cc18f2827fd0f5a29c3b9fb9b240483e03658af4b4862b1dea

04df1bc50465e6536b622c1c81d995318ac23686ec865c8ceccde1144c86556f

6b3d62f0b3ef70fa2bff23ff06eb891fee6e781461ee3f6c0f5c9aec349c4254

8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

c4fd4e7b9ac29a13306e32d94c695a34571b1bd0120c1bf693e86823d8998f1a

0695b47ce964892905ec27ce6b79ba97449598b39d1a26ef43c63573037f392a

app-name

width=device-width, initial-scale=1, interactive-widget=resizes-content

viewport

referrer

https://content-management-files.canva.com/c37135f6-6d9a-4920-b659-4f5e12698b8d/og-image-global-1200x630.jpg

twitter:card

twitter:site

twitter:creator

twitter:title

online design website,graphic design software,free online design software,free design media and templates,Canva

keywords

Canva is a free-to-use online graphic design tool. Use it to create social media posts, presentations, posters, videos, logos and more.

description

twitter:description

A8o5T4MyEkRZqLA9WeG2XTFdV5tsX2Prg85xyQ+RL1btVuybB1K/EQ+7JUsPK+J32oBMTnsoF9B4A+qTlL6efgQAAABweyJvcmlnaW4iOiJodHRwczovL2FjY291bnRzLmdvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkZlZENtQnV0dG9uTW9kZSIsImV4cGlyeSI6MTc0NDY3NTIwMCwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

Canva

window['__sentry_config__'] = {"dsn":"https:\u002F\u002F3e6b0deb414549c8901b5382885e478b@o13855.ingest.sentry.io\u002F5862012","release":"20251119-21-8f857c3","environment":"prod","autoSessionTracking":true,"initialScope":{"tags":{"deploymentGroup":"STABLE"}}};

document.documentElement.classList.replace('adaptive', window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');

(function() {window['__canva_public_path__'] = 'https:\/\/static.canva.com\/web\/'; window['bootstrap'] = JSON.parse('{"base":{"A?":"B","L":false,"N":false,"E":"8f857c3cfef41dba2109026c127590ad66f5bbd

Requests	IP Address	Location	AS Autonomous System
197	104.16.103.112	United States	AS13335CLOUDFLARENET
17	104.16.102.112	United States	AS13335CLOUDFLARENET
17	142.251.168.84	United States	AS15169GOOGLE
17	2606:4700::6810:6770	United States	AS13335CLOUDFLARENET
17	2606:4700::6810:6670	United States	AS13335CLOUDFLARENET
17	2606:4700::6810:5049	United States	AS13335CLOUDFLARENET
17	2a00:1450:400c:c0a::54	Belgium	AS15169GOOGLE
17	2606:4700::6810:4f49	United States	AS13335CLOUDFLARENET
17	104.16.80.73	United States	AS13335CLOUDFLARENET
4	142.251.173.84	United States	AS15169GOOGLE
210	12	-	-

Security Scan Report: www.canva.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History