HOW.IS
?

How is canva.com?

Looks fine risk 0/100

Registered 25 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 70 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How canva.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
70 ms
HTTPS
190 d
left on a Amazon certificate
Age
25 years
registered 2001-05-05
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A13.227.65.127
13.227.65.49
13.227.65.34
13.227.65.69
AAAA2600:9000:2202:3200:b:add6:7500:93a1
2600:9000:2202:fa00:b:add6:7500:93a1
2600:9000:2202:c000:b:add6:7500:93a1
2600:9000:2202:4200:b:add6:7500:93a1
2600:9000:2202:8400:b:add6:7500:93a1
2600:9000:2202:7e00:b:add6:7500:93a1
2600:9000:2202:2a00:b:add6:7500:93a1
2600:9000:2202:e800:b:add6:7500:93a1
MX5 alt2.aspmx.l.google.com
10 alt4.aspmx.l.google.com
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 alt3.aspmx.l.google.com
NSns-730.awsdns-27.net
ns-1851.awsdns-39.co.uk
ns-253.awsdns-31.com
ns-1421.awsdns-49.org
TXTgoogle-site-verification=xDNuQ7HHiwzDPok6K8T5BcxOhJ5fB0IL9vf2xLc0YAs
google-site-verification=vGYy48g7sb4flIluKql8BFp3_6lKKjbQEUGHUDSxCdA
mgverify=34d839e7ad9cdafaaccc77da386dcff2c46e4a628449d8e434cd13b032c82201
google-site-verification=TwtsJNfrmc2RPw6q28QiKM-wnDaowIdVWWX7VhmTDvA
onetrust-domain-verification=155ccaa6043f43439fb8fdbd4b1be792
airtable-verification=a351d73cf64b3a7900588fe07af4eca6
monday-com-verification=LnZZjRw2c6n_jXge5OWXu9GWtGGjlxNtMteJuNqM0bQ
pinterest-site-verification=b91a2bb89d0241853d81d959d5a78f07
google-site-verification=ZZHXa27FmPeiiZ1sM6N3i3widAseyqpbpp5mfW18q5A
have-i-been-pwned-verification=b633a4fdd0ff3575f1580524a28c9c7d
bugcrowd-verification=400b9a149f7cdd8664c2e7e502482536
yahoo-verification-key=fksNKRwkSoLGj4TIoVX0Iybviy7x0xpgDkRv/8s9Vw4=
google-site-verification=2dvQv03NLacULRWLTE7UGnoYc0P18AKoAAg91FRtOTo
stripe-verification=ec89fd8a56a7c9b8a0271fb890adecdfe20b8c157ade22d326b0ab9389b43f9b
hubspot-developer-verification=ZWRmOWRlMjEtZGU1Zi00MTJiLWE4YjktNWQ3NmIyNDA5NDhm
https://issues.sonatype.org/browse/OSSRH-53881
facebook-domain-verification=05c971f78w3exkut5f717mw8obqmf3
google-site-verification=eAc0jqdGQQKV0P-Rce35fFYWbiRi-Ic4QZocWJC45OE
hubspot-domain-verification=ZGM1Zjc3YzktNjdmZC00N2JlLThiOTQtY2ViZjI2NTA2OTQw
wiz-domain-verification=7fe44deeceff62c6c3011ccf4b4ddae2fd6e94b39ec8cb2cb7e3343dc624d9c3
drift-domain-verification=9cea5d6a9cc67d7d8195abc4b7afefed111d50ad43225041c8d5f7fb7c2f6775
twilio-domain-verification=f221ae68020aa3916d82bef6ca2fcbc0
postman-domain-verification=de148d23ecf7857ca6894818bd6b04d811b8e7bebcd91e5060df8aee3824726c7cdc06b72d0197a2826fd99d08a687f4cd739c2af0b7894e81bffeaf880b818c
stripe-verification=f4e689eb94442db29e022a6d99d0d5225c45eb72488d9fdf1510b94fe6e85694
openai-domain-verification=dv-X62J0FmW8lDn4eDouDTtdvnm
apple-domain-verification=AAz7BIDOOK5bj9VF
v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com include:_spf4.canva.com include:_spf5.canva.com include:_spf6.canva.com include:_spf7.canva.com include:_spf8.canva.com include:_spf9.canva.com -all
mongodb-site-verification=stxOuL7yJeLEHCRwM4KlS0w3Qn5QDXkt
liveramp-site-verification=7cfkiVRS0afhs5IQ7o96bHcblYCH-SI_0G-eu7r9LsM
status-page-domain-verification=fgb6hyksgk8x
google-site-verification=JqtkyfjBz-Uq1Xqk7REatNCxZnlo4gYFis8EdI_gVQ0
google-site-verification=1uigN3ZKYSw5lr4ZdVugeteeJpy31qMbRecLJ_1ZVJU
hubspot-developer-verification=NDU5MWU5ODItY2E1Zi00YTY0LWEwNGEtNWU5M2EzOGIwZDll
lucidlink-verification=Q8D0J05EK61V0PE82T654XJBMC
google-site-verification=hZFAMgOOsawLXNZFTJ5XAsml2KJc5leHofbwIiLCl00
neat-pulse-domain-verification-KX9q8nX=db71101a-781f-4da4-86ad-2fe12ade2c34
parallels-domain-verification=f1c1fd03c9524b068006530a9bb9e5c99bb75ed2d50b4249aa50d897b66cc8d8
tiktok-developers-site-verification=bTjMTogvil8AGPOJ6A2pysQYv811Q0ie
google-site-verification=bn-oB_Sgkg-cPqCil91EY6tVtaRlq2x68HktpHFloeM
1password-site-verification=CEUWLSG27ZBI3NCDNFPDQXMJBY
docusign=4c293e32-cbde-4ddf-bec8-79108891d648
onetrust-domain-verification=857af271813b4850b88f8e48bc2b2e78
google-site-verification=a9fY2y2BlMyyaiLXgGNEIwYe80ZXchnC3Fib7-7CN30
gauntlet-domain-verification=H9sUOdHq/SMDoMyBvXJiKkoNcY9g+3uSQ17NNxJ/kY37wSJe8i7D9x50SuXPMSV0T8mxcFjDlUX+EVhpt+99Gg==
google-site-verification=CVeAVsJ3_hxhfhDQTbtvIbpzUIIvUZ03vQCSCx7fCZk
google-site-verification=MfIUBrtfhRkfARKs7m47C8eRPrJet6cRCq8M18-bHLo
google-site-verification=Nj3tLWEXpg6645jNi89eJ4d-f3EKhg0mywGniT6cnP0
google-site-verification=0UOVvHC1k0nMb_2YKhFkMRkp4yRlqN-9Va_WB8b1qV0
MS=ms92090372
airtable-verification=e13696d96fe5c6f38c47676debdd401e
google-site-verification=OORAEPphyRjSBXDWDBGtbZo0oElHFsUfxPQBesBvU6s
google-site-verification=MJYHtvI-o93g5yti0Uey9u-hglJQ6UnPfV0djrxlT9M
adobe-idp-site-verification=2be841675181663752bc242d59d2428df60b607824db83ed808c220becc78765
elevenlabs=P6f8f
RegistrationGandi SAS
registrarGandi SAS
registered2001-05-05
expires2030-05-05
last changed2026-05-18
ownerCanva Pty. Ltd.
nameserversns-1421.awsdns-49.org
ns-1851.awsdns-39.co.uk
ns-253.awsdns-31.com
ns-730.awsdns-27.net
statusclient transfer prohibited
registered 2001-05-05expires 2030-05-05
HTTPS certificate190 days left
validyes
issuerAmazon
coverscanva.com
protocolTLSv1.3
issued 2026-10-19expires 2027-05-04
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → com → canva.com
Email authenticationexcellent
SPFpass v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com include:_spf4.canva.com include:_spf5.canva.com include:_spf6.canva.com include:_spf7.canva.com include:_spf8.canva.com include:_spf9.canva.com -all
DMARCpass policy reject
DKIMfound: google, k1, s1, s2, mx

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 170/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop13.227.65.34Barracuda13.227.65.34UCEPROTECT Level 113.227.65.34SpamCop13.227.65.69Barracuda13.227.65.69UCEPROTECT Level 113.227.65.69SpamCop13.227.65.49Barracuda13.227.65.49UCEPROTECT Level 113.227.65.49SpamCop13.227.65.127Barracuda13.227.65.127UCEPROTECT Level 113.227.65.127

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=canva.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=canva.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on canva.com. Reference: /llms.txt.

Watch canva.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days