Bug bounty program
CA
Canva
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains2,392
| Name | Scope | First seen |
|---|---|---|
| google.combucky.33733.confluence.org-anissa-cse4787ta-machine.community-share-upload-cmnlistmail.0393c-finion-public-service.canva.cndata, tools | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-areariservata-bucket-east-6-rpcgw-sql.korcmnlistautoconfig.0393c-finion-public-service.canva.cndata | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.share-upload.1-cseajtgm.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-bucket-east-6-rpc-tpeuction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.testing.bucket-east-6-rpc-tpe.1.canva.cnapi, auth, data, internal, test | In scope | 2026-11-14 |
| wire.community.bucket-east-6-rpcgw-sql.cloudfrontorgb.1.canva.cndata | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.upload.areaglobal.prod.1.canva.cndata | In scope | 2026-11-14 |
| img.r0.ruletheearth-production-737oia-dot-gov.upload.githubsso.prod.1.canva.cndata | In scope | 2026-11-14 |
| r0.ruletheearth-production-bucket-sh10-dot-gov.jobs-com-rctivicenginx-com-internal.sso.prodv1rmund-staginggggggggggg.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.apijobs-com-rctivicenginx-com-internal.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-combucky-latinamerica-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-csestoresmedia-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-cmnlistmail-cdnuction-737oia-dot-gov.jobs-com-rctivicenginx-com-areariservataidw-nautilus.sso.share-upload.1.canva.cnauth, data | In scope | 2026-11-14 |
| r0.ruletheearth-production-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-1phpdevs.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-csez55i2keriser1pantheon.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-0cj7zfvenqxwwuction-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-cmnlistmail-cdn298facebookapp-737oia-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-cmnlistmail-cdnuction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-csestoresstudentstyytpihnduction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-devmobile00643-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-production-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-repositorycmnlistmailuction-com-combucky-dot-gov.jobs-com-rctivicenginx-com-internal-nautilus.sso.share-upload.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-com-combucky-dot-gov.jobs-com-rctivicenginx-com-nort-z55i2kerisere10dvkv-nautilus.sso.share-upload.1.canva.cnauth, data | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.org-anissa-areariservatzcbd5zkupel.sso.share-upload.1.canva.cnauth, data | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.org0393c-finion-public-service-nautilus.sso.share-upload.1.canva.cnauth, data | In scope | 2026-11-14 |
| r0.ruletheearth-serviceruletheearthjwxt1uction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.serviceruletheearthjwxt1.sso.video-upload-anissa-payment-machine-documents.1.canva.cnauth, data, internal | In scope | 2026-11-14 |
| wire.community.bucket-east-6-rpcgw-sql.z55i2keriscprodxb.1.canva.cndata | In scope | 2026-11-14 |
| wire.community-bucket.cse-areariservatata.z55i2kerisere10dvkv.1.canva.cndata | In scope | 2026-11-14 |
| wire.community-bucket.cse-z55i2kerisere10dvkvcn.z55i2kerisere10dvkv.1.canva.cndata | In scope | 2026-11-14 |
| wire.community.cse-z55i2kerisere10dvkv-proxy.share-adsimg-s3.z55i2kerisere10dvkv.1.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.engine-brasil-northwest-1.brasilprod.s4communityvrimentkhs-nortmedia.ftpanva.brasil.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.cn-central-1.cnprod.community-parkeronline.2021ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.staging-crm.cnprod.nortmedias4devkhs.2021ftpanva.cn.canva.cndata, staging | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.cn-central-1.hkg-cse-z55i2kerisere10dvkv.nortmedias4devkhs.2021ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.prometheus.cnabloyfr.s4devkhs.cseajtgmftpanva.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.engine-cn-northwest-1.cnprod.s4combuervata-machinekhs-nortmedia.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.engine-cn-northwest-1.cnprod.s4communityvrimentkhs-nortmedia.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.chef-h21-updated.inst.aws.cn-northwest-1.font-public.cnarearisersrvjpinsysail.s4devkhs-tur.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.cert.budget.h21-updated.inst.aws.cn-northwest-1.font-public.cnarearisersrvjpinsysail.s4devkhs-tur.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.k48kjihgfedcba987658europe.h21-updated.inst.aws.prometheus.cnprod.api.s4devkhs.ftpanva.cn.canva.cnapi, data, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.server-aws.private.cn-northwest-1.font-public.cncommunitys4272excaliburcse-z55i2kerisere10dvkv.s4devkhs.ftpanva.cn.canva.cndata, internal | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.server-aws.cn-northwest-1.font-public.cncommunitys4272excaliburcse-z55i2kerisere10dvkv.s4devkhs.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.server-aws.cn-northwest-1.font-anisse.cnprod.s4devkhs.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.rrornwkddbalistmailsl78d.h21-updated.inst.server-aws.cn-northwest-1.font-public.cnprod.s4devkhs.ftpanva.cn.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload-amobile80673.budget.h21-updated.inst.aws.prometheus.cnprod.s4devkhs.ftpanva.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| 1cba.vriment-2.wire.community-share-upload.budget.h21-updated.inst.scm.cn-northwest-1.na-cnprod.s4devkhs.ftpanva.cn.canva.cndata, git | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.prometheus.cnprod.s4devkhs.ftpanvalb.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.cn-northwest-1.cnprod.nortmedias4devkhs.ftpanvana.cn.canva.cndata | In scope | 2026-11-14 |
| content-management-files.canva.cnadmin, data | In scope | 2026-11-14 |
| google.combucky.mobile33733.video-upload-anissa-areariservata-machine.cmnlistmail.cse-gi379admin.canva.cnadmin, data | In scope | 2026-11-14 |
| google.combucky.an60563development-9utsrqponmlkjihgfed.video-upload-anissa-vpn-machine.cmnlistmailpreprod.cse-gi379admin.canva.cnadmin, data, dev, vpn | In scope | 2026-11-14 |
| google.combucky.mobile33733.video-upload-anissa-areariservata-machine.cmnlistmail.cse-gi379adminfw.canva.cndata | In scope | 2026-11-14 |
| r0.rulegokube-81913gw-upload-5p5h429-xsrvjpinsys-privateyajama6.app.cse4.canva.cndata | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.cn-central-1.cnprod.s4devkhs.ftpanva.frontpage-cnadm.canva.cndata | In scope | 2026-11-14 |
| r0.rule-ftp.g84.canva.cndata | In scope | 2026-11-14 |
| google.combucky.mobile33733.video-upload-anissa-areariservata-machine.cmnlistmail16.cse-gi379admin.na.canva.cnadmin, data | In scope | 2026-11-14 |
| r0.rulegodosoft-uploads-xsrvjpinsys-private.app.premiertytcos.canva.cndata, internal | In scope | 2026-11-14 |
| r0.rulegodosoft-uploads-xsrvjpinsys-private.app.proxy-w3rpchelp-public-cse.canva.cndata, internal | In scope | 2026-11-14 |
| r0.rulegodosoft-uploads-xsrvjpinsys-private.app.proxy-w3rpchelp-tomcatjobs-com-rctivicenginx-com-internal-cse.canva.cndata, internal | In scope | 2026-11-14 |
| google.combucky.33733.secure-org-andvideo-upload-aniecal.cmnlistmail.ruletheearthjwxt1-csestores.canva.cndata | In scope | 2026-11-14 |
| google.combucky.beta-east-6-rpcjune-ftp33733.testing1-org-anissa-areariservata-machine.cmnlistmail.ruletheearthjwxt1-csestores.canva.cndata, staging, test | In scope | 2026-11-14 |
| google.combucky.mobile33733.video-upload-anissa-areariservata-machine.cmnlistmail.b.cse-gi379admin.s.canva.cnadmin, data | In scope | 2026-11-14 |
| google.combucky.mobile33733.containervideo-upload-anissa-areariservata-machine.cmnlistmail.cse-gi379admin.s.canva.cnadmin, data | In scope | 2026-11-14 |
| google.combucky.mobile33733.containervideo-upload-redirectgmail.cmnlistmail.cse-gi379admin.s.canva.cnadmin, data | In scope | 2026-11-14 |
| google.combucky.mobile33733.promotionvideo-upload-anissa-areariservata-machine.cmnlistmail.cse-gi379admin.s.canva.cnadmin, data | In scope | 2026-11-14 |
| share-upload.canva.cndata | In scope | 2026-11-14 |
| r0.rulegodosoft-022facebookapp-xsrvjpinsys-staging.s3-app.csedownloader.cse.storage-cse.canva.cndata, staging | In scope | 2026-11-14 |
| upload.canva.cndata | In scope | 2026-11-14 |
| video-upload.canva.cndata | In scope | 2026-11-14 |
| r0.rulegodosoft-5p5h429-xjandediajenkins-privateyajama6.app.video-upload-administrator-areariservata-machine-cse-frontpage.canva.cnadmin, data | In scope | 2026-11-14 |
| r0.rulegodosoft-5p5h429-xsrvjpinsys-privateyajama6.app.video-upload-administrator-areariservata-machine-cse-frontpage.canva.cnadmin, data | In scope | 2026-11-14 |
| r0.rulegodosoft-9utsrqponmlkjihgfed-xsrvjpinsys-privateyajama6.app.video-upload-administrator-areariservata-machine-cse-frontpage.canva.cnadmin, data | In scope | 2026-11-14 |
| r0.rulegodosoft-cmnli33733mobile43023-xsrvjpinsys-privateyajama6.app.video-upload-administrator-areariservata-machine-cse-frontpage.canva.cnadmin, data | In scope | 2026-11-14 |
| r0.rulegodosoft-uploads-xsrvjpinsys-private-april.app.w3rpchelp-33733cseqipa2924-cse.canva.cndata, internal | In scope | 2026-11-14 |
| r0.rulegodosoft-uploads-xsrvjpinsys-private-april.app.w3rpchelp-public-cse.canva.cndata, internal | In scope | 2026-11-14 |
| assistant-data-bucket.canva.comdata | In scope | 2026-11-14 |
| audio-ftp.canva.comdata | In scope | 2026-11-14 |
| audio-upload.canva.comdata | In scope | 2026-11-14 |
| content-management-files.canva.comadmin, data | In scope | 2026-11-14 |
| file-uploads.cse.canva.comdata | In scope | 2026-11-14 |
| public-file-uploads.cse.canva.comdata | In scope | 2026-11-14 |
| unhcr-design-for-a-cause-uploads.cse.canva.comdata | In scope | 2026-11-14 |
| ftp.canva.comdata | In scope | 2026-11-14 |
| www.ftp.canva.comdata | In scope | 2026-11-14 |
| ftp2.canva.comdata | In scope | 2026-11-14 |
| import-contributor-upload.canva.comdata | In scope | 2026-11-14 |
| backup.media-private.canva.comdata, internal | In scope | 2026-11-14 |
| backup.media-public.canva.comdata | In scope | 2026-11-14 |
| share-upload.canva.comdata | In scope | 2026-11-14 |
| upload.canva.comdata | In scope | 2026-11-14 |
| uploads.canva.comdata | In scope | 2026-11-14 |
| video-upload.canva.comdata | In scope | 2026-11-14 |
2,392 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.