Bug bounty program
CA
Canva
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains2,392
| Name | Scope | First seen |
|---|---|---|
| google.combucky.33733.org-anissa-areariservata-machine.cmnlistmail.0393c-finion-public-service-applicationanisscse-dev1.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733.org-an60563development.cmnlistmail.0393c-finion-public-service.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-areariservata-machine46233development.cmnlistmail.0393c-finion-public-service.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-arold-finion-enzoas-service-dev-1.cmnlistmail.0393c-finion-public-service.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-community-old-finion-enzoas-service-dev.cmnlistmail.0393c-finion-public-service.canva.cndev, legacy | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-areariservata-machine.cvpnk8s-dev-korea.0393c-finion-public-service.canva.cndev | In scope | 2026-11-14 |
| google.combucky.3373320.org-anissa-areariservata-machine.cvpnk8s-dev.0393c-finion-public-service.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-areariservata-machine.cmnlistmail.0393c-finion-public-service46233development.canva.cndev | In scope | 2026-11-14 |
| wire.community.public-k8s-dev.apac.1.canva.cndev, tools | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-337332010.sso.dev1prodv1k8s-prd.1.canva.cnauth, dev | In scope | 2026-11-14 |
| r0.ruletheearth-htpp0lglobal-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.dev1prodv1k8s-prd.1.canva.cnauth, dev, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prod33733riservata-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.dev1prodv1k8s-prd.1.canva.cnauth, dev, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.dev1prodv1k8s-prd.1.canva.cnauth, dev, internal | In scope | 2026-11-14 |
| wire.community.k48kjihgfedcba987658.cse-develop.csayoy.develop.1.canva.cndev | In scope | 2026-11-14 |
| wire.community.k48kjihgfedcba987658.cse-develop.stg.develop.1.canva.cndev, staging | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.machine46233development.h21-global.1.canva.cndev, internal | In scope | 2026-11-14 |
| r0.ruletheearth-fw-737oia-dot-gov-tpeuction.org-anissa-aservice46233development-machine-acc.sso.prod.1.canva.cnauth, dev | In scope | 2026-11-14 |
| r0.ruletheearth-production-33733-elasticbeanstalk-dot-gov.jobs-com-rctivicenginx-com-internal.development.sso.prodv1-qutsrqponmlkjihgfedcbaqlegoryfrontsharesrqponproduction.1.canva.cnauth, dev, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prodcse-cse-db02dev-737oia-dot-gov.jobs-com-rctivicenginx-com-internal-games.sso.prodv1hw.1.canva.cnauth, dev, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prodcse-jinzanguojiyulehaifa-737oia-dot-gov.jobs-com-rctivicenginx-com-k8s-dev-games.sso.prodv1hw.1.canva.cnauth, dev, tools | In scope | 2026-11-14 |
| google.combucky-staging.org-anissa-ar10zyxwvutsrq1db02dev-machine.anissa-areariservata-machine.cmnlistmail.api.altcses53.canva.cnapi, dev, staging | In scope | 2026-11-14 |
| google.combucky.an60563development-9utsrqponmlkjihgfed.video-upload-anissa-vpn-machine.cmnlistmailpreprod.cse-gi379admin.canva.cnadmin, data, dev, vpn | In scope | 2026-11-14 |
| r0.rulegodosoft-preview-xsrvjpinsys-private.arearisingedfacilities.develop-cse.canva.cndev, internal, staging | In scope | 2026-11-14 |
| r0.rulegodosoft-preview-xsrvjpinsys-private.org-anissa-arearisejunive.develop-cse.canva.cndev, internal, staging | In scope | 2026-11-14 |
| r0.rulegodosoft-preview-cloudfront-private.app.develop-cselb.canva.cndev, internal, staging | In scope | 2026-11-14 |
| r0.rulegodosoft-preview-xsrvjpinsys-private.app.develop-cselb.canva.cndev, internal, staging | In scope | 2026-11-14 |
| google.combucky.22313development.anissa-areariservata-machine.cmnlistmail.cse.lanalyser.canva.cndev | In scope | 2026-11-14 |
| wire.community-dev.lax1cmnlistmail-net-cla-g.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733-dev.org-anissa-devopsata-machine.cmnlistmail.ruletheearthjwxt1-csestores.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733dev1.org-anissa-areariservata-machine.devmobile77393cmnlistmail.ruletheearthjwxt1-csestores.canva.cndev | In scope | 2026-11-14 |
| google.combucky.33733development.anissa-arearuletheearthjwxt1-csemaxpsh1104umlkji-cse-confluence.cmnlistmail.cse.s1018.canva.cndev, tools | In scope | 2026-11-14 |
| dev-static.canva.comdev | In scope | 2026-11-14 |
2,392 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.