Bug bounty program
Canva
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains2,392
| Name | Scope | First seen |
|---|---|---|
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.737oienginx.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-aresfe-dot-gov.jobs-com-rctivicenginx-com-internal.sso-repo.community-march.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-document.sso.9utsrqponmlkjihgfed.github-prod.1.canva.cnauth, git | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-aresfe-dot-gov.jobs-com-rctivicenginx-com-acc99363.sso-repo.prod.1.canva.cnauth, git, mail | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-737oia-dot-gov.jobs-com-rctivicenginx-com-combucky-accounts.sso-repo.prod.1.canva.cnauth, git, mail | In scope | 2026-11-14 |
| r0.ruletheearth-hbucket-download-mail-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso-repo.prod.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso-repo.prod.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-aresfe-dot-gov.jobs-com-rctivicenginx-com-internal.sso-repo.prod.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-jinzanguojiyulehaifa-dot-gov.jobs-com-rctivicenginx-com-internal.sso-repo.prod.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-import-download-mail-737oia-dot-gov.org-anissa-arearioriginyajama6-machine.sso-repo.prod.1.canva.cnauth, git, mail | In scope | 2026-11-14 |
| r0.ruletheearth-dataucts-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-brazil.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-brazil.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-ctribuddha-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-brazil.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-thumbnastaging-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-brazil.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.mobile02783vata.github-sso.prodv1-brazil.1.canva.cnauth, git | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-org-anissa-areari500facebookapp.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.prodv1-repo-0393c-finion-public-service.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-areacommunity-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-cseadoresun1cseajtgm-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-manipulationassetsvriments-csestoreseurope.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.cseolinkriservata.sso.repo-9-manipulationassetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-cse-z55i2kerisere10dvkvbrand-com-internal.sso.repo-9-manipulationassetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-agfedcbaxwvutsrqpopovinuction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-manipulationassetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prodarg-zyxwvutagin-i-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-manipulationassetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-9-manipulationassetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-mail-33733assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal, mail | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetscse-g3guojiyules-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-m9srqponmlkjihgfe.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-apidocs12583ail-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-cse233733-info-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prodcmnlst-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-prodorg-anissa-certapprvata-machine-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-jtracing-dot-gov.jobs-com-rctivicenginx-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-z55i2kerisere10dvkvedge-com-internal.sso.repo-prodv1assetsvriments-staticl3213zyxwvutsrqpo.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-repo610uction-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.sso.riservata-api1adm-east-6-rpcjuneversion.1.canva.cnadmin, api, auth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.security-brazil.1.canva.cnauth, git, internal | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-get-github.sso.prodhassserverhone.turkey.1.canva.cnauth, git | In scope | 2026-11-14 |
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.github-sso.xrtmund-staging-anisrulegodosoft.1.canva.cnauth, git, internal, staging | In scope | 2026-11-14 |
| wire.combuckyrule-bitbucket-repo-east-6-rpcgw-sql.cse-z55i2kerisere10dvkv-june.z55i2kerisere10dvkv.1.canva.cngit | In scope | 2026-11-14 |
| webproxy.idc-lorien.bh-arppofind.comssetscsestores-data.glategoryfronicsadnswildcardcsestores-dataucts.csl758dwire-git.2.canva.cngit | In scope | 2026-11-14 |
| webproxy.idc-rulegodosoft-preview-xsrvjpinsys-private.bh-arppofind.0hsctlukoxu1lgxnjwxt1-csestoresprod.glategoryfronicsadnswildcardproducts.csl758dwire-git.2.canva.cngit, internal, staging | In scope | 2026-11-14 |
| webproxy.idc-rulegodosoft-preview-xsrvjpinsys-private.bh-arppofind.com-open-source-cloud-computing-services-distribution-cse.glategoryfronicsadnswildcardproducts.csl758dwire-git.2.canva.cngit, internal, staging | In scope | 2026-11-14 |
| webproxy.idc-rulegodosoft-preview-xsrvjpinsys-private.bh-arppofind.comssetsprod.glategoryfronicsadnswildcardproducts.csl758dwire-git.2.canva.cngit, internal, staging | In scope | 2026-11-14 |
| webproxy.idc-rulegodosoft-preview-xsrvjpinsys-private.bh-cangbocaijiezuqiublic.comssetsprod.glategoryfronicsadnswildcardproducts.csl758dwire-git.2.canva.cngit, internal, staging | In scope | 2026-11-14 |
| webproxy.idc-lorien-repo.bh-arppofind.help-comssets.glategoryfronicsadnswildcardproducts.wire.5.afe.canva.cngit | In scope | 2026-11-14 |
| r0.ruleus-east-2admins.prod.amux.org-anissa-areariservata-thumbna.com.aws.aomenhuangguan.apips.iad-com.bitbucket-cn.canva.cngit | In scope | 2026-11-14 |
| 1cba.vriment-2.wire.community-share-upload.budget.h21-updated.inst.scm.cn-northwest-1.na-cnprod.s4devkhs.ftpanva.cn.canva.cndata, git | In scope | 2026-11-14 |
| r0.rulegodosoft-5p5h429-xsrvjpinsys-computing.app.git.cse-junive-a43216zy-cse-z55i2kerisere10dvkv.canva.cngit | In scope | 2026-11-14 |
| r0.rulegodosoft-5p5h429-xsrvjpinsys-privateyajama6.app.git.cse-junive-a43216zy-cse-z55i2kerisere10dvkv.canva.cngit | In scope | 2026-11-14 |
| google.combucky.33733.anissa-areariservata-machinedev.github.cmnlistmail.csecdn.daa.colombia-manipulation.data.canva.cngit | In scope | 2026-11-14 |
| repo-east-6-rpcgw-sql.webproxy.rule-font-public.bh-arppofind.banner-static-cse-comssets.glategoryfronicsadnswildcardproducts.wire.h.canva.cngit | In scope | 2026-11-14 |
| google.combucky.33733.org-anissa-areawww-xmnn-cn-web8930.cmnlistmail.repo0393c-finion-public-service.canva.cngit | In scope | 2026-11-14 |
| google.combuckyrule-bitbucket.33733.org-anissa-areariservata-machine.cmnlistmail.ruletheearthjwxt1-csestores.canva.cngit | In scope | 2026-11-14 |
| google.combucky-repo.33733.org-applications-z55i2kerisorg-anissa-areariservamobile56453.cmnlistmail.ruletheearthjwxt1-csestores.canva.cngit | In scope | 2026-11-14 |
| r0.rulegodosoft-022facebookapp-xsrvjpinsys-staging.app.repo.csedownloader.cse.storage-cse.canva.cngit, staging | In scope | 2026-11-14 |
2,392 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.