Is canva.site legit or a scam?
Official Canva domain for user-published websites with a long history and high trust, though occasionally abused by third parties.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
The domain is a core part of the Canva ecosystem, registered since 2018 and used to host millions of user-created websites. Our analysis confirms it is managed by the legitimate Australian company Canva and uses reputable infrastructure like Cloudflare. All major antivirus engines and browser blocklists show the domain is clean. Because it allows public publishing, some bad actors use it to host phishing pages, but the domain itself is a trusted business asset. We have high confidence in its legitimacy based on its six-year history and official corporate ties.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for canva.site, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- canva.site was registered on 2018-04-03 via registrar Gandi SAS, expires 2033-04-03, with Cloudflare nameservers (jean.ns.cloudflare.com, junade.ns.cloudflare.com).
- Canva officially hosts user-created websites on subdomains such as *.my.canva.site (free tier) and supports *.canva.site for published sites.
- Canva's website builder has published over 89 million sites; users can publish to free my.canva.site or custom/purchased domains.
- The domain and platform are frequently abused by scammers to host phishing pages or browser-locking designs that mimic legitimate Canva or other sites, bypassing email filters due to Canva's trusted reputation.
- No specific complaints, reviews, or scam reports were found uniquely targeting the bare domain canva.site itself; reports focus on Canva platform abuse in general.
- Canva provides WHOIS privacy for purchased domains and SSL on all published sites; the platform is legitimate with extensive documentation and positive user discussions on Reddit.
- Keepnet Labsopen
"Canva-style phishing is a brand-impersonation attack in which threat actors publish a public Canva design, then email that trusted canva.com or canva.site link"
- Malwarebytesopen
"Fake Canva home page leads to browser lock. Scammers created a free account on Canva and made a design that looks just like Canva’s home page."
Registered via Gandi SAS (French registrar); domain created 2018-04-03, expires 2033-04-03, clientTransferProhibited. Canva is a legitimate Australian company; this appears to be an official or related domain.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Redirect Chain
- 1301http://canva.site/
- 2404https://canva.site/
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on canva.site and not a lookalike like c-anva.site.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on canva.site. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- canva.site passed our automated security checks with a trust score of 97/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. canva.site presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 82 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- No. All 92 antivirus engines in our malware network report canva.site as clean.
- No. canva.site is not currently listed on the major browser blocklist feeds that modern browsers use.
- canva.site resolves to an IP operated by Canva Pty Ltd t/a Canva in AU (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. canva.site sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
- This is a permanent record of the scan run on June 23, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around canva.site have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.