HTTP/2 200 date: Mon, 19 Jan 2026 00:06:24 GMT content-type: text/html content-encoding: gzip strict-transport-security: max-age=31536000 content-security-policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-95f44492-8e44-4ed2-8cd7-7f20f5d6dd45' https://www.google.com/recaptcha/api.js; x-deployment-id: eb63f3ac47986568b28f026b3bf44e5ecfcfa3dd20d615e04f8ba134c36e11c9 x-robots-tag: none set-cookie: __cf_bm=oJxkKfD9_RtUSmRfYwbrpXJVe5Dcj6J6SmJ3gusV7II-1768781184-1.0.1.1-FiQyfqPpOEKlC6WLjjfGsWbnFYkCX2Rjhlv4eFP9xvMpwbDKfQi.XWIp3yOe1sAn_IJV4jx338fnffnlTh4HnBV_vOuZccSqqZ0_jmZKBAo; path=/; expires=Mon, 19-Jan-26 00:36:24 GMT; domain=.canva.site; HttpOnly; Secure; SameSite=None vary: Accept-Encoding expect-ct: max-age=86400, enforce x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block referrer-policy: strict-origin-when-cross-origin server: cloudflare cf-ray: 9c0215fced73f424-BLR alt-svc: h3=":443"; ma=86400