Infrastructure - https://hyundai.com BeaverCheck Audit

D

CDN & Delivery

Action

No CDN detected

FIX

No CDN detected

A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.

No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B

Redirect Chain

2 redirect(s), 611 ms total

REVIEW

2 redirect(s), 611 ms total

2 redirects before reaching final URL

Each redirect adds latency. Try to minimize the chain to 1 hop.

WWW normalization redirect

Redirect overhead: 611 ms total

Got: 611 ms

https://hyundai.com

177 ms · HTTP/1.1

301

https://www.hyundai.com/

146 ms · HTTP/1.1

301

https://www.hyundai.com/es/es.html

287 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://hyundai.com	301	177 ms	HTTP/1.1	Apache
2	https://www.hyundai.com/	301	146 ms	HTTP/1.1	cloudflare
3	https://www.hyundai.com/es/es.html	200	287 ms	HTTP/1.1	cloudflare

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

C

IPv6 Readiness

Action

No IPv6 support

REVIEW

No IPv6 support

No IPv6 (AAAA) records found

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

No IPv6 Support

About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B

TLS Certificate Expiry & Recommendations

168 days until leaf cert expires — 4 issues to address

REVIEW

Certificate validity

168

days left

0d 30d 60d 90d+

Recommended actions

Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A

DNS Records

1 A records, 1599 ms lookup

PASS

1 A records, 1599 ms lookup

Resolves to 1 IPv4 address(es)

Got: 185.106.8.43

Single A record — no DNS redundancy

Multiple A records provide failover if one server goes down.

No IPv6 (AAAA) records

2 nameserver(s) configured

Got: ns.hyundai-motor.com, ns1.hyundai-motor.com

1 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution is slow (1599 ms)

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Got: 1599 ms

A	185.106.8.43
AAAA	—
CNAME	—
NS	ns.hyundai-motor.com, ns1.hyundai-motor.com
MX	10 mail.hyundai.com
TXT	pardot957482=3db9d2d7343f09def3c428f1ac05ea1e77fb267dbaeed9d717654d0589f35d6b RQOtMvFkoCqYfZXtRQacYzKvFDPcBa3oCgWRMjWzkf56qkmLdwrXzjUKHPDyObJem1nQRlWZSpXGo+9+... SPF v=spf1 ip4:218.38.52.226 include:spf1.hyundai.com include:spf4.hyundai.com inclu... google-site-verification=e9sE8ZRkLGBJRNQq7fN2VUbTF2XOzsW20Aop5OwEH-E tcslzSvVarpg1fwGfi8IXfV5L0KbPD6tWnAfxtJvlYCf5WU20aIMMzrOOBIBUO46159cODzq4QNIfdiS... google-site-verification=pswFvXHRAVoPeZhUTMHZ7YAW0amoem4Of3-NZMzyhHI atlassian-domain-verification=7WBcEyM5iqffUeS3sXwalWMEP5mv3sJ5MTXWdJuXa70YE5m87A... google-site-verification=52rPUEKksbaoZF-5b-BSs9TQJNPKKVt8GAH6rxx0zsY google-site-verification=bK_t_HTTo_Syl7t4DMRSR-7d-kJga-mTVVViuVkseL4 pardot380263=81037b7a5ddca57b6035b430347b4d7ec24b6863a8991b87eaf4b590e85dd5dd google-site-verification=AGNA_W7qMPeg34l0xvj6DDRwyA53kMuyzUlMZFJjv_M google-site-verification=dE7YqWlTVwHylwdMW2Dn1TF3ZRMMRJLE-2ZCpwL0eWU google-site-verification=amgD_-qYy0PZWS03G-WFEjdWv3MVdbS6GXPeHXXq7zQ pardot380273=1856f1d3250f9eeb5f606b151806af91668aa54424f874f04f3996b06c564e72 autodesk-domain-verification=Qd8nFs1TWFfr29clis8N atlassian-domain-verification=APFz5VY/lpa6VJUhGaVgNTAmBwNv7VQXJbfN7brufRqQfBIEdn... pardot292732=eff4d68de247c680b2f9cb1ff6a1aa7c518c528ae47797419d581ade459e9fcd 6979d289d48858bd3691.channel.io MS=ms19332959 google-site-verification=zMOnK0l0XVXZl8PJrd96ahtXPD5Mb5jI8_oEvq1Mo8Q google-site-verification=whYPxneaG7zBMQkKIUZU45eQgUXbKahfyCZsP_nv2PY google-site-verification=zdfB6j_ZMSOCLzX9QNbHu_YBxHmUYO5-RxVDhZc5AV0 google-site-verification=Yi0jCM2xjWzJ4ePBD-94i-w5ad5HMVZddfX3LQztAaw google-site-verification=fx1-MV_6v_fsP4n2OdFXvXNDlcgCBQqOXjVQ0jDdxyk google-site-verification=bspA9j9GKNyJB_KGMj8zT5t052GzVm2UwOudeB7wg8w atlassian-domain-verification=XvR2yFq5/a8mtLJsRDA0JF0YZtPuHxA6GDoYuxUghCxp6fDJG5... google-site-verification=MJgrcaK8PAFk4a6B6hfIXMOMukCeLe0B_7WH_Z6O1bU pardot930003=383557120b62fa9dfa4a210c9c502de2c0abb43369b14de7604a98e88dff1a1c google-site-verification=mqqgSgUt0IG_cAGRekgu8zwOMaKqQAmjd2jYSSoWy6o wiz-domain-verification=7eff7f9c21178b77f87e689f6b3a0ddaf4e53eb1a7ceacbc22940104... pardot337603=a366ea0018a441d3a9a6af983a86b50ad80674a4ef85fd901c111458bf2f179f google-site-verification=xygqMsF1dHtT4_I-MAWM9rN_PpEkMoDh_eGVK_D5shM facebook-domain-verification=6twp6irwrgb4fo32hjirtbjmi2p0p1 google-site-verification=ZTfuR6XxyZ2_WJd79o4fobKYefatrrpjKH7vcgvoScg toast-domain-verification=xsn82BadpIwSIvcS57s8
CAA	Lookup not available with standard resolver

Resolved in 1599 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A+

Crawlability

robots.txt present, sitemap with 50 URLs

PASS

robots.txt present, sitemap with 50 URLs

robots.txt is present

Got: 3726 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 50 entries

Sitemap index with 50 child sitemaps

robots.txt references sitemap

robots.txt 200 OK

Size 3726 B Sitemaps referenced 56 User-agents * Blocking No — crawling allowed

User-agent: *
Disallow: /kr/ko/login/
Disallow: /kr/ko/member-change/
Disallow: /kr/ko/mypage/
Disallow: /kr/ko/agreements/
Disallow: /kr/ko/agreements.html
Disallow: /kr/ko/personal-information/
Disallow: /kr/ko/personal-information.html
Disallow: /kr/ko/copyright.html
Disallow: /kr/ko/join/
Disallow: /template_en/
Disallow: /template_ar/
Disallow: /worldwide/en/search
Disallow: /worldwide/ko/search
Disallow: /files/kr/ko/membersPoint/
Disallow: /files/kr/ 

#Disallow: /pa/
# Disallow: /*?*page=

#HMGICS
Disallow:/sg/hmgics/about-us/journey-of-design
Disallow:/sg/hmgics/about-us/design-concept
#IONIQ5
Disallow:/sg/ioniq-5/specs
#Experience
Disallow:/sg/experience/
Disallow:/sg/offline/
#Shop
Disallow:/sg/shop/
#Owners
Disallow:/sg/owners/
#MyPage
Disallow:/sg/mypage/
#Support
Disallow:/sg/support/faq
Disallow:/sg/support/notice
#InternalSearch
Disallow:/sg/search

# Sitemap files
Sitemap:https://www.hyundai.com/sitemap.xml
Sitemap:https://www.hyundai.com/cci-sitemap.xml
Sitemap:https://www.hyundai.com/worldwide/en/sitemap.xml
Sitemap:https://www.hyundai.com/worldwide/ko/sitemap.xml
Sitemap:https://www.hyundai.com/kr/ko/sitemap.xml

Sitemap:https://www.hyundai.com/gd/en/sitemap.xml
Sitemap:https://www.hyundai.com/et/en/sitemap.xml
Sitemap:https://www.hyundai.com/ng/en/sitemap.xml
Sitemap:https://www.hyundai.com/ma/fr/sitemap.xml
Sitemap:https://www.hyundai.com/canarias/es/sitemap.xml
Sitemap:https://www.hyundai.com/tr/tr/sitemap.xml
Sitemap:https://www.hyundai.com/uz/ru/sitemap.xml
Sitemap:https://www.hyundai.com/hk/en/sitemap.xml
Sitemap:https://www.hyundai.com/hk/zh/sitemap.xml
Sitemap:https://www.hyundai.com/id/en/sitemap.xml
Sitemap:https://www.hyundai.com/id/id/sitemap.xml
Sitemap:https://www.hyundai.com/la/en/sitemap.xml
Sitemap:https://www.hyundai.com/la/lo/sitemap.xml
Sitemap:https://www.hyundai.com/ph/en/sitemap.xml
Sitemap:https://www.hyundai.com/lb/ar/sitemap.xml
Sitemap:https://www.hyundai.com/lb/en/sitemap.xml
Sitemap:https://www.hyundai.com/bh/ar/sitemap.xml
Sitemap:https://www.hyundai.com/bh/en/sitemap.xml
Sitemap:https://www.hyundai.com/kw/ar/sitemap.xml
Sitemap:https://www.hyundai.com/kw/en/sitemap.xml
Sitemap:https://www.hyundai.com/pacific/en/sitemap.xml
Sitemap:https://www.hyundai.com/csa/en/sitemap.xml
Sitemap:https://www.hyundai.com/csa/es/sitemap.xml
Sitemap:https://www.hyundai.com/africa/en/sitemap.xml
Sitemap:https://www.hyundai.com/africa/fr/sitemap.xml
Sitemap:https://www.hyundai.com/th/en/sitemap.xml
Sitemap:https://www.hyundai.com/th/th/sitemap.xml
Sitemap:https://www.hyundai.com/my/en/sitemap.xml

Sitemap:https://www.hyundai.com/in/en/sitemap.xml
Sitemap:https://www.hyundai.com/au/en.sitemap.xml
Sitemap:https://www.hyundai.com/jp/sitemap1.xml

Sitemap:https://www.hyundai.com/eu/sitemap.xml
Sitemap:https://www.hyundai.com/cz/sitemap.xml
Sitemap:https://www.hyundai.com/lu/fr/sitemap.xml
Sitemap:https://www.hyundai.com/be/fr/sitemap.xml
Sitemap:https://www.hyundai.com/be/nl/sitemap.xml
Sitemap:https://www.hyundai.com/sg/sitemap.xml
Sitemap:https://www.hyundai.com/ch/de/sitemap.xml
Sitemap:https://www.hyundai.com/ch/fr/sitemap.xml
Sitemap:https://www.hyundai.com/ch/it/sitemap.xml
Sitemap:https://www.hyundai.com/es/es/sitemap.xml  
Sitemap:https://www.hyundai.com/it/it/sitemap.xml  
Sitemap:https://www.hyundai.com/pl/pl/sitemap.xml  
Sitemap:https://www.hyundai.com/no/no/sitemap.xml 
Sitemap:https://www.hyundai.com/no/no/cci-sitemap.xml
Sitemap:https://www.hyundai.com/nl/nl/sitemap.xml  
Sitemap:https://www.hyundai.com/sk/sk/sitemap.xml
Sitemap:https://www.hyundai.com/fr/fr/sitemap.xml
Sitemap:https://www.hyundai.com/de/de/sitemap.xml
Sitemap:https://www.hyundai.com/uk/en/sitemap.xml
Sitemap:https://www.hyundai.com/se/sv/sitemap.xml

sitemap.xml 200 OK

Type Sitemap Index URLs 50 entries Valid XML Yes

Child Sitemaps:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: non-www)

HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.hyundai.com/

200https://hyundai.com/

Preferred variant: non-www

HTTP → HTTPS

301http://hyundai.com/ → https://www.hyundai.com/

Consistent

A

Domain Intelligence

hyundai.com — via Megazone Corp., dba HOSTING.KR, 28 years, 2 months old, hosted on AUTOEVER-EUROPE, DE

PASS

hyundai.com — via Megazone Corp., dba HOSTING.KR, 28 years, 2 months old, hosted on AUTOEVER-EUROPE, DE

Domain expires in 62 days

Consider enabling auto-renewal to prevent accidental expiration.

Got: Expires Jun 23, 2026

DNSSEC is not enabled

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Registrar: Megazone Corp., dba HOSTING.KR

Registrar lock is NOT enabled

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Hosting: AUTOEVER-EUROPE, DE

Got: AS51527

Domain expiry

9 days

June 23, 2026

SSL certificate

168 days

Issued by Sectigo Limited

Domain age

28 years, 2 months

Registered June 24, 1998

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

AUTOEVER-EUROPE, DE

ASN AS51527

185.106.8.43

Registrar

Megazone Corp., dba HOSTING.KR

Unlocked 2 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Renew the domain or enable auto-renewal to prevent accidental expiry
Enable DNSSEC to protect visitors from DNS spoofing
Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers

Registrar Megazone Corp., dba HOSTING.KR

Created June 24, 1998 (28 years, 2 months ago)

Expires June 23, 2026 (2 months)

Last Updated June 13, 2025

Name Servers ns.hyundai-motor.com, ns1.hyundai-motor.com

DNSSEC Not enabled

Hosting

IP Address 185.106.8.43

ASN AS51527 (AUTOEVER-EUROPE, DE)

Provider AUTOEVER-EUROPE, DE

Data source: rdap (0.4s)

Consider enabling auto-renewal to prevent accidental expiration.

Why this matters

Domain expiry approaching — renew immediately and ensure auto-renew + alerting are configured.

Source: ICANN renewal policy

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A

HTTP Probe Timing

Total 436 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

278 ms

TCP Connect

37 ms

TLS Handshake

83 ms

Time to First Byte

436 ms

Total Time

436 ms

Connection waterfall

DNS Lookup 278 ms TCP Connect 37 ms TLS Handshake 83 ms Server Processing 38 ms Content Transfer 0 ms