hyundai.com

15-check dossier · scoreboard above, section details below

Get a pack →

Scanning…

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

resolving mx…

spf

info

Open standalone →

resolving spf…

dmarc

info

Open standalone →

resolving dmarc…

dkim

info

Open standalone →

probing dkim selectors…

tls

info

Open standalone →

fetching tls cert…

redirects

info

Open standalone →

tracing redirects…

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

inspecting web surface…

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.

hyundai.com

15-check dossier · scoreboard above, section details below

Get a pack →

C+

7 items need attention

Aggregate grade across 15 checks. Auditors typically flag any High-severity finding.

Pass: 8
Warn: 7
Fail: 0

What an auditor would flag first

medium
SPF
~all softfail — receivers may still accept
SOC 2 CC6.7ISO 27001 A.13.2.1
medium
DMARC
p=none — monitoring only, no enforcement
SOC 2 CC6.7ISO 27001 A.13.2.1
medium
Redirect chain
redirects to different domain: hyundaiusa.com
SOC 2 CC6.6

Need this as an artifact your auditor can verify?

Your hyundai.com scan flagged 4 medium and 3 low findings. A signed pack covers the apex plus up to 100 CT-discovered subdomains, Ed25519-signed and ISO-timestamped, delivered in 10–30 minutes.

Get a pack →See methodology See a sample$29

Scanning…

15-check summary

DNS recordsA/AAAA records present
MX1 MX record(s) present
SPF~all softfail — receivers may still accept
DMARCp=none — monitoring only, no enforcement
DKIMno DKIM selectors found — likely not configured
TLS certificatecert valid for 137 days
Redirect chainredirects to different domain: hyundaiusa.com
Security headers5 security header(s) missing
CORSno CORS headers — cross-origin requests blocked by default
Web surfaceHTTPS surface reachable (robots ✓, sitemap ✓, title ✓)
MTA-STSnot applicable: no _mta-sts TXT record
TLS-RPTnot applicable: no TLSRPT record
DNSSECDNSSEC not configured — no DS or DNSKEY records found
WHOISdomain expires in 30 days — renew soon
Certificate Transparencycheck failed: crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

dns

info

Open standalone →

A/AAAA records present

Why it matters: Without authoritative A or AAAA records on the apex, the domain is unreachable. Missing baseline DNS shows up in vendor reviews as evidence of unmanaged infrastructure (SOC 2 CC6.6).

A: ttl=28800 185.106.8.43
AAAA: —
NS: ttl=22459 ns1.hyundai-motor.com.
ttl=22459 ns.hyundai-motor.com.
SOA: ttl=28800 ns.hyundai-motor.com. ace.hyundai-autoever.com. 3963 900 3600 2592000 60
CAA: —
TXT: ttl=3600 "atlassian-domain-verification=7WBcEyM5iqffUeS3sXwalWMEP5mv3sJ5MTXWdJuXa70YE5m87Av0CIe2kySF8MY2"
ttl=3600 "toast-domain-verification=xsn82BadpIwSIvcS57s8"
ttl=3600 "atlassian-domain-verification=APFz5VY/lpa6VJUhGaVgNTAmBwNv7VQXJbfN7brufRqQfBIEdnlYRE4pEWOBKtc8"
ttl=3600 "tcslzSvVarpg1fwGfi8IXfV5L0KbPD6tWnAfxtJvlYCf5WU20aIMMzrOOBIBUO46159cODzq4QNIfdiShHswFw=="
ttl=3600 "wiz-domain-verification=7eff7f9c21178b77f87e689f6b3a0ddaf4e53eb1a7ceacbc22940104a0d1d66a"
ttl=3600 "6979d289d48858bd3691.channel.io"
ttl=3600 "google-site-verification=whYPxneaG7zBMQkKIUZU45eQgUXbKahfyCZsP_nv2PY"
ttl=3600 "v=spf1 ip4:218.38.52.226 include:spf1.hyundai.com include:spf4.hyundai.com include:spf5.hyundai.com include:spf.protection.outlook.com include:_spf.dooray.com include:amazonses.com ~all"
ttl=3600 "autodesk-domain-verification=Qd8nFs1TWFfr29clis8N"
ttl=3600 "_globalsign-domain-verification=GciLLLw6PTZMbrf10pRmYChwayw2nb8flpAgh7LBPc"
ttl=3600 "google-site-verification=Yi0jCM2xjWzJ4ePBD-94i-w5ad5HMVZddfX3LQztAaw"
ttl=3600 "google-site-verification=MJgrcaK8PAFk4a6B6hfIXMOMukCeLe0B_7WH_Z6O1bU"
ttl=3600 "RQOtMvFkoCqYfZXtRQacYzKvFDPcBa3oCgWRMjWzkf56qkmLdwrXzjUKHPDyObJem1nQRlWZSpXGo+9+8cvTIw=="
ttl=3600 "MS=ms19332959"
ttl=3600 "facebook-domain-verification=6twp6irwrgb4fo32hjirtbjmi2p0p1"
ttl=3600 "pardot380273=1856f1d3250f9eeb5f606b151806af91668aa54424f874f04f3996b06c564e72"
ttl=3600 "google-site-verification=fx1-MV_6v_fsP4n2OdFXvXNDlcgCBQqOXjVQ0jDdxyk"
ttl=3600 "pardot337603=a366ea0018a441d3a9a6af983a86b50ad80674a4ef85fd901c111458bf2f179f"
ttl=3600 "pardot957482=3db9d2d7343f09def3c428f1ac05ea1e77fb267dbaeed9d717654d0589f35d6b"
ttl=3600 "google-site-verification=ZTfuR6XxyZ2_WJd79o4fobKYefatrrpjKH7vcgvoScg"
ttl=3600 "google-site-verification=bspA9j9GKNyJB_KGMj8zT5t052GzVm2UwOudeB7wg8w"
ttl=3600 "pardot292732=eff4d68de247c680b2f9cb1ff6a1aa7c518c528ae47797419d581ade459e9fcd"
ttl=3600 "google-site-verification=pswFvXHRAVoPeZhUTMHZ7YAW0amoem4Of3-NZMzyhHI"
ttl=3600 "google-site-verification=dE7YqWlTVwHylwdMW2Dn1TF3ZRMMRJLE-2ZCpwL0eWU"
ttl=3600 "pardot930003=383557120b62fa9dfa4a210c9c502de2c0abb43369b14de7604a98e88dff1a1c"
ttl=3600 "google-site-verification=AGNA_W7qMPeg34l0xvj6DDRwyA53kMuyzUlMZFJjv_M"
ttl=3600 "google-site-verification=mqqgSgUt0IG_cAGRekgu8zwOMaKqQAmjd2jYSSoWy6o"
ttl=3600 "google-site-verification=amgD_-qYy0PZWS03G-WFEjdWv3MVdbS6GXPeHXXq7zQ"
ttl=3600 "pardot380263=81037b7a5ddca57b6035b430347b4d7ec24b6863a8991b87eaf4b590e85dd5dd"
ttl=3600 "google-site-verification=e9sE8ZRkLGBJRNQq7fN2VUbTF2XOzsW20Aop5OwEH-E"
ttl=3600 "google-site-verification=zMOnK0l0XVXZl8PJrd96ahtXPD5Mb5jI8_oEvq1Mo8Q"
ttl=3600 "google-site-verification=52rPUEKksbaoZF-5b-BSs9TQJNPKKVt8GAH6rxx0zsY"
ttl=3600 "google-site-verification=zdfB6j_ZMSOCLzX9QNbHu_YBxHmUYO5-RxVDhZc5AV0"
ttl=3600 "google-site-verification=xygqMsF1dHtT4_I-MAWM9rN_PpEkMoDh_eGVK_D5shM"
ttl=3600 "google-site-verification=bK_t_HTTo_Syl7t4DMRSR-7d-kJga-mTVVViuVkseL4"
ttl=3600 "atlassian-domain-verification=XvR2yFq5/a8mtLJsRDA0JF0YZtPuHxA6GDoYuxUghCxp6fDJG555bl15hsawFa8s"

fetched 2026-05-23T10:45:24.657Z

dns

info

Open standalone →

resolving…

mx

info

Open standalone →

1 MX record(s) present

Why it matters: MX records direct inbound mail. Misconfiguration silently breaks email delivery and lets attackers stand up parallel MX hosts for spoofing campaigns (ISO 27001 A.8.21).

pri=10 mail.hyundai.com.

fetched 2026-05-23T10:45:24.260Z

mx

info

Open standalone →

resolving mx…

spf

medium

Open standalone →

~all softfail — receivers may still accept

Why it matters: SPF tells receiving servers which hosts may send mail for the domain. Without it, any sender can forge the envelope-from — the primary mechanism behind business-email-compromise (SOC 2 CC6.7).

Recommendations

Move to -all (hardfail) once your mail flow is confirmed — softfail gives no real protection

v=spf1 ip4:218.38.52.226 include:spf1.hyundai.com include:spf4.hyundai.com include:spf5.hyundai.com include:spf.protection.outlook.com include:_spf.dooray.com include:amazonses.com ~all

v=spf1
ip4:218.38.52.226
include:spf1.hyundai.com
include:spf4.hyundai.com
include:spf5.hyundai.com
include:spf.protection.outlook.com
include:_spf.dooray.com
include:amazonses.com
~all

fetched 2026-05-23T10:45:24.640Z

spf

info

Open standalone →

resolving spf…

dmarc

medium

Open standalone →

p=none — monitoring only, no enforcement

Why it matters: DMARC binds SPF and DKIM into an enforceable policy (quarantine or reject) and surfaces spoofing attempts via aggregate reports. `p=none` or absent means spoofing succeeds silently (SOC 2 CC6.7).

Recommendations

Review rua= aggregate reports to confirm legitimate mail passes SPF/DKIM
Move to p=quarantine and then p=reject once mail flow is validated

v=DMARC1; p=none; pct=100; rua=mailto:selection_appsupport@hyundai.com; ruf=mailto:selection_appsupport@hyundai.com

v=: DMARC1
p=: none
pct=: 100
rua=: mailto:selection_appsupport@hyundai.com
ruf=: mailto:selection_appsupport@hyundai.com

fetched 2026-05-23T10:45:24.249Z

dmarc

info

Open standalone →

resolving dmarc…

dkim

low

Open standalone →

no DKIM selectors found — likely not configured

Why it matters: DKIM signs outbound mail so receivers can detect tampering. Missing selectors or rotated-away keys break DMARC alignment and let receivers downgrade trust (ISO 27001 A.8.24).

Recommendations

Enable DKIM signing in your mail provider and publish the provided TXT record
Common selectors: google._domainkey, selector1._domainkey (Microsoft), mail._domainkey

no DKIM record on probed selectors (default, google, k1, selector1, selector2, mxvault)

dkim

info

Open standalone →

probing dkim selectors…

tls

info

Open standalone →

cert valid for 137 days

Why it matters: A valid current TLS certificate is the baseline for data in transit. Expiry, weak chain, or hostname mismatch break HTTPS and fail PCI 4.2.1 / SOC 2 CC6.1.

subject cn:: *.hyundai.com
issuer:: Sectigo Public Server Authentication CA OV R36 / Sectigo Limited
valid:: Mar 23 00:00:00 2026 GMT → Oct 7 23:59:59 2026 GMT
authorized:: yes
sha256:: 2F:9D:D2:9F:F5:2D:62:2F:0F:A3:1B:E4:E8:7E:AE:EB:9E:DA:D1:B0:CC:A7:53:91:BD:C4:08:12:37:CC:20:A9
sans: *.hyundai.com
hyundai.com

fetched 2026-05-23T10:45:24.571Z

tls

info

Open standalone →

fetching tls cert…

redirects

medium

Open standalone →

redirects to different domain: hyundaiusa.com

Why it matters: Bare HTTP requests must redirect to HTTPS without dropping the user mid-chain. Plain-text fallback or open redirects fail PCI 4.2.1 and feed phishing chains (SOC 2 CC6.6).

Recommendations

Verify this cross-domain redirect is intentional (e.g. domain migration or CDN)
Ensure the destination domain is owned and expected — unintended redirects can leak traffic

final status: 200 · 4 hops

[301] https://hyundai.com/
[301] https://www.hyundai.com/
[301] https://www.hyundaiusa.com/
[200] https://www.hyundaiusa.com/us/en

fetched 2026-05-23T10:45:24.814Z

redirects

info

Open standalone →

tracing redirects…

headers

medium

Open standalone →

5 security header(s) missing

Why it matters: Security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy — defend against XSS, clickjacking, and downgrade attacks. Absent headers map directly to OWASP ASVS V14 findings (ISO 27001 A.8.23).

Recommendations

Add response header — Strict-Transport-Security: max-age=15552000; includeSubDomains
Add response header — Content-Security-Policy: default-src 'self' (tune per app)
Add response header — X-Frame-Options: DENY (or SAMEORIGIN if framing is intended)
Add response header — Referrer-Policy: strict-origin-when-cross-origin
Add permissions-policy response header

final url: https://www.hyundaiusa.com/us/en

security headers

strict-transport-security: —
content-security-policy: —
x-frame-options: —
x-content-type-options: nosniff
referrer-policy: —
permissions-policy: —

other headers

age: 48036
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=14400
cf-cache-status: HIT
cf-ray: a003788dfe86a9d6-IAD
connection: keep-alive
content-encoding: br
content-type: text/html; charset=UTF-8
date: Sat, 23 May 2026 10:45:24 GMT
expires: Sat, 23 May 2026 14:45:24 GMT
last-modified: Fri, 22 May 2026 21:24:48 GMT
server: cloudflare
set-cookie: __cf_bm=kifIrCzpu3s5.jKk7XFgmgoOpIB1PIvndQIbSFB_Bfw-1779533124.793043-1.0.1.1-VIBxp_gEZUyh6NnlU2.k.ePdx9ORC.SgHpOyVLeRDTCYr6Pu7hCfLZUvORTIoLDaFhHIZbFZ6KMdEKWbu56kgmTx3kKaaTq7ipbTq52m8QE3JHxF1LCaThvVXrq3cJXN; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.hyundaiusa.com; Expires=Sat, 23 May 2026 11:15:24 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-xss-protection: 1; mode=block

fetched 2026-05-23T10:45:24.829Z

headers

info

Open standalone →

fetching headers…

cors

info

Open standalone →

no CORS headers — cross-origin requests blocked by default

Why it matters: Overly permissive CORS (wildcard with credentials, or reflected origin) lets any origin read authenticated responses from this domain. OWASP A05 misconfiguration territory (NIST AC-4).

origin: https://drwho.me
method: GET
preflight status: 200

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-05-23T10:45:24.679Z

cors

info

Open standalone →

sending preflight…

web-surface

info

Open standalone →

HTTPS surface reachable (robots ✓, sitemap ✓, title ✓)

Why it matters: Public files — robots.txt, sitemap.xml, head meta — are what attackers see first during reconnaissance. Misadvertised paths, stale sitemaps, and verbose generators leak more than intended (ISO 27001 A.8.9).

robots.txt

present

User-agent: *
Disallow: /kr/ko/login/
Disallow: /kr/ko/member-change/
Disallow: /kr/ko/mypage/
Disallow: /kr/ko/agreements/
Disallow: /kr/ko/agreements.html
Disallow: /kr/ko/personal-information/
Disallow: /kr/ko/personal-information.html
Disallow: /kr/ko/copyright.html
Disallow: /kr/ko/join/
Disallow: /template_en/
Disallow: /template_ar/
Disallow: /worldwide/en/search
Disallow: /worldwide/ko/search
Disallow: /files/kr/ko/membersPoint/
Disallow: /files/kr/ 

#Disallow: /pa/
# Disallow: /*?*page=

#HMGICS
Disallow:/sg/hmgics/about-us/journey-of-design
Disallow:/sg/hmgics/about-us/design-concept
#IONIQ5
Disallow:/sg/ioniq-5/specs
#Experience
Disallow:/sg/experience/
Disallow:/sg/offline/
#Shop
Disallow:/sg/shop/
#Owners
Disallow:/sg/owners/
#MyPage
Disallow:/sg/mypage/
#Support
Disallow:/sg/support/faq
Disallow:/sg/support/notice
#InternalSearch
Disallow:/sg/search

# Sitemap files
Sitemap:https://www.hyundai.com/sitemap.xml
Sitemap:https://www.hyundai.com/cci-sitemap.xml
Sitemap:https://www.hyundai.com/worldwide/en/sitemap.xml
Sitemap:https://www.hyundai.com/worldwide/ko/sitemap.xml
Sitemap:https://www.hyundai.com/kr/ko/sitemap.xml

Sitemap:https://www.hyundai.com/gd/en/sitemap.xml
Sitemap:https://www.hyundai.com/et/en/sitemap.xml
Sitemap:https://www.hyundai.com/ng/en/sitemap.xml
Sitemap:https://www.hyundai.com/ma/fr/sitemap.xml
Sitemap:https://www.hyundai.com/canarias/es/sitemap.xml
Sitemap:https://www.hyundai.com/tr/tr/sitemap.xml
Sitemap:https://www.hyundai.com/uz/ru/sitemap.xml
Sitemap:https://www.hyundai.com/hk/en/sitemap.xml
Sitemap:https://www.hyundai.com/hk/zh/sitemap.xml
Sitemap:https://www.hyundai.com/id/en/sitemap.xml
Sitemap:https://www.hyundai.com/id/id/sitemap.xml
Sitemap:https://www.hyundai.com/la/en/sitemap.xml
Sitemap:https://www.hyundai.com/la/lo/sitemap.xml
Sitemap:https://www.hyundai.com/ph/en/sitemap.xml
Sitemap:https://www.hyundai.com/lb/ar/sitemap.xml
Sitemap:https://www.hyundai.com/lb/en/sitemap.xml
Sitemap:https://www.hyundai.com/bh/ar/sitemap.xml
Sitemap:https://www.hyundai.com/bh/en/sitemap.xml
Sitemap:https://www.hyundai.com/kw/ar/sitemap.xml
Sitemap:https://www.hyundai.com/kw/en/sitemap.xml
Sitemap:https://www.hyundai.com/pacific/en/sitemap.xml
Sitemap:https://www.hyundai.com/csa/en/sitemap.xml
Sitemap:https://www.hyundai.com/csa/es/sitemap.xml
Sitemap:https://www.hyundai.com/africa/en/sitemap.xml
Sitemap:https://www.hyundai.com/africa/fr/sitemap.xml
Sitemap:https://www.hyundai.com/th/en/sitemap.xml
Sitemap:https://www.hyundai.com/th/th/sitemap.xml
Sitemap:https://www.hyundai.com/my/en/sitemap.xml

Sitemap:https://www.hyundai.com/in/en/sitemap.xml
Sitemap:https://www.hyundai.com/au/en.sitemap.xml
Sitemap:https://www.hyundai.com/jp/sitemap1.xml

Sitemap:https://www.hyundai.com/eu/sitemap.xml
Sitemap:https://www.hyundai.com/cz/sitemap.xml
Sitemap:https://www.hyundai.com/lu/fr/sitemap.xml
Sitemap:https://www.hyundai.com/be/fr/sitemap.xml
Sitemap:https://www.hyundai.com/be/nl/sitemap.xml
Sitemap:https://www.hyundai.com/sg/sitemap.xml
Sitemap:https://www.hyundai.com/ch/de/sitemap.xml
Sitemap:https://www.hyundai.com/ch/fr/sitemap.xml
Sitemap:https://www.hyundai.com/ch/it/sitemap.xml
Sitemap:https://www.hyundai.com/es/es/sitemap.xml  
Sitemap:https://www.hyundai.com/it/it/sitemap.xml  
Sitemap:https://www.hyundai.com/pl/pl/sitemap.xml  
Sitemap:https://www.hyundai.com/no/no/sitemap.xml 
Sitemap:https://www.hyundai.com/no/no/cci-sitemap.xml
Sitemap:https://www.hyundai.com/nl/nl/sitemap.xml  
Sitemap:https://www.hyundai.com/sk/sk/sitemap.xml
Sitemap:https://www.hyundai.com/fr/fr/sitemap.xml
Sitemap:https://www.hyundai.com/de/de/sitemap.xml
Sitemap:https://www.hyundai.com/uk/en/sitemap.xml
Sitemap:https://www.hyundai.com/se/sv/sitemap.xml

sitemap.xml

present — 50 url(s)

head

title: Hyundai USA: Cars, SUVs, & Electric Vehicles | Official Site
description: Welcome to the official site of Hyundai USA. Explore cars, SUVs, electric vehicles, features, offers, inventory and dealer info. Click here to get started!

social

og:title: Hyundai USA: Cars, SUVs, & Electric Vehicles | Official Site
og:image: //s7d1.scene7.com/is/image/hyundai/2022-ioniq-5-side?wid=1200&hei=630&qlt=85,0&fmt=webp
twitter:title: Hyundai USA: Cars, SUVs, & Electric Vehicles | Official Site
twitter:image: //s7d1.scene7.com/is/image/hyundai/2022-ioniq-5-side?wid=1200&hei=630&qlt=85,0&fmt=webp

fetched 2026-05-23T10:45:24.918Z

web-surface

info

Open standalone →

inspecting web surface…

dnssec

low

Open standalone →

DNSSEC not configured — no DS or DNSKEY records found

Why it matters: DNSSEC cryptographically signs DNS responses, blocking cache-poisoning attacks. US federal civilian agencies are required to enable it under OMB M-22-09 (NIST SC-20).

Recommendations

Enable DNSSEC in your DNS provider's control panel and add the resulting DS record at your registrar

enabled: no
DS records: —
DNSKEY records: —

fetched 2026-05-23T10:45:24.269Z

dnssec

info

Open standalone →

checking dnssec…

mta-sts

info

Open standalone →

not applicable: no _mta-sts TXT record

Why it matters: MTA-STS forces inbound SMTP to use TLS and refuse downgraded connections. Without it, an in-path attacker can strip TLS and read mail in plaintext (SOC 2 CC6.7).

no _mta-sts TXT record

mta-sts

info

Open standalone →

checking mta-sts…

tls-rpt

info

Open standalone →

not applicable: no TLSRPT record

Why it matters: TLS-RPT publishes a reporting address for SMTP-TLS failures. Without it, downgrade attacks on inbound mail go unnoticed (SOC 2 CC7.2).

no TLSRPT record

tls-rpt

info

Open standalone →

checking tls-rpt…

whois

low

Open standalone →

domain expires in 30 days — renew soon

Why it matters: Registrar and expiry tell auditors the domain is owned, current, and not about to lapse. An expired or about-to-expire domain fails business-continuity evidence (SOC 2 A1.2).

Recommendations

Enable auto-renewal at your registrar to avoid accidental expiry

registrar: Megazone Corp., dba HOSTING.KR
created: 1998-06-24T04:00:00Z
expires: 2026-06-23T04:00:00Z
statuses: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

fetched 2026-05-23T10:45:24.804Z

whois

info

Open standalone →

resolving whois…

ct-log

info

Open standalone →

check failed: crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

Why it matters: Every certificate issued for this domain is published in Certificate Transparency logs — including subdomains you may have forgotten. Unknown subdomains in CT are pre-disclosed attack surface (ISO 27001 A.8.16).

crt.sh: Error: crt.sh http 429; certspotter: Error: certspotter http 429

ct-log

info

Open standalone →

querying CT logs…

additional context — IP + user-agent lookups

lookups that complement a dossier — useful when investigating a finding, but not part of the dossier engine itself.

IP lookup — geolocation, ASN, ISP for any IP address surfaced by the DNS or redirect sections.
user-agent parser — the browser/OS/device the request came from.
single-record DNS lookup — drill into one record type at a time.