appleautos.com — AI Site Grade

Analysis

Cloudflare Walled Garden: appleautos.com Returns 403 to Every AI Crawler and Browser Alike

The site is entirely inaccessible — every AI crawler tested (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Applebot-Extended, ChatGPT-User, OAI-SearchBot, Bytespider, anthropic-ai) receives a 403 Forbidden from Cloudflare, identical to the human browser response. No page content, no robots.txt, no sitemap, no llms.txt is ever served.

Crawler Access

The robots.txt and llms.txt endpoints both return the same Cloudflare 403 HTML shell (236KB of font-face CSS and a "Dealer Website" title). No AI-bot rules exist because no file is ever delivered. The sitemap.xml is also 403. The www subdomain resolves via CNAME to pod17.dealerinspire.com, a dealership CMS platform, but that origin also refuses connections (SSL handshake failure). The bare domain (54.243.57.127) and www (74.119.99.3) point to different IPs, both behind Cloudflare. A DNS openai-domain-verification TXT record exists (dv-YPdDxtMTLxGiRunXy0FMpDfp), indicating the brand once attempted or completed OpenAI domain verification — yet OpenAI's own crawlers still get 403.

Cold-Knowledge Gap

The LLM model describes Apple Autos as a "family-owned automotive dealership group based in Minnesota" selling Ford, Chevrolet, Toyota, Honda, Hyundai, with multiple locations, an "Apple Autos Promise," and community focus. This prior knowledge cannot be verified against the live site because the site returns zero words of content. The gap is absolute: the model knows more about the brand from training data than the brand's own website communicates to any visitor, human or machine.

External Signals

Web search returns zero indexed results for appleautos.com, the brand name, or any combination of "Apple Autos" with Minnesota or dealership. No external reviews, Reddit threads, press mentions, or citations surfaced. The site has no Wayback Machine snapshots. The brand appears to have no discoverable web presence beyond the LLM's training-data recollection — a striking vacuum for a dealership group the model describes as well-known in the Twin Cities region.

Infrastructure Contradiction

The presence of an openai-domain-verification DNS record alongside a read-ai-verification record suggests deliberate prior engagement with AI-platform verification processes. Yet every AI crawler is blocked at the edge. This is a configuration failure: verification was completed but the Cloudflare WAF or firewall rules were never updated to permit the verified crawlers through. The dealership platform (DealerInspire) likely enforces a blanket bot block that overrides any per-crawler allowances.

Findings

1. All AI crawlers blocked by Cloudflare 403 High

   Every AI crawler tested (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Applebot-Extended, ChatGPT-User, OAI-SearchBot, Bytespider, anthropic-ai) receives a 403 Forbidden from Cloudflare, identical to human browser response. No content is ever served.

   What to change: Update Cloudflare WAF or firewall rules to allow verified AI crawlers (e.g., GPTBot, ClaudeBot) through, or configure the origin server (DealerInspire) to serve content to these bots.

2. Robots.txt returns 403, no crawler rules High

   The robots.txt endpoint returns a 403 Forbidden, so no AI-bot rules exist. Crawlers cannot learn which paths are allowed or disallowed.

   What to change: Serve a valid robots.txt that allows verified AI crawlers to access the site.

3. LLMs.txt returns 403, no AI guidance Medium

   The llms.txt endpoint returns a 403 Forbidden, preventing AI systems from discovering the site's intended content for LLM consumption.

   What to change: Create and serve an llms.txt file that lists key pages for AI crawlers.

4. Sitemap returns 403, no URL discovery High

   The sitemap.xml endpoint returns a 403 Forbidden, so search engines and AI crawlers cannot discover the site's URLs.

   What to change: Serve a valid sitemap.xml listing all public pages.

5. Zero indexed pages in search results High

   Web searches for appleautos.com, the brand name, and related terms return zero results. The site has no discoverable web presence.

   What to change: Ensure the site is accessible to search engine crawlers and submit a sitemap to Google Search Console.

6. OpenAI domain verification exists but crawlers blocked High

   An openai-domain-verification DNS TXT record exists, indicating prior verification, yet OpenAI crawlers (GPTBot, ChatGPT-User, OAI-SearchBot) still receive 403. This suggests a configuration failure where verification was completed but firewall rules were not updated.

   What to change: Update Cloudflare WAF rules to allow verified OpenAI crawlers through, or ensure the origin server permits them.

7. Origin server (DealerInspire) refuses connections High

   The www subdomain resolves to pod17.dealerinspire.com, but that origin returns an SSL handshake failure, preventing any content from being served even if Cloudflare were bypassed.

   What to change: Fix the SSL configuration on the DealerInspire origin server to accept connections.

8. No historical snapshots in Wayback Machine Medium

   The Wayback Machine has no snapshots of appleautos.com, indicating the site has never been publicly accessible or has been blocked from archiving.

   What to change: Allow the Wayback Machine to archive the site by removing blocking rules.

9. LLM knows more about the brand than the website communicates Medium

   The LLM describes Apple Autos as a Minnesota dealership group with multiple locations and brands, but the live site returns zero content. This gap means AI systems cannot verify or update their knowledge from the site.

   What to change: Make the website accessible to AI crawlers so that the site's content can be used to verify and update LLM knowledge.

10. No external reviews, mentions, or citations found Medium

    Web searches for Apple Autos reviews, Reddit threads, press mentions, or any external citations returned zero results, indicating a complete lack of external signals.

    What to change: Encourage customer reviews on third-party platforms and engage in local SEO to build external signals.

What's working

• OpenAI domain verification DNS record present — An openai-domain-verification TXT record exists, indicating the brand has engaged with OpenAI's verification process, which is a prerequisite for AI visibility.
• Read AI verification DNS record present — A read-ai-verification TXT record exists, suggesting the brand has also engaged with Read AI's verification process.