AI Site Grade
ngmgroup.com.au — AI Site Grade
NGM Group's entire corporate domain is blocked to all major AI crawlers by Cloudflare, making the site invisible to LLMs and search engines.
The ngmgroup.com.au domain returns 403 to every AI bot tested, with no robots.txt, sitemap, or llms.txt accessible, and zero external search presence, leaving the site completely invisible to AI crawlers.
- Findings
- 10
- Evidence checks
- 38
- Completed
- 30 May 2026
Analysis
NGM Group's entire corporate domain is invisible to every major AI crawler — blocked at the Cloudflare edge with no bypass path available.
Crawler Access
Every AI bot tested — GPTBot, ClaudeBot, PerplexityBot, Google-Extended, OAI-SearchBot, ChatGPT-User, anthropic-ai, Applebot-Extended, Bytespider — receives a 403 status with a Cloudflare JS challenge page on www.ngmgroup.com.au. The same applies to the subsidiary brand domains greater.com.au and newcastlepermanent.com.au. No robots.txt file is served (also 403/Cloudflare wall), meaning no bot directives exist — but the Cloudflare challenge layer makes them irrelevant. No llms.txt exists (returns 403). The sitemap at /sitemap.xml is also behind the challenge wall. The site is hosted on Cloudflare (IP 217.114.94.2, UltraDNS nameservers) with aggressive bot mitigation that blocks even standard browser user-agents.
Cold-Knowledge Gap
The LLM model queried knows NGM Group as the parent company of Newcastle Permanent Building Society and Greater Bank, formed via a 2022 merger, with ~$30B in assets and ~800,000 members. It also knows about post-merger digital banking integration issues. However, the live site at ngmgroup.com.au cannot confirm or update any of this — no AI crawler can reach the content. The Wayback Machine snapshot from May 2023 shows the site was titled "Newcastle Greater Mutual Group Ltd | NGM" and described itself as serving "more than half a million Australians" under the two brands. The gap is not about content mismatch but about total inaccessibility: the model's knowledge is frozen at whatever it last ingested from external sources (press, Wikipedia, LinkedIn), with no ability to refresh from the corporate domain.
Schema Posture
The live homepage returns zero JSON-LD schema — the Cloudflare challenge page contains only a CSP-protected JS shell. The Wayback snapshots from 2023 also show no structured data on any page examined (about-us, our-business, our-strategy-and-purpose). No Organization, FinancialService, or WebSite schema was present. The site uses a JS-rendered front-end (likely a CMS like Sitecore or similar) that produces thin text extraction even in archived snapshots.
External Signals
External search results for "NGM Group Australia" return zero indexed results across multiple queries — no press coverage, no Reddit threads, no news articles appear in search. The domain has DNS verification tokens for Microsoft, Apple, Atlassian, Cisco, DocuSign, and Google, indicating enterprise tooling integrations. The LinkedIn page exists (linkedin.com/company/ngm-group-australia) but is not surfaced in search results. The cold LLM knowledge about post-merger app outages and community sponsorship (Newcastle Knights NRL) comes from sources entirely outside the corporate domain — sources the site itself cannot influence or correct.
Findings
All AI crawlers blocked by Cloudflare JS challenge High
Every major AI bot (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, OAI-SearchBot, ChatGPT-User, anthropic-ai, Applebot-Extended, Bytespider) receives a 403 status with a Cloudflare JS challenge page on www.ngmgroup.com.au. The same applies to subsidiary domains greater.com.au and newcastlepermanent.com.au.
What to change: Configure Cloudflare to allow AI crawler user-agents (e.g., GPTBot, ClaudeBot) by creating a firewall rule that bypasses the JS challenge for known bot IP ranges or user-agent strings.
Robots.txt returns 403, no bot directives accessible High
The robots.txt file at ngmgroup.com.au/robots.txt returns a 403 status behind the Cloudflare wall, meaning no crawler can read any directives. No AI bots are named in any accessible file.
What to change: Serve a robots.txt file that allows AI crawlers to access the site, and ensure it is not blocked by Cloudflare.
Sitemap.xml blocked by Cloudflare High
The sitemap at /sitemap.xml returns a 403 status, preventing crawlers from discovering the site's URL structure.
What to change: Ensure the sitemap.xml is publicly accessible and not behind the Cloudflare challenge.
No llms.txt file available Medium
The llms.txt file returns a 403, meaning there is no way for AI crawlers to discover a curated set of URLs for LLM consumption.
What to change: Create an llms.txt file that lists key pages for AI crawlers to index.
No JSON-LD schema on any page High
The live homepage returns zero JSON-LD schema. Wayback snapshots from 2023 also show no structured data on about-us, our-business, or our-strategy-and-purpose pages. No Organization, FinancialService, or WebSite schema is present.
What to change: Add JSON-LD structured data (Organization, FinancialService, WebSite) to all pages, especially the homepage and key corporate pages.
No search results for NGM Group or its domain High
Multiple web searches for 'NGM Group Australia', 'site:ngmgroup.com.au', and related queries returned zero results. The domain has no indexed pages in search engines.
What to change: Resolve the Cloudflare blocking issue to allow search engine crawlers to index the site, and submit the sitemap to Google Search Console.
LLM knowledge about NGM Group is outdated and unverifiable High
The LLM's knowledge of NGM Group (parent of Newcastle Permanent and Greater Bank, formed via 2022 merger, ~$30B assets) comes from external sources and cannot be refreshed from the corporate domain due to crawler blocking. The site cannot confirm or update this information.
What to change: Allow AI crawlers to access the site so that LLMs can ingest current corporate information directly from the domain.
Subsidiary brand domains also blocked to AI crawlers High
Both greater.com.au and newcastlepermanent.com.au return 403 to all AI bots tested, mirroring the parent domain's blocking.
What to change: Apply the same Cloudflare bypass for AI crawlers on subsidiary domains as recommended for the parent domain.
No external backlinks or press coverage found in search Medium
Searches for NGM Group in news, press releases, and social media returned zero results. The domain has no visible external signals.
What to change: Build external backlinks through press releases, industry partnerships, and social media presence to improve domain authority.
LinkedIn page not appearing in search results Low
The LinkedIn page for NGM Group Australia exists but is not surfaced in search results for relevant queries.
What to change: Optimize the LinkedIn page with relevant keywords and ensure it is linked from the corporate website once accessible.
What's working
- DNS verification tokens for major enterprise tools — The domain has DNS TXT records for Microsoft, Apple, Atlassian, Cisco, DocuSign, and Google, indicating enterprise-grade tooling integrations that could support future AI visibility efforts.
- Historical content available via Wayback Machine — A May 2023 Wayback snapshot shows the site had content including 'About us', 'Our business', and 'Our strategy and purpose' pages, indicating that the site was once publicly accessible and contained corporate information.
Track ngmgroup.com.au across AI search
This is one snapshot. Open the interactive report to inspect evidence, or grade another site free.