carmelitegothic.com appears to be a niche site documenting the stone carving craft of the Carmelite Monks, a story that earned 164 upvotes on Hacker News in 2022. The domain was registered in April 2022 and has a stable four-year history, with no malware or phishing flags raised by Google Web Risk or DNS blacklists. The site uses modern encryption and reliable email authentication, which are positive signs. However, we weren't able to view the homepage because it returned a 409 error, so direct verification of the site's current content or contact details isn't possible. For a small hobby or informational site, this isn't unusual, but if you're looking to commission work or buy products, you may want to find alternative ways to reach the monks directly. The lack of an about page or social media links is a gap, but given the site's age and reputation signals, there's no reason to believe it's a scam. Treat it as a genuine personal project that's currently hard to inspect directly.
In plain English
carmelitegothic.com looks like a legitimate site for the Carmelite Monks' stone carving work, supported by a four-year domain history and no security threats or blacklists. The main caveat is that we couldn't inspect the homepage directly, so we can't verify current contact details or what the site specifically offers.
Where the score comes from
Solid security: the site uses modern encryption with a valid certificate from a trusted issuer, and no malware or phishing flags were raised. The only minor gap is the lack of browser protections that block clickjacking, but that's common for smaller sites.
The domain has been registered for over four years, which is a good sign of stability. The owner uses privacy protection, which is perfectly normal for a personal site. The Hacker News story with 164 points shows real community interest in the content.
Excellent reputation signals: no blacklists, no Google Web Risk flags, and a web archive history stretching back four years. The Hacker News upvotes show that real people found value in this site.
We couldn't inspect the homepage directly due to a server error, so we don't have clear information about who runs the site or how to contact them. For a personal blog this isn't alarming, but it does mean we can't verify claims.
No privacy policy or terms of service were found, but for a hobby site that doesn't handle payments or sensitive data, this is expected and not a compliance failure. The lack of a working homepage prevents further assessment.
The site's technical setup is standard: it has working email, an SPF record for authentication, and reliable DNS. DNSSEC isn't enabled, but that's common among smaller sites and doesn't affect trustworthiness.
What we checked
Security & Transport
Certificate issued by Let's Encrypt
No threats detected by Google Web Risk
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
Valid certificate, expires in 49 days
Site does not set common security response headers (CSP, HSTS, X-Frame-Options, etc)
Web server: Apache
Connection uses TLS 1.3
Identity & WHOIS
No About / Team / Company page detected.
The homepage answered with an error page
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
The homepage answered HTTP 409, so the page read isn't the site's own
Domain created 2022-04-24 (4 years, 6 months ago)
Expires in 908 days
No privacy policy or terms of service found — expected for commercial sites, normal for personal blogs and hobby projects
The registration shows a privacy service or redaction notice in place of the owner. Most registrars do this by default since GDPR (2018), for companies as well as individuals, so it hides nothing unusual.
Registered through Bluehost Inc.
Infrastructure & DNS
Not listed by SpamCop, Barracuda and URIBL, the blacklists that answered
Resolves to: 50.87.174.119
Domain is not signed with DNSSEC
DNSSEC status from WHOIS
Mail servers: carmelitegothic-com.mail.protection.outlook.com.
Hosted on: AS46606 UNIFIEDLAYER-AS-1 (US)
DNS providers: ns1.bluehost.com., ns2.bluehost.com.
Fast page load, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
Domain has SPF email authentication configured
Reputation & Reach
Hacker News readers upvoted links to this site in 2 different years between 2022 and 2026. The most upvoted, "CNC Gothic Stone Carving by the Carmelite Monks" (2022), got 164 points.
No sitemap found — common for smaller sites
No social media links found on homepage
No structured data markup found
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Earliest archive snapshot from 20220519
Website returned status 409
No robots.txt file — common for small sites
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →