This is a long-running personal travel blog run by a named individual, not a business or shop. The site has been around for 14 years, has a clean security record, and is transparent about who runs it. The main missing items — DNSSEC, browser security headers — are typical for this kind of site and don’t raise safety concerns.
Cross-referenced 41 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Oct 28, 2026.How we score →
Where the score comes from
We look at six areas. Here's how johnhendersontravel.com did in each.
75
Security
The site uses a valid SSL certificate with modern encryption, and Google’s threat checks come back clean. It doesn’t set browser-level protections like clickjacking headers, which is a minor gap for a travel blog that doesn’t handle logins or payments.
70
Identity
The domain is 14 years old and registered through a standard registrar, but the registrant isn’t visible due to GDPR privacy. That’s normal for a personal blog — the long history and consistent name in the domain and page title give reasonable confidence in who runs it.
75
Reputation
The site has been in the Wayback Machine for over a decade, no blacklist hits, and no malware flags. A single Hacker News mention in 2026 adds a sliver of external interest, but there’s nothing to suggest reputational risk.
85
Transparency
The site has a clear about page, an actual name (John Henderson) attached to it, active social media links, and a contact page with a free email address — which is typical for a solo travel writer. For a personal blog, this is transparent enough.
70
Compliance
The site publishes both a privacy policy and terms of service, which is more than most personal blogs bother with. It also has a legal entity disclosure page, likely due to EU rules. No cookie consent popup was detected, but that’s common for low-traffic blogs and not a big concern given the site type.
65
Infrastructure
DNS is set up with email authentication, a strict DMARC policy, and a clean mail server, but DNSSEC is off and security headers are missing. The hosting is on a US network with a US-based IP, which is fine for a blog. Nothing broken, just a few optional extras not configured.
What we checked
The 41 signals behind this report.
Security & Transport
Certificate Issuer: Neutral
Let's Encrypt
Certificate issued by Let's Encrypt
Google Web Risk: Good
Clean
No threats detected by Google Web Risk
Protective DNS: Neutral
Not blocked
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
SSL Certificate: Good
Valid
Valid certificate, expires in 45 days
Search Cloaking: Neutral
Not detected
Neither a visitor arriving from a Google search nor Google's crawler was sent elsewhere or shown spam that a direct visit wasn't. Cloaking that checks the visitor's network address can't be seen from our server.
Security Headers: Neutral
0 of 6
Site does not set common security response headers (CSP, HSTS, X-Frame-Options, etc)
Server: Neutral
Apache
Web server: Apache
TLS Version: Good
TLS 1.3
Connection uses TLS 1.3
Identity & WHOIS
About Page: Good
Found
Site publishes an About / Team / Company page — a transparency signal that the operator is willing to describe who runs the business.
Branding: Good
Complete
Site has custom branding and social media metadata
Homepage has a contact page link and an email address on a free webmail service. The only email address offered is a free webmail account (Gmail, Outlook, Yahoo and the like) rather than one on the site's own domain: normal for a personal site or sole trader, unusual for an established business.
Domain Age: Good
14 years, 4 months
Domain created 2012-06-20 (14 years, 4 months ago)
Domain Expiry: Neutral
2027-06-20
Expires in 235 days
Legal Pages: Good
Privacy & Terms found
Website has both privacy policy and terms of service pages
Registrant: Neutral
Not published
The registration record we could read names no owner. Many registrars publish no owner details at all since GDPR (2018), so this hides nothing unusual.
Registrar: Neutral
Wild West Domains, LLC
Registered through Wild West Domains, LLC
Infrastructure & DNS
DMARC Record: Good
p=reject
Domain enforces strict DMARC — unauthenticated mail is rejected
DNS Blacklists: Neutral
Clean
Not listed by SpamCop, Barracuda and URIBL, the blacklists that answered
DNS Resolution: Good
1 IP(s)
Resolves to: 23.111.179.26
DNSSEC: Neutral
Not enabled
Domain is not signed with DNSSEC
DNSSEC: Neutral
unsigned
DNSSEC status from WHOIS
Email (MX Records): Good
1 record(s)
Mail servers: johnhendersontravel.com.
Hosting Network (ASN): Neutral
AS29802 HVC-AS
Hosted on: AS29802 HVC-AS (US)
Name Servers: Neutral
2 server(s)
DNS providers: ns1.nrvdigital.com., ns2.nrvdigital.com.
Page Load Time: Neutral
1086ms
Average page load time, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
Platform: Neutral
WordPress
Site is built on WordPress
SPF Record: Good
Present
Domain has SPF email authentication configured
Reputation & Reach
Hacker News: Neutral
1 story since 2026
Hacker News readers only upvoted links to this site in 2026, and one burst of attention says less than interest over the years. The most upvoted, "Txoko: Basques' traditional feast a gastronomic peek into a culture (2024)" (2026), got 47 points.
Open Graph Type: Neutral
website
og:type declared as website
Page Description: Neutral
John Henderson's Travel Adventures in Rome and Beyond
Page Language: Neutral
en-US
HTML declares lang="en-US"
Page Title: Neutral
John Henderson's Travel Adventures in Rome and Beyond
Schema Name: Neutral
John Henderson
Sitemap: Neutral
Unable to check
Bot protection blocked the sitemap request
Social Media Presence: Good
2 platforms
Homepage links to profiles on Facebook, X
Structured Data: Good
Found
Site uses structured data identifying itself as: WebSite
Tranco Rank: Neutral
Not ranked
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Web Archive History: Good
13 years
Earliest archive snapshot from 20130308
Website Status: Good
Online
Website is live and responding
robots.txt: Good
Present
robots.txt has 6 directives and references a sitemap
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
JohnHendersonTravel.com is a personal travel blog, not an e-commerce site or booking platform. That distinction matters because the trust signals that matter for a blog are different from what you'd look for on a site that takes your money. This one has been online since 2012, posts regularly about travel destinations, and clearly identifies its author — John Henderson — with a photo and bio. The contact email is a free Gmail address, which fits a solo writer running a side project.
For a travel blog, the main risks are usually malware or phishing, and this site shows neither. Its SSL certificate is valid, Google's safe browsing tools flag nothing, and the domain has never appeared on email blacklists. The site also has privacy and terms pages, which is more than most personal blogs offer. If you're reading a travel story on JohnHendersonTravel.com, there's no reason to worry. If you were being asked to pay for a tour or hotel through this site, that would be a different story — but that's not what this is.