# transferistanbulairports.com: Airport Transfer Booking and Quote Search Page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/transferistanbulairports.com/ Machine-readable companion: https://phishdestroy.io/domain/transferistanbulairports.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-08 15:21:38 UTC - Selected availability observation: 2026-11-09T11:10:25Z - Stored record updated: 2026-11-09 11:25:51 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 77.245.156.236 - Registrar in stored WHOIS data: Realtime Register B.V. - Last stored HTTP status: 200 (observed: 2026-11-09T11:10:25Z) - Registration date in stored WHOIS data: 2026-04-18 22:59:31 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1bbec-dd1c-713e-b35d-8ce9d9835bca/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/transferistanbulairports.com - Certificate Transparency search: https://crt.sh/?q=%25.transferistanbulairports.com - Web Archive lookup: https://web.archive.org/web/*/https://transferistanbulairports.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records transferistanbulairports.com as a page offering airport transfer quotes with pickup, drop-off, date and trip type search fields. On 2026-11-08, transferistanbulairports.com displayed a homepage branded "Transfer Istanbul Airports" with the tagline "Fast, Safe & Comfortable" and a hero heading reading "Premium Airport Transfers From Istanbul" over a cityscape photograph. The header includes navigation links such as Home, About Us, Contact Us, Our Fleet, Agency Partnership, Blog and FAQ, along with a phone number, currency indicator, and Get a Quote, Log In and Sign Up buttons. A booking panel on the right offers Distance, Hourly and Flat Rate tabs, with fields for pickup location, drop-off location, date and trip type, plus a Search button. A Get a Quote button appears over the hero image, and a WhatsApp icon sits at the lower right corner. Package revision: 988c0f0499a3ec80080ac65d25bdd40e1ee50b13296c9829f3be197e9bcf628a Text generated (not scan time): 2026-11-08 16:36:04 Reviewed evidence snapshot: {"domain":"transferistanbulairports.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"transferistanbulairports.com","final_host":"transferistanbulairports.com","redirects":[],"captured_at":"2026-11-08T15:30:39Z","uuid":"2a1b82a7-971b-483c-84f1-c61b1beacf82","report_url":"https://radar.cloudflare.com/scan/2a1b82a7-971b-483c-84f1-c61b1beacf82","sha256":"72f89c11a698a85c2c5727bd8ae255467010fe6ed6bf6c41ee80dc5000d1064f","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal_public_summary":"","page_paragraph_target_characters":678} Source facts (timestamps as stored): {"record_id":1860488,"first_recorded_at":"2026-11-08 16:21:38","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":13,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-01T08:22:16Z","checked_at":null,"fetched_at":"2026-11-08T15:58:45Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-01 08:22:16","checked_at":"2026-11-08 16:58:45","fetched_at":"2026-11-08 15:58:46","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":45,"malicious":13,"suspicious":3,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 16:59:11"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-08 16:31:10"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1860488,"scope":"checked_url","observed_at":"2026-11-09T11:10:25Z","http_status":200,"http_observed_at":"2026-11-09T11:10:25Z","stored_http_code":200,"stored_http_observed_at":"2026-11-09T11:10:25Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-09T00:25:52Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-08: https://screenshots.phishdestroy.io/us/01a1bbec-dd1c-713e-b35d-8ce9d9835bca.png Captured: 2026-11-08 16:10:37 UTC Source report: https://urlscan.io/result/01a1bbec-dd1c-713e-b35d-8ce9d9835bca/ SHA-256: 309b153cb85c5055d0bbc4c1ff3bd79b49f15c4b1dfe90a0cd130ebcf0c36471 - URLScan · 2026-06-30: https://screenshots.phishdestroy.io/us/019f19a2-a15e-75bf-834b-d44544a7de77.png Captured: 2026-06-30 17:45:22 UTC Source report: https://urlscan.io/result/019f19a2-a15e-75bf-834b-d44544a7de77/ SHA-256: 9d6033fea6cf942e6efa5f6bba7d3bdf0b912e081993190a40db9c6701213140 - URLScan · 2026-07-01: https://screenshots.phishdestroy.io/us/019f1ced-56a8-7169-8863-37f13b23bb58.png Captured: 2026-07-01 09:05:51 UTC Source report: https://urlscan.io/result/019f1ced-56a8-7169-8863-37f13b23bb58/ SHA-256: 9d6033fea6cf942e6efa5f6bba7d3bdf0b912e081993190a40db9c6701213140 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2a1b82a7-971b-483c-84f1-c61b1beacf82.png Captured: 2026-11-08 15:30:39 UTC Source report: https://radar.cloudflare.com/scan/2a1b82a7-971b-483c-84f1-c61b1beacf82 SHA-256: 72f89c11a698a85c2c5727bd8ae255467010fe6ed6bf6c41ee80dc5000d1064f - URLQuery: https://screenshots.phishdestroy.io/uq/7266cb66-8d43-43b5-83b2-e7c133417258.png Source report: https://urlquery.net/report/7266cb66-8d43-43b5-83b2-e7c133417258 SHA-256: 14c386417703cc9ad240d3abaf599da50a218a0bbfe1ad9367006dcc9d94d63a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-08T16:13:36Z", "uuid": "01a1bbec-dd1c-713e-b35d-8ce9d9835bca", "scanned_at": "2026-11-08T16:10:37Z", "final_url": "https://transferistanbulairports.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://transferistanbulairports.com/", "from": "http://transferistanbulairports.com/", "status": 307 } ], "ip": "77.245.156.236", "domains": [ "fonts.bunny.net", "region1.google-analytics.com", "images.unsplash.com", "www.googletagmanager.com" ], "ips": [ "2001:4860:4802:32::36", "2a04:4e42::720", "2a00:1450:4001:c15::61", "2a01:4f8:162:3148::2", "77.245.156.236" ], "asns": [ "15169", "54113", "24940", "42868" ], "countries": [ "US", "DE", "TR" ], "link_domains": [ "wa.me" ], "social": [ "https://wa.me/905475579090" ], "doc_hash": "d545928450346d9bd2865dd88751a712298a1c4d76ce7d1fb8e1b5f6fa45bdad", "script_hashes": [ "0a1e4e13d57647a76ac5d22e067ff77a9106474a9d178d442ac631ee9418f5b4", "ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e", "c19def3576a41fd9383f4d1f3460256cdd0f929292ca145aefa205cb85753d81", "b5f6d1cd9dfac2e3e8794297cae7b0acb3b371f81d3b6a2f738a33b9845632ce", "5270ebfbf08a9aba092740ccb6aa1281b2e568f33103879f274cd9ff30f0323d", "83ab06161714292f6bb0fda1ec45df28d5deb8b6d7e3a0e6bd76b1b5631e1f37", "558a07e13cd97a7c5f20c3f826bf6987cfa3b855af40c83c0e4e7b31f99926e5", "be4b4341faff22486bb6d8bf140faee4ba213733e9152961a7d5e3fab111fd5b", "ea54310969db9ea93a31008463035e82982b59360ab20b9f960f8227e517e451", "e33ae7fdc65b222f81411fa557104f390a18a0e54a15e20cd8e22d8549cf1d2a" ], "globals": [ "gtag", "dataLayer", "toggleFooterCol", "html5", "Modernizr", "$", "jQuery", "uidEvent", "bootstrap", "Waypoint", "WOW", "PerfectScrollbar", "jQueryBridget", "EvEmitter", "getSize", "matchesSelector", "fizzyUIUtils", "Outlayer", "Isotope", "Masonry", "Swiper", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "noUiSlider", "wNumb", "switchBilled", "initSwiper2IemSingle", "initSwiperFleet", "initSwiperFleet3Item", "initSwiper1Iem", "initSwiperTestimonials", "initSwiperService", "initSwiperCities", "initSwiperTab", "THInitCustomSelects", "_currencySymbols", "CURRENCY", "DISPLAY_CURRENCY" ], "cookies": [ "XSRF-TOKEN", "laravel-session", "_ga_PK7K6420PB", "_ga" ], "tls": { "san": [ "transferistanbulairports.com", "www.transferistanbulairports.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "transferistanbulairports.com", "protocol": "TLS 1.3", "valid_to": "2027-01-10T07:47:29Z", "valid_from": "2026-10-12T07:47:30Z" }, "domain_age_days": 1186, "apex_age_days": 1186, "tls_age_days": 27, "tls_valid_days": 89, "requests": 68, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-11-08T15:35:00Z", "uuid": "2a1b82a7-971b-483c-84f1-c61b1beacf82", "scanned_at": "2026-11-08T15:30:39Z", "final_url": "https://transferistanbulairports.com/", "status": 200, "history": [ { "url": "https://transferistanbulairports.com/", "status": 200 } ], "dom_hash": "0d166eecf529aa4ce5e2c912084c9fee46beec112fdcf9d1d527fe92bee48d06", "doc_hash": "d161500dbc158fdff364a1d708c451e463ca488d6ccd5147d3f7f43a6b843d52", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "transferistanbulairports.com", "type": "A", "value": "77.245.156.236" } ], "dnssec_valid": false, "ip": "127.0.1.23", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-04-19T00:59:31Z", "updated": "2026-07-13T16:44:11Z", "expires": "2027-04-19T00:59:31Z", "nameservers": [ "p3.hosting.com.tr", "p4.hosting.com.tr" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-08T15:58:45Z", "analysis_at": "2026-11-01T08:22:16Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 13, "suspicious": 3, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-04-19T00:00:00Z", "updated": "2026-04-19T00:00:00Z", "first_seen": "2024-03-05T16:17:51Z", "dns": [ { "ttl": 300, "type": "TXT", "value": "google-site-verification=KXjXCqw_Gly9n9c4YdZsiqJLIPPVwP4viRo1oOifjEQ" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 a mx ip4:77.245.159.230 ~all" }, { "ttl": 300, "type": "A", "value": "77.245.156.236" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.transferistanbulairports.com", "value": "p3.hosting.com.tr" }, { "ttl": 300, "type": "MX", "value": "mail.transferistanbulairports.com", "priority": 10 }, { "ttl": 300, "type": "NS", "value": "p3.hosting.com.tr" }, { "ttl": 300, "type": "NS", "value": "p4.hosting.com.tr" } ], "dns_at": "2026-11-02T03:00:50Z", "jarm": "3fd3fd0003fd3fd00042d43d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "transferistanbulairports.com", "www.transferistanbulairports.com" ], "issuer": "Let's Encrypt / YR1", "serial": "59a20418e3f59c2d08dd2c9e400ac78eb39", "sha256": "550ac0c05fc4dfd95135531ce45101757a4766e0ceb536c82c13acd92e4e752a", "subject": "transferistanbulairports.com", "valid_to": "2027-01-10T07:47:29Z", "valid_from": "2026-10-12T07:47:30Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-04-19T00:59:31Z", "last changed": "2026-07-13T16:44:11Z", "registration": "2026-04-19T00:59:31Z", "registrar expiration": "2027-04-19T00:59:31Z", "last update of RDAP database": "2026-10-30T13:51:51Z" }, "registrar": "REALTIME REGISTER B.V.", "registrar_iana_id": "839" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-08T15:29:24Z", "mail_config": { "mx": [ "mail.transferistanbulairports.com" ], "spf": "v=spf1 a mx ip4:77.245.159.230 ~all", "spf_lookups": 2 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2024-07-19T02:11:59Z", "first": "2013-08-18T23:19:29Z", "changes": 5, "days_archived": 10, "scans_per_day": 0, "avg_page_bytes": 1939 }, "robots_txt": { "agents": [ "*" ], "present": true, "llms_txt": true, "sitemaps": [ "https://transferistanbulairports.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 19 }, "social_tags": { "ogUrl": "https://transferistanbulairports.com", "title": "Transfer Istanbul Airport | Book Private Transfers — TransferIstanbulAirport", "author": "TransferIstanbulAirport", "ogType": "website", "robots": "index, follow", "ogImage": "https://transferistanbulairports.com/assets/imgs/template/og-image.jpg", "ogTitle": "Transfer Istanbul Airport | Book Private Transfers — TransferIstanbulAirport", "keywords": "istanbul airport transfer, istanbul taxi, private transfer istanbul, istanbul car hire, airport shuttle istanbul", "ogSiteName": "TransferIstanbulAirport", "description": "Book premium Istanbul airport transfers online. Fixed prices, professional drivers, 24/7 service. Private transfers from IST & SAW airports to hotels, resorts and city centre.", "twitterCard": "summary_large_image", "canonicalUrl": "https://transferistanbulairports.com", "ogDescription": "Book premium Istanbul airport transfers online. Fixed prices, professional drivers, 24/7 service. Private transfers from IST & SAW airports to hotels, resorts and city centre." }, "mixed_content": { "no_sri": [ "https://www.googletagmanager.com/gtag/js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 61, "tls": 102, "wait": 598, "connect": 464, "download": 121 }, "response_ms": 1346 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 3000 ] }, "carbon": { "bytes": 177575, "co2_grams": 0.0065, "cleaner_than": 10 }, "dns_server": { "ns": [ { "ip": "77.245.158.230", "host": "p3.hosting.com.tr" }, { "ip": "77.245.159.230", "host": "p4.hosting.com.tr" } ], "zone": "transferistanbulairports.com" }, "location": { "ip": "77.245.156.236", "asn": "42868", "org": "Niobe Bilisim Ltd. Sti.", "city": "Istanbul", "country": "TR" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "transferistanbulairports.com" }, "dns": { "A": [ "77.245.156.236" ], "MX": [ "{\"exchange\": \"mail.transferistanbulairports.com\", \"priority\": 10}" ], "NS": [ "p3.hosting.com.tr", "p4.hosting.com.tr" ], "SOA": "{\"nsname\": \"p3.hosting.com.tr\", \"hostmaster\": \"hostmaster.transferistanbulairports.com\", \"serial\": 2026101301, \"refresh\": 3600, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 300}", "TXT": [ "v=spf1 a mx ip4:77.245.159.230 ~all", "google-site-verification=KXjXCqw_Gly9n9c4YdZsiqJLIPPVwP4viRo1oOifjEQ" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "77.245.156.236", "family": 4 }, "redirects": { "chain": [ "https://transferistanbulairports.com" ] }, "linked_pages": { "external": [ "https://wa.me/905475579090" ], "external_count": 1, "internal_count": 35 }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-04-19T00:59:31Z", "updated": "2026-07-13T16:44:11Z", "expires": "2027-04-19T00:59:31Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "p3.hosting.com.tr", "p4.hosting.com.tr" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/2a1b82a7-971b-483c-84f1-c61b1beacf82.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/2a1b82a7-971b-483c-84f1-c61b1beacf82","captured_at":"2026-11-08T15:30:39Z","sha256":"72f89c11a698a85c2c5727bd8ae255467010fe6ed6bf6c41ee80dc5000d1064f","model_image_sha256":"c6663229953f4b7b202e8b6f0ae92ac5b24b6622c8ecac19c199be77a934e247","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/transferistanbulairports.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1860488, "scope": "checked_url", "observed_at": "2026-11-09T11:10:25Z", "http_status": 200, "http_observed_at": "2026-11-09T11:10:25Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-09T11:10:25Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-09T00:25:52Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```