{"report_id":"4ba12225-adf7-4562-ae5d-6808dbbbefae","version":0,"status":"done","tags":[],"date":"2026-07-12T20:56:56Z","url":{"schema":"https","addr":"qatravelpromotions.com/","fqdn":"qatravelpromotions.com","domain":"qatravelpromotions.com","tld":"com"},"ip":{"addr":"172.67.214.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qatravelpromotions.com/","fqdn":"qatravelpromotions.com","domain":"qatravelpromotions.com","tld":"com"},"title":"Qatar Airways and Philippine Airlines strengthen partnership, expand markets and benefits for loyalty members","dom":{"size":24075,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17789)","md5":"4091f49a525c6e1531b6f193a354141f","sha1":"e1b40f658f345ab4ba059de75071097c086cc690","sha256":"27eafae6a85d448c4f0488a202958c91f3aafdd83b72290c3850e1a27e6e6cb6","sha512":"b15c4680c22adcaa4900ff545c2f62e2b9136e3e08302d34d2739a434fee34829d45bb72c7f2bbffb75567781cf2ea335b6a2603fc8baaff42475daa949e00a6","ssdeep":"384:Bx4w4/3sokby1I3MiMI9PqTp1zGUqey1OF:YwDokbyi3UI9PqtYUqeyIF","tlshash":"eeb295635320047e268347a8f114bb2990aec25be71b9d3cf37c506b2f85d98e677398","dom_hash":"domhash1bbc20d58eba095330dc9ba727040a8a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qatravelpromotions.com/","fqdn":"qatravelpromotions.com","domain":"qatravelpromotions.com","tld":"com"},"ip":{"addr":"172.67.214.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:56:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"qatravelpromotions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"qatravelpromotions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"airwaysqapromo.com","ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-04","domain_rank":0,"first_seen":"2026-07-12T20:56:57.07474Z","last_seen":"2026-07-12T20:56:57.07474Z","alert_count":0,"request_count":6,"received_data":241249,"sent_data":3234,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qatravelpromotions.com","ip":{"addr":"172.67.214.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":7897,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.qatar-tribune.com","ip":{"addr":"172.67.72.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-05-31","domain_rank":5595592,"first_seen":"2012-11-09T04:02:10Z","last_seen":"2026-04-29T17:46:31.374146Z","alert_count":0,"request_count":1,"received_data":270491,"sent_data":596,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/static/js/main.a2c9a793.js","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b95865c4b4ad048ef516af3bf36cf14","sha1":"4c942f58cc2b44f38fc2fe5d8cdf36e78d579ed4","sha256":"b02c8543327e62162ac5704c5e961330160316621eb599a6500eb5a505dd7fbc","sha512":"253ea37f041e45de68a8d216e232e5876f37acccf49dd70379765c4e82dd7f96aef6eb010c7ed4d284dae53acbcc55351f0bff168e3b9eb0eb425e0371172e7f","ssdeep":"3072:Fnkj6oYjCjcfG+JyKhRpNqAp9SVmSYyME:Fkj6L3tqAfSVH6E","tlshash":"d01419e83955f5616eb202b7109f1807737c1a2b680d4da0b211fdaeb4b845eb13bfd9","size":208207,"data":"","first_seen":"2026-07-12T20:57:01.545891Z","last_seen":"2026-07-12T20:57:01.545891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/favicon.png","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.905Z","timestamp":1783889788905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airwaysqapromo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 19:58:11 GMT","end":"Wed, 02 Sep 2026 20:56:48 GMT"},"fingerprint":{"sha1":"32:DA:D5:74:A5:B0:E7:96:92:06:1B:7C:E7:7E:40:B0:01:74:6C:17","sha256":"54:D9:5B:A6:1B:FC:89:40:8C:01:2A:8D:B0:DA:92:50:F8:EA:86:2B:77:56:52:99:63:91:2D:E9:3D:D5:47:68"}}},"request":{"raw":"GET /lander/qa-santoz-white-1/favicon.png HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 12 Jul 2026 20:56:28 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAKaPsYx0ya%2FGg8aoE%2BPptZNhuVW5TwMVoEmJmuT33v5gpMpB4CyEFr3qUNVoAt8E8xPJR5sk5GUdYjXXzY3kvrfEFsbK1VcjErNoUmbo00WYUcW3%2BDioK%2BAy441jInDSbzda3w%3D\"}]}\r\ncf-ray: a1a2f46cada80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T09:17:26.728014Z","times_seen":17209512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qatravelpromotions.com/","fqdn":"qatravelpromotions.com","domain":"qatravelpromotions.com","tld":"com"},"ip":{"addr":"172.67.214.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:56:26.877Z","timestamp":1783889786877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatravelpromotions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 16:52:20 GMT","end":"Sun, 04 Oct 2026 17:50:52 GMT"},"fingerprint":{"sha1":"2B:98:7D:85:A7:00:C3:A5:8D:F4:63:D8:74:95:84:76:80:FD:82:4B","sha256":"B9:0E:FA:72:28:0E:B8:61:CF:DC:C1:00:C1:83:1D:25:F6:12:FC:29:34:8C:CF:D4:C3:4B:37:88:B3:4A:DF:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qatravelpromotions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=5hu3aol0kggsvened0je2gnn6v; path=/\ne3b0c4_10=faortojupui; expires=Mon, 13-Jul-2026 20:56:27 GMT; Max-Age=86399; path=/; domain=.qatravelpromotions.com; secure; HttpOnly\n_token=faortojupui.1783976187.1.c68b336a34571be718a75e3c6669f7a6; expires=Mon, 13-Jul-2026 20:56:27 GMT; Max-Age=86399; path=/; domain=.qatravelpromotions.com; secure; HttpOnly\n_subid=11d9oq3.a.7lv1; expires=Mon, 13-Jul-2026 20:56:27 GMT; Max-Age=86399; path=/; domain=.qatravelpromotions.com; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kWDO83gucsv1v1%2FDc9E%2BzsKWG6AUnC62R99ro5NPvBTUvbxJLWJycB3rzvlYuHtIfFo7E9rOmrB8Q4vNhrqLoulz%2B7pdM%2BerzX6pyK%2BHldxe4Wmzsax7Qi83xV%2Bl%2BcvbrX2Sl1LfFLl\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f4602e8e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6660,"size_decoded":3022,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3377)","md5":"a483b53e13ea3a376c307c97d80e34e5","sha1":"7cefb1bb602a16e5585d4ea41a4d4e5856a629d5","sha256":"d10f99db110abf1f620bdbb4f44415b3d5103be90b8d7b570e291a1735148e6a","sha512":"3b20b695af5fe760159646d235162cb036832431c825940d0a54a601530108bb135f7c3275630202b4ed13abc475dd127c1defbbef1cd2e08d2054987b032725","ssdeep":"96:zSUzVryA77/cAj8myEziWJAL0RsTRe9h2OwzVQ9oR1CmT3RC7gTPhdhVWDLC7Rf:vVrBzAZVQeR1RRqg4LqRf","tlshash":"b6d14463c73158681e2183b5ae56f109812dc0277368ec6cfb5c14af0bc5a97e277b6b","first_seen":"2026-07-12T20:57:01.536428Z","last_seen":"2026-07-12T20:57:01.536428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":1237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"qatravelpromotions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"qatravelpromotions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/static/css/main.e8808cc8.css","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.599Z","timestamp":1783889788599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airwaysqapromo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 19:58:11 GMT","end":"Wed, 02 Sep 2026 20:56:48 GMT"},"fingerprint":{"sha1":"32:DA:D5:74:A5:B0:E7:96:92:06:1B:7C:E7:7E:40:B0:01:74:6C:17","sha256":"54:D9:5B:A6:1B:FC:89:40:8C:01:2A:8D:B0:DA:92:50:F8:EA:86:2B:77:56:52:99:63:91:2D:E9:3D:D5:47:68"}}},"request":{"raw":"GET /lander/qa-santoz-white-1/static/css/main.e8808cc8.css HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 21:21:32 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a21ec5c-5bce\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6KndHL%2Fe8YvVT1aNLtbdV58uAfdnjM4o%2F073yNTi6848hJ%2BpiOW%2BeigOUyXzN%2BLzizUkk69fq%2FY1riiNVjiW6zAV9fI6UX17pRYLXhIMrohXY%2FTzJmEg5k0GvzxFkKH0Oyj5SA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f46aed2b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23502,"size_decoded":5972,"mime_type":"text/css","magic":"ASCII text, with very long lines (21184)","md5":"f537b3454d3c0f8b5c3caae1621fc9db","sha1":"df7b6dd801d45bdbb867e266e2869d0422fe6f6d","sha256":"eb968a70ca2cd66d6326544ca9f9a62eacad23b1a1dfdc89ba80a24ccf4777f4","sha512":"35f4b1607c7f2d8baca8d6c4b182415bc7cdf09c69e5397ac4ac31b6ef26036ec45e8494cff37ce038e7ed629f0049846bbe47a5acaa70c5978cde3ff8fe4506","ssdeep":"192:Y7JXSS7JXSziEepu9sfhqQsS/czk9fn6g6GmEdCEcVnANN0e9UvZ/bTt:GFfFuQ4S/hf563aUANN0gQp5","tlshash":"0eb2621eeb55153b7c2784fae454fe99a217a1c1ef2a97e6f84326008bd52e33c93344","first_seen":"2026-07-12T20:57:01.53741Z","last_seen":"2026-07-12T20:57:01.53741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qatar-tribune.com/watanqatartribune/uploads/images/2026/05/18/362473.jpg","fqdn":"www.qatar-tribune.com","domain":"qatar-tribune.com","tld":"com"},"ip":{"addr":"172.67.72.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.805Z","timestamp":1783889788805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qatar-tribune.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 00:10:38 GMT","end":"Tue, 01 Sep 2026 01:10:22 GMT"},"fingerprint":{"sha1":"26:53:3B:5F:B7:62:98:28:52:86:8F:72:89:91:0D:29:88:57:B4:7B","sha256":"71:C7:D3:A3:22:EB:9A:D1:D0:07:F0:2D:F8:98:F2:17:60:E5:49:8D:A6:C3:6A:7D:F8:15:A2:B2:2D:01:EC:87"}}},"request":{"raw":"GET /watanqatartribune/uploads/images/2026/05/18/362473.jpg HTTP/1.1\r\nHost: www.qatar-tribune.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:56:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 269802\r\nserver: cloudflare\r\nlast-modified: Mon, 18 May 2026 10:10:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a0ae58d-41dea\"\r\nlocationdebug: 1\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYF%2FxZJsAeXp5xPm3BHqXLBDkajaFn76dHH7myrhowXVs0dgF90JMngqnVVK%2BqE9EV7IsnAsxo9M9iDu87lBxPcmm%2BFlLNG2jYt2rAzfWGRRnzvuqvzgcHoev9XVS5cuohvSo90lzw%3D%3D\"}]}\r\ncf-ray: a1a2f46c2f22b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269802,"size_decoded":270491,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x525, components 3","md5":"e81a6ec8f4a0e877d98fa66d7ce30d61","sha1":"2e10eb378136c82ac97de1568ff24d1477929cdd","sha256":"ef3835213e09fe9622305116f4b56a73569a2209dc76723b88c8b2bcc1a6bdc6","sha512":"edfe005926980b844821577371e89dd7cd87f2220703c7edd263e6cf4100d5a4f896aaa5f759c9b27c61e74b887ee79f76466163a147a6ea2e84d5a11ff3e92b","ssdeep":"6144:ldBwFUhDv215RnJaqSahiG0bxjnlRuPN1PNE/:fYUhD+15RsqSa0G0bxjnlR0PNE/","tlshash":"d14423f48d138a3b63fd487e20ef52211bd4935d4dade0a7170029a7c6819cec99da7e","first_seen":"2026-07-12T20:57:01.538388Z","last_seen":"2026-07-12T20:57:01.538388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":0,"dns":8,"connect":1,"send":0,"wait":270,"receive":850,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/logo192.png","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.904Z","timestamp":1783889788904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airwaysqapromo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 19:58:11 GMT","end":"Wed, 02 Sep 2026 20:56:48 GMT"},"fingerprint":{"sha1":"32:DA:D5:74:A5:B0:E7:96:92:06:1B:7C:E7:7E:40:B0:01:74:6C:17","sha256":"54:D9:5B:A6:1B:FC:89:40:8C:01:2A:8D:B0:DA:92:50:F8:EA:86:2B:77:56:52:99:63:91:2D:E9:3D:D5:47:68"}}},"request":{"raw":"GET /lander/qa-santoz-white-1/logo192.png HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 21:21:32 GMT\r\npriority: u=6,i=?0\r\netag: \"6a21ec5c-14e3\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sl7%2FoJ7CEvaTn%2F1g%2FqMask9MwWPKddEkH2%2F7Bw%2F8I29j%2FRhs%2FXkO3m6%2Bs1jEkwWVu%2FsZUltmXVrCQvDHGLdotkkBMASZ64TqlQGtf7R75k5ZaEQle9RI1JhPLG4WBSNgc3aB%2Fbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f46cada70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":6089,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-07-13T08:09:39.931411Z","times_seen":11440,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/static/js/main.a2c9a793.js","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.597Z","timestamp":1783889788597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airwaysqapromo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 19:58:11 GMT","end":"Wed, 02 Sep 2026 20:56:48 GMT"},"fingerprint":{"sha1":"32:DA:D5:74:A5:B0:E7:96:92:06:1B:7C:E7:7E:40:B0:01:74:6C:17","sha256":"54:D9:5B:A6:1B:FC:89:40:8C:01:2A:8D:B0:DA:92:50:F8:EA:86:2B:77:56:52:99:63:91:2D:E9:3D:D5:47:68"}}},"request":{"raw":"GET /lander/qa-santoz-white-1/static/js/main.a2c9a793.js HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Jun 2026 21:21:32 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a21ec5c-32d4f\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Er2wJdPNmTg%2B5vPy3ds607TZyVHTBIvXnRdK0%2Bvd40rYleDG9uU68i72bd9%2F9cOV8idf%2FMMEPxMPMSZ7ucwH9RRGDtWwODwGjsCPzGBncY%2F32gBeU8XUeVZ1Iy9WE4MPo2NhmYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f46aed2c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208207,"size_decoded":65826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"5b95865c4b4ad048ef516af3bf36cf14","sha1":"4c942f58cc2b44f38fc2fe5d8cdf36e78d579ed4","sha256":"b02c8543327e62162ac5704c5e961330160316621eb599a6500eb5a505dd7fbc","sha512":"253ea37f041e45de68a8d216e232e5876f37acccf49dd70379765c4e82dd7f96aef6eb010c7ed4d284dae53acbcc55351f0bff168e3b9eb0eb425e0371172e7f","ssdeep":"3072:Fnkj6oYjCjcfG+JyKhRpNqAp9SVmSYyME:Fkj6L3tqAfSVH6E","tlshash":"d01419e83955f5616eb202b7109f1807737c1a2b680d4da0b211fdaeb4b845eb13bfd9","first_seen":"2026-07-12T20:57:01.545891Z","last_seen":"2026-07-12T20:57:01.545891Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":9,"connect":14,"send":0,"wait":81,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/static/js/main.e35a6c3f.js","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.601Z","timestamp":1783889788601,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /lander/qa-santoz-white-1/static/js/main.e35a6c3f.js HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvXVyCphxQozG2Wk1O9pl6RpobxiCScic5tMRVjDtrv6JwEDUNT8FXrhlFPeC6Wdh5P%2BTWx7XDg3k5yQ77F8gwuug0lebLoWowDy4fTyX82hVGh1%2BtG2mrMyB24u5Br1tD8Sv0Q%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f46aed2a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T09:17:26.728014Z","times_seen":17209512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airwaysqapromo.com/lander/qa-santoz-white-1/static/css/main.1f6b218e.css","fqdn":"airwaysqapromo.com","domain":"airwaysqapromo.com","tld":"com"},"ip":{"addr":"172.67.216.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qatravelpromotions.com/","date":"2026-07-12T20:56:28.603Z","timestamp":1783889788603,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /lander/qa-santoz-white-1/static/css/main.1f6b218e.css HTTP/1.1\r\nHost: airwaysqapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qatravelpromotions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:56:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 12 Jul 2026 20:56:28 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMRvvoZH%2FLgQLO%2F8JGRP2mQBXs%2B5Rq04yRSQFqJUkpj9rZerDZexZcPBYLSbr1TM7avXkoAGsehXIRZFBLAhAngYysVAS2fu0mvYCGMacwORFjCCvnVj2R46zYKkgrMNMXo9UyA%3D\"}]}\r\ncf-ray: a1a2f46aed290883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T09:17:26.728014Z","times_seen":17209512,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}