This is either .QA Authority DNS server or Qtel/OOredoo DNS server that was attacked. But when this happened, I switched on my US VPN service and was able to access www.google.com.qa. So most likely its Qtel DNS server's were the one affected. Scary if they create a website that looks like the original to harvest username and password (man in the middle attacked).