The less paranoid explanation is that the operator of the authoratative DNS servers for the domain passed on the logs. That explains the log filenames.