[
  {
    "model": "app.client",
    "pk": 1,
    "fields": {
      "hostname": "ws-5262",
      "ip_address": "198.51.100.188",
      "department": "Sales",
      "first_query_at": "2025-09-16T13:52:02Z"
    }
  },
  {
    "model": "app.client",
    "pk": 2,
    "fields": {
      "hostname": "ws-8697",
      "ip_address": "192.0.2.225",
      "department": "Finance",
      "first_query_at": "2025-09-15T11:47:45Z"
    }
  },
  {
    "model": "app.client",
    "pk": 3,
    "fields": {
      "hostname": "ws-7376",
      "ip_address": "198.51.100.59",
      "department": "Engineering",
      "first_query_at": "2025-09-15T17:59:26Z"
    }
  },
  {
    "model": "app.client",
    "pk": 4,
    "fields": {
      "hostname": "ws-6884",
      "ip_address": "203.0.113.133",
      "department": "Sales",
      "first_query_at": "2025-09-16T14:26:04Z"
    }
  },
  {
    "model": "app.client",
    "pk": 5,
    "fields": {
      "hostname": "ws-9282",
      "ip_address": "192.0.2.232",
      "department": "Sales",
      "first_query_at": "2025-09-15T09:16:13Z"
    }
  },
  {
    "model": "app.client",
    "pk": 6,
    "fields": {
      "hostname": "ws-3487",
      "ip_address": "203.0.113.159",
      "department": "Marketing",
      "first_query_at": "2025-09-16T12:40:52Z"
    }
  },
  {
    "model": "app.client",
    "pk": 7,
    "fields": {
      "hostname": "ws-8050",
      "ip_address": "192.0.2.29",
      "department": "Support",
      "first_query_at": "2025-09-15T13:49:53Z"
    }
  },
  {
    "model": "app.client",
    "pk": 8,
    "fields": {
      "hostname": "ws-8710",
      "ip_address": "203.0.113.10",
      "department": "Support",
      "first_query_at": "2025-09-16T11:06:21Z"
    }
  },
  {
    "model": "app.client",
    "pk": 9,
    "fields": {
      "hostname": "ws-9951",
      "ip_address": "192.0.2.20",
      "department": "Sales",
      "first_query_at": "2025-09-15T08:14:27Z"
    }
  },
  {
    "model": "app.client",
    "pk": 10,
    "fields": {
      "hostname": "ws-5849",
      "ip_address": "203.0.113.220",
      "department": "Marketing",
      "first_query_at": "2025-09-16T08:45:15Z"
    }
  },
  {
    "model": "app.client",
    "pk": 11,
    "fields": {
      "hostname": "ws-8714",
      "ip_address": "198.51.100.42",
      "department": "Legal",
      "first_query_at": "2025-09-15T02:25:07Z"
    }
  },
  {
    "model": "app.client",
    "pk": 12,
    "fields": {
      "hostname": "ws-0423",
      "ip_address": "203.0.113.228",
      "department": "Sales",
      "first_query_at": "2025-09-15T10:38:17Z"
    }
  },
  {
    "model": "app.client",
    "pk": 13,
    "fields": {
      "hostname": "ws-0586",
      "ip_address": "192.0.2.192",
      "department": "Marketing",
      "first_query_at": "2025-09-15T11:10:10Z"
    }
  },
  {
    "model": "app.client",
    "pk": 14,
    "fields": {
      "hostname": "ws-5005",
      "ip_address": "203.0.113.72",
      "department": "Engineering",
      "first_query_at": "2025-09-15T14:28:43Z"
    }
  },
  {
    "model": "app.client",
    "pk": 15,
    "fields": {
      "hostname": "ws-0892",
      "ip_address": "192.0.2.187",
      "department": "Engineering",
      "first_query_at": "2025-09-15T13:48:59Z"
    }
  },
  {
    "model": "app.client",
    "pk": 16,
    "fields": {
      "hostname": "ws-9789",
      "ip_address": "203.0.113.40",
      "department": "Marketing",
      "first_query_at": "2025-09-15T09:59:32Z"
    }
  },
  {
    "model": "app.client",
    "pk": 17,
    "fields": {
      "hostname": "ws-4991",
      "ip_address": "203.0.113.210",
      "department": "Support",
      "first_query_at": "2025-09-16T11:46:11Z"
    }
  },
  {
    "model": "app.client",
    "pk": 18,
    "fields": {
      "hostname": "ws-3899",
      "ip_address": "203.0.113.51",
      "department": "Sales",
      "first_query_at": "2025-09-16T10:22:36Z"
    }
  },
  {
    "model": "app.client",
    "pk": 19,
    "fields": {
      "hostname": "ws-8580",
      "ip_address": "198.51.100.182",
      "department": "Engineering",
      "first_query_at": "2025-09-16T08:08:42Z"
    }
  },
  {
    "model": "app.client",
    "pk": 20,
    "fields": {
      "hostname": "ws-2554",
      "ip_address": "198.51.100.64",
      "department": "Legal",
      "first_query_at": "2025-09-16T16:33:26Z"
    }
  },
  {
    "model": "app.client",
    "pk": 21,
    "fields": {
      "hostname": "ws-5915",
      "ip_address": "192.0.2.114",
      "department": "Sales",
      "first_query_at": "2025-09-16T09:51:14Z"
    }
  },
  {
    "model": "app.client",
    "pk": 22,
    "fields": {
      "hostname": "ws-7430",
      "ip_address": "203.0.113.63",
      "department": "Sales",
      "first_query_at": "2025-09-15T13:54:13Z"
    }
  },
  {
    "model": "app.client",
    "pk": 23,
    "fields": {
      "hostname": "ws-6200",
      "ip_address": "203.0.113.108",
      "department": "Engineering",
      "first_query_at": "2025-09-16T21:47:13Z"
    }
  },
  {
    "model": "app.client",
    "pk": 24,
    "fields": {
      "hostname": "ws-5745",
      "ip_address": "203.0.113.54",
      "department": "Sales",
      "first_query_at": "2025-09-16T20:17:01Z"
    }
  },
  {
    "model": "app.client",
    "pk": 25,
    "fields": {
      "hostname": "ws-8129",
      "ip_address": "198.51.100.127",
      "department": "Marketing",
      "first_query_at": "2025-09-16T10:46:29Z"
    }
  },
  {
    "model": "app.client",
    "pk": 26,
    "fields": {
      "hostname": "ws-3734",
      "ip_address": "198.51.100.251",
      "department": "Marketing",
      "first_query_at": "2025-09-15T12:59:40Z"
    }
  },
  {
    "model": "app.client",
    "pk": 27,
    "fields": {
      "hostname": "ws-4293",
      "ip_address": "203.0.113.97",
      "department": "Sales",
      "first_query_at": "2025-09-15T15:10:08Z"
    }
  },
  {
    "model": "app.client",
    "pk": 28,
    "fields": {
      "hostname": "ws-0558",
      "ip_address": "203.0.113.4",
      "department": "Finance",
      "first_query_at": "2025-09-16T11:06:19Z"
    }
  },
  {
    "model": "app.client",
    "pk": 29,
    "fields": {
      "hostname": "ws-8968",
      "ip_address": "192.0.2.129",
      "department": "Finance",
      "first_query_at": "2025-09-16T14:07:12Z"
    }
  },
  {
    "model": "app.client",
    "pk": 30,
    "fields": {
      "hostname": "ws-2486",
      "ip_address": "203.0.113.50",
      "department": "Engineering",
      "first_query_at": "2025-09-16T10:43:47Z"
    }
  },
  {
    "model": "app.client",
    "pk": 31,
    "fields": {
      "hostname": "ws-1509",
      "ip_address": "203.0.113.146",
      "department": "Support",
      "first_query_at": "2025-09-15T14:56:30Z"
    }
  },
  {
    "model": "app.client",
    "pk": 32,
    "fields": {
      "hostname": "ws-9968",
      "ip_address": "198.51.100.5",
      "department": "Marketing",
      "first_query_at": "2025-09-15T17:33:57Z"
    }
  },
  {
    "model": "app.client",
    "pk": 33,
    "fields": {
      "hostname": "ws-2166",
      "ip_address": "203.0.113.82",
      "department": "Support",
      "first_query_at": "2025-09-16T08:47:48Z"
    }
  },
  {
    "model": "app.client",
    "pk": 34,
    "fields": {
      "hostname": "ws-3148",
      "ip_address": "198.51.100.215",
      "department": "Engineering",
      "first_query_at": "2025-09-15T10:36:18Z"
    }
  },
  {
    "model": "app.client",
    "pk": 35,
    "fields": {
      "hostname": "ws-4084",
      "ip_address": "192.0.2.85",
      "department": "Support",
      "first_query_at": "2025-09-16T14:36:34Z"
    }
  },
  {
    "model": "app.client",
    "pk": 36,
    "fields": {
      "hostname": "ws-0244",
      "ip_address": "192.0.2.115",
      "department": "Finance",
      "first_query_at": "2025-09-15T13:37:04Z"
    }
  },
  {
    "model": "app.client",
    "pk": 37,
    "fields": {
      "hostname": "ws-5695",
      "ip_address": "198.51.100.193",
      "department": "Sales",
      "first_query_at": "2025-09-16T10:10:49Z"
    }
  },
  {
    "model": "app.client",
    "pk": 38,
    "fields": {
      "hostname": "ws-6735",
      "ip_address": "203.0.113.149",
      "department": "Sales",
      "first_query_at": "2025-09-15T09:24:24Z"
    }
  },
  {
    "model": "app.client",
    "pk": 39,
    "fields": {
      "hostname": "ws-6533",
      "ip_address": "203.0.113.34",
      "department": "Legal",
      "first_query_at": "2025-09-16T13:26:09Z"
    }
  },
  {
    "model": "app.client",
    "pk": 40,
    "fields": {
      "hostname": "ws-5305",
      "ip_address": "192.0.2.249",
      "department": "Engineering",
      "first_query_at": "2025-09-15T14:58:14Z"
    }
  },
  {
    "model": "app.client",
    "pk": 41,
    "fields": {
      "hostname": "ws-3894",
      "ip_address": "203.0.113.212",
      "department": "Legal",
      "first_query_at": "2025-09-15T14:58:35Z"
    }
  },
  {
    "model": "app.client",
    "pk": 42,
    "fields": {
      "hostname": "ws-7409",
      "ip_address": "192.0.2.92",
      "department": "Engineering",
      "first_query_at": "2025-09-16T11:32:08Z"
    }
  },
  {
    "model": "app.client",
    "pk": 43,
    "fields": {
      "hostname": "ws-8273",
      "ip_address": "192.0.2.76",
      "department": "Marketing",
      "first_query_at": "2025-09-16T10:50:30Z"
    }
  },
  {
    "model": "app.client",
    "pk": 44,
    "fields": {
      "hostname": "ws-5294",
      "ip_address": "192.0.2.227",
      "department": "Sales",
      "first_query_at": "2025-09-15T15:40:16Z"
    }
  },
  {
    "model": "app.client",
    "pk": 45,
    "fields": {
      "hostname": "ws-1260",
      "ip_address": "198.51.100.206",
      "department": "Sales",
      "first_query_at": "2025-09-15T15:57:53Z"
    }
  },
  {
    "model": "app.client",
    "pk": 46,
    "fields": {
      "hostname": "ws-5688",
      "ip_address": "198.51.100.176",
      "department": "Support",
      "first_query_at": "2025-09-16T06:54:50Z"
    }
  },
  {
    "model": "app.client",
    "pk": 47,
    "fields": {
      "hostname": "ws-9348",
      "ip_address": "192.0.2.117",
      "department": "Sales",
      "first_query_at": "2025-09-16T11:32:28Z"
    }
  },
  {
    "model": "app.client",
    "pk": 48,
    "fields": {
      "hostname": "ws-0908",
      "ip_address": "198.51.100.50",
      "department": "Sales",
      "first_query_at": "2025-09-16T10:30:28Z"
    }
  },
  {
    "model": "app.client",
    "pk": 49,
    "fields": {
      "hostname": "ws-0654",
      "ip_address": "198.51.100.56",
      "department": "Sales",
      "first_query_at": "2025-09-16T10:35:39Z"
    }
  },
  {
    "model": "app.client",
    "pk": 50,
    "fields": {
      "hostname": "ws-4493",
      "ip_address": "198.51.100.200",
      "department": "Engineering",
      "first_query_at": "2025-09-15T14:20:56Z"
    }
  },
  {
    "model": "app.client",
    "pk": 51,
    "fields": {
      "hostname": "ws-5798",
      "ip_address": "198.51.100.218",
      "department": "Engineering",
      "first_query_at": "2025-09-16T11:40:34Z"
    }
  },
  {
    "model": "app.client",
    "pk": 52,
    "fields": {
      "hostname": "ws-6536",
      "ip_address": "198.51.100.204",
      "department": "Engineering",
      "first_query_at": "2025-09-15T16:38:26Z"
    }
  },
  {
    "model": "app.client",
    "pk": 53,
    "fields": {
      "hostname": "ws-0515",
      "ip_address": "192.0.2.116",
      "department": "Sales",
      "first_query_at": "2025-09-15T16:37:50Z"
    }
  },
  {
    "model": "app.client",
    "pk": 54,
    "fields": {
      "hostname": "ws-4741",
      "ip_address": "203.0.113.83",
      "department": "Sales",
      "first_query_at": "2025-09-16T11:07:09Z"
    }
  },
  {
    "model": "app.client",
    "pk": 55,
    "fields": {
      "hostname": "ws-7920",
      "ip_address": "192.0.2.58",
      "department": "Legal",
      "first_query_at": "2025-09-16T14:54:18Z"
    }
  },
  {
    "model": "app.client",
    "pk": 56,
    "fields": {
      "hostname": "ws-1296",
      "ip_address": "198.51.100.250",
      "department": "Finance",
      "first_query_at": "2025-09-16T12:45:49Z"
    }
  },
  {
    "model": "app.client",
    "pk": 57,
    "fields": {
      "hostname": "ws-0646",
      "ip_address": "203.0.113.223",
      "department": "Engineering",
      "first_query_at": "2025-09-16T16:44:16Z"
    }
  },
  {
    "model": "app.client",
    "pk": 58,
    "fields": {
      "hostname": "ws-8833",
      "ip_address": "198.51.100.189",
      "department": "Support",
      "first_query_at": "2025-09-16T10:58:29Z"
    }
  },
  {
    "model": "app.client",
    "pk": 59,
    "fields": {
      "hostname": "ws-3849",
      "ip_address": "198.51.100.120",
      "department": "Support",
      "first_query_at": "2025-09-16T13:18:33Z"
    }
  },
  {
    "model": "app.client",
    "pk": 60,
    "fields": {
      "hostname": "ws-3876",
      "ip_address": "198.51.100.90",
      "department": "Sales",
      "first_query_at": "2025-09-16T18:05:49Z"
    }
  },
  {
    "model": "app.client",
    "pk": 61,
    "fields": {
      "hostname": "ws-9368",
      "ip_address": "198.51.100.4",
      "department": "Engineering",
      "first_query_at": "2025-09-16T12:48:06Z"
    }
  },
  {
    "model": "app.client",
    "pk": 62,
    "fields": {
      "hostname": "ws-8248",
      "ip_address": "198.51.100.12",
      "department": "Engineering",
      "first_query_at": "2025-09-16T09:20:09Z"
    }
  },
  {
    "model": "app.client",
    "pk": 63,
    "fields": {
      "hostname": "ws-5827",
      "ip_address": "192.0.2.196",
      "department": "Engineering",
      "first_query_at": "2025-09-15T13:17:30Z"
    }
  },
  {
    "model": "app.client",
    "pk": 64,
    "fields": {
      "hostname": "ws-8342",
      "ip_address": "198.51.100.171",
      "department": "Engineering",
      "first_query_at": "2025-09-15T13:42:09Z"
    }
  },
  {
    "model": "app.client",
    "pk": 65,
    "fields": {
      "hostname": "ws-8033",
      "ip_address": "192.0.2.137",
      "department": "Engineering",
      "first_query_at": "2025-09-15T07:19:51Z"
    }
  },
  {
    "model": "app.client",
    "pk": 66,
    "fields": {
      "hostname": "ws-7624",
      "ip_address": "192.0.2.26",
      "department": "Finance",
      "first_query_at": "2025-09-16T10:32:04Z"
    }
  },
  {
    "model": "app.client",
    "pk": 67,
    "fields": {
      "hostname": "ws-5356",
      "ip_address": "192.0.2.89",
      "department": "Finance",
      "first_query_at": "2025-09-16T16:56:37Z"
    }
  },
  {
    "model": "app.client",
    "pk": 68,
    "fields": {
      "hostname": "ws-0409",
      "ip_address": "203.0.113.18",
      "department": "Marketing",
      "first_query_at": "2025-09-15T11:27:37Z"
    }
  },
  {
    "model": "app.client",
    "pk": 69,
    "fields": {
      "hostname": "ws-3424",
      "ip_address": "203.0.113.132",
      "department": "Sales",
      "first_query_at": "2025-09-16T14:17:59Z"
    }
  },
  {
    "model": "app.client",
    "pk": 70,
    "fields": {
      "hostname": "ws-8338",
      "ip_address": "198.51.100.254",
      "department": "Finance",
      "first_query_at": "2025-09-16T10:51:23Z"
    }
  },
  {
    "model": "app.client",
    "pk": 71,
    "fields": {
      "hostname": "ws-4289",
      "ip_address": "192.0.2.173",
      "department": "Marketing",
      "first_query_at": "2025-09-15T18:31:20Z"
    }
  },
  {
    "model": "app.client",
    "pk": 72,
    "fields": {
      "hostname": "ws-3822",
      "ip_address": "198.51.100.163",
      "department": "Marketing",
      "first_query_at": "2025-09-15T13:40:54Z"
    }
  },
  {
    "model": "app.client",
    "pk": 73,
    "fields": {
      "hostname": "ws-5363",
      "ip_address": "192.0.2.27",
      "department": "Finance",
      "first_query_at": "2025-09-16T11:57:12Z"
    }
  },
  {
    "model": "app.client",
    "pk": 74,
    "fields": {
      "hostname": "ws-0475",
      "ip_address": "198.51.100.65",
      "department": "Marketing",
      "first_query_at": "2025-09-16T15:56:13Z"
    }
  },
  {
    "model": "app.client",
    "pk": 75,
    "fields": {
      "hostname": "ws-5303",
      "ip_address": "192.0.2.17",
      "department": "Sales",
      "first_query_at": "2025-09-15T11:11:38Z"
    }
  },
  {
    "model": "app.client",
    "pk": 76,
    "fields": {
      "hostname": "ws-2387",
      "ip_address": "192.0.2.63",
      "department": "Finance",
      "first_query_at": "2025-09-16T12:53:59Z"
    }
  },
  {
    "model": "app.client",
    "pk": 77,
    "fields": {
      "hostname": "ws-9426",
      "ip_address": "192.0.2.145",
      "department": "Engineering",
      "first_query_at": "2025-09-15T10:10:20Z"
    }
  },
  {
    "model": "app.client",
    "pk": 78,
    "fields": {
      "hostname": "ws-6218",
      "ip_address": "192.0.2.235",
      "department": "Support",
      "first_query_at": "2025-09-15T12:24:29Z"
    }
  },
  {
    "model": "app.client",
    "pk": 79,
    "fields": {
      "hostname": "ws-1863",
      "ip_address": "198.51.100.136",
      "department": "Finance",
      "first_query_at": "2025-09-16T18:32:16Z"
    }
  },
  {
    "model": "app.client",
    "pk": 80,
    "fields": {
      "hostname": "ws-1085",
      "ip_address": "198.51.100.224",
      "department": "Engineering",
      "first_query_at": "2025-09-15T22:20:25Z"
    }
  },
  {
    "model": "app.domain",
    "pk": 1,
    "fields": {
      "zone_list": "allowed-services",
      "name": "intranet.example.com",
      "category": "internal"
    }
  },
  {
    "model": "app.domain",
    "pk": 2,
    "fields": {
      "zone_list": "allowed-services",
      "name": "mail.example.com",
      "category": "email"
    }
  },
  {
    "model": "app.domain",
    "pk": 3,
    "fields": {
      "zone_list": "allowed-services",
      "name": "sso.example.com",
      "category": "identity"
    }
  },
  {
    "model": "app.domain",
    "pk": 4,
    "fields": {
      "zone_list": "allowed-services",
      "name": "wiki.example.com",
      "category": "internal"
    }
  },
  {
    "model": "app.domain",
    "pk": 5,
    "fields": {
      "zone_list": "allowed-services",
      "name": "api.example.com",
      "category": "internal"
    }
  },
  {
    "model": "app.domain",
    "pk": 6,
    "fields": {
      "zone_list": "allowed-services",
      "name": "files.example.org",
      "category": "file_sharing"
    }
  },
  {
    "model": "app.domain",
    "pk": 7,
    "fields": {
      "zone_list": "allowed-services",
      "name": "chat.example.org",
      "category": "collaboration"
    }
  },
  {
    "model": "app.domain",
    "pk": 8,
    "fields": {
      "zone_list": "allowed-services",
      "name": "video.example.org",
      "category": "collaboration"
    }
  },
  {
    "model": "app.domain",
    "pk": 9,
    "fields": {
      "zone_list": "allowed-services",
      "name": "shop.example.org",
      "category": "web"
    }
  },
  {
    "model": "app.domain",
    "pk": 10,
    "fields": {
      "zone_list": "allowed-services",
      "name": "ads.example.org",
      "category": "advertising"
    }
  },
  {
    "model": "app.domain",
    "pk": 11,
    "fields": {
      "zone_list": "allowed-services",
      "name": "cdn.example.net",
      "category": "cdn"
    }
  },
  {
    "model": "app.domain",
    "pk": 12,
    "fields": {
      "zone_list": "allowed-services",
      "name": "updates.example.net",
      "category": "software_update"
    }
  },
  {
    "model": "app.domain",
    "pk": 13,
    "fields": {
      "zone_list": "allowed-services",
      "name": "telemetry.example.net",
      "category": "telemetry"
    }
  },
  {
    "model": "app.domain",
    "pk": 14,
    "fields": {
      "zone_list": "allowed-services",
      "name": "maps.example.net",
      "category": "web"
    }
  },
  {
    "model": "app.domain",
    "pk": 15,
    "fields": {
      "zone_list": "allowed-services",
      "name": "tracker.example.net",
      "category": "advertising"
    }
  },
  {
    "model": "app.domain",
    "pk": 16,
    "fields": {
      "zone_list": "allowed-services",
      "name": "news.example.com",
      "category": "web"
    }
  },
  {
    "model": "app.domain",
    "pk": 17,
    "fields": {
      "zone_list": "allowed-services",
      "name": "time.example.net",
      "category": "infrastructure"
    }
  },
  {
    "model": "app.domain",
    "pk": 18,
    "fields": {
      "zone_list": "allowed-services",
      "name": "ocsp.example.net",
      "category": "pki"
    }
  },
  {
    "model": "app.domain",
    "pk": 19,
    "fields": {
      "zone_list": "allowed-services",
      "name": "crl.example.com",
      "category": "pki"
    }
  },
  {
    "model": "app.domain",
    "pk": 20,
    "fields": {
      "zone_list": "allowed-services",
      "name": "printers.example.test",
      "category": "internal"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 1,
    "fields": {
      "client": 36,
      "client_ip": "192.0.2.115",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 74,
      "queried_at": "2025-09-15T14:04:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 2,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 314,
      "queried_at": "2025-09-16T11:39:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 3,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T13:25:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 4,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-16T18:42:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 5,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 166,
      "queried_at": "2025-09-16T12:18:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 6,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 100,
      "queried_at": "2025-09-16T10:54:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 7,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 65,
      "queried_at": "2025-09-16T17:59:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 8,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 254,
      "queried_at": "2025-09-15T10:11:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 9,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T10:27:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 10,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-15T12:34:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 11,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-15T17:57:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 12,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 120,
      "queried_at": "2025-09-16T11:52:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 13,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 54,
      "queried_at": "2025-09-15T15:33:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 14,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 227,
      "queried_at": "2025-09-16T12:11:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 15,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-15T14:19:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 16,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-16T21:41:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 17,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 102,
      "queried_at": "2025-09-15T11:18:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 18,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 109,
      "queried_at": "2025-09-15T10:36:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 19,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 96,
      "queried_at": "2025-09-16T22:30:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 20,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 157,
      "queried_at": "2025-09-15T12:50:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 21,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T14:30:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 22,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 172,
      "queried_at": "2025-09-15T15:08:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 23,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 144,
      "queried_at": "2025-09-15T14:42:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 24,
    "fields": {
      "client": 65,
      "client_ip": "192.0.2.137",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 353,
      "queried_at": "2025-09-15T07:21:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 25,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 94,
      "queried_at": "2025-09-15T15:00:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 26,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 408,
      "queried_at": "2025-09-16T14:10:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 27,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 324,
      "queried_at": "2025-09-16T11:43:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 28,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 66,
      "queried_at": "2025-09-15T15:21:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 29,
    "fields": {
      "client": 50,
      "client_ip": "198.51.100.200",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 188,
      "queried_at": "2025-09-15T14:48:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 30,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 291,
      "queried_at": "2025-09-16T08:57:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 31,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-15T17:14:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 32,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 326,
      "queried_at": "2025-09-15T19:15:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 33,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 49,
      "queried_at": "2025-09-15T15:31:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 34,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 76,
      "queried_at": "2025-09-16T12:02:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 35,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 459,
      "queried_at": "2025-09-16T10:48:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 36,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T15:27:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 37,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-15T02:29:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 38,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 90,
      "queried_at": "2025-09-16T12:39:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 39,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 417,
      "queried_at": "2025-09-15T10:17:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 40,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "TXT",
      "rcode": "SERVFAIL",
      "answer_bytes": 475,
      "queried_at": "2025-09-16T15:13:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 41,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 395,
      "queried_at": "2025-09-16T12:39:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 42,
    "fields": {
      "client": 74,
      "client_ip": "198.51.100.65",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T16:54:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 43,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 270,
      "queried_at": "2025-09-15T17:51:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 44,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 198,
      "queried_at": "2025-09-16T17:36:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 45,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 236,
      "queried_at": "2025-09-15T14:11:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 46,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 51,
      "queried_at": "2025-09-16T18:26:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 47,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 151,
      "queried_at": "2025-09-15T17:06:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 48,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 72,
      "queried_at": "2025-09-15T16:17:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 49,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-16T15:46:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 50,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 298,
      "queried_at": "2025-09-15T14:50:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 51,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 140,
      "queried_at": "2025-09-16T12:16:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 52,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T13:10:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 53,
    "fields": {
      "client": 50,
      "client_ip": "198.51.100.200",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 105,
      "queried_at": "2025-09-15T15:17:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 54,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-16T11:34:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 55,
    "fields": {
      "client": 43,
      "client_ip": "192.0.2.76",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 86,
      "queried_at": "2025-09-16T11:40:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 56,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 359,
      "queried_at": "2025-09-15T12:45:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 57,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-16T11:52:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 58,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 135,
      "queried_at": "2025-09-16T19:28:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 59,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 63,
      "queried_at": "2025-09-15T12:18:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 60,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 193,
      "queried_at": "2025-09-16T20:19:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 61,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 226,
      "queried_at": "2025-09-16T12:27:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 62,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 251,
      "queried_at": "2025-09-16T18:46:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 63,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 77,
      "queried_at": "2025-09-15T13:02:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 64,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 478,
      "queried_at": "2025-09-15T13:14:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 65,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-16T08:55:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 66,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 66,
      "queried_at": "2025-09-16T11:59:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 67,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 173,
      "queried_at": "2025-09-16T11:05:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 68,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 61,
      "queried_at": "2025-09-15T11:51:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 69,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 475,
      "queried_at": "2025-09-16T23:15:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 70,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 260,
      "queried_at": "2025-09-16T18:57:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 71,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 171,
      "queried_at": "2025-09-15T10:31:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 72,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 93,
      "queried_at": "2025-09-15T14:02:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 73,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 218,
      "queried_at": "2025-09-15T19:43:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 74,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 92,
      "queried_at": "2025-09-15T16:51:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 75,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 127,
      "queried_at": "2025-09-16T14:03:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 76,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-15T17:38:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 77,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 179,
      "queried_at": "2025-09-16T09:26:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 78,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T15:57:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 79,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-16T14:34:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 80,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 83,
      "queried_at": "2025-09-16T15:24:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 81,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 244,
      "queried_at": "2025-09-16T13:15:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 82,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 301,
      "queried_at": "2025-09-16T18:48:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 83,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 189,
      "queried_at": "2025-09-15T17:02:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 84,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 392,
      "queried_at": "2025-09-16T13:10:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 85,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 336,
      "queried_at": "2025-09-16T14:24:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 86,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 332,
      "queried_at": "2025-09-16T12:13:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 87,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 170,
      "queried_at": "2025-09-16T13:08:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 88,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 196,
      "queried_at": "2025-09-15T11:23:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 89,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-15T10:39:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 90,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 416,
      "queried_at": "2025-09-15T23:47:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 91,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 449,
      "queried_at": "2025-09-15T16:36:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 92,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 81,
      "queried_at": "2025-09-16T13:03:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 93,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 151,
      "queried_at": "2025-09-16T12:49:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 94,
    "fields": {
      "client": 37,
      "client_ip": "198.51.100.193",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T10:49:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 95,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 245,
      "queried_at": "2025-09-15T23:54:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 96,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 301,
      "queried_at": "2025-09-15T11:01:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 97,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 76,
      "queried_at": "2025-09-15T16:41:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 98,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 189,
      "queried_at": "2025-09-15T17:29:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 99,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-17T00:24:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 100,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 282,
      "queried_at": "2025-09-16T13:01:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 101,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 93,
      "queried_at": "2025-09-15T18:20:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 102,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-15T10:18:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 103,
    "fields": {
      "client": 8,
      "client_ip": "203.0.113.10",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 134,
      "queried_at": "2025-09-16T12:18:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 104,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 151,
      "queried_at": "2025-09-16T14:10:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 105,
    "fields": {
      "client": 27,
      "client_ip": "203.0.113.97",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 344,
      "queried_at": "2025-09-15T15:33:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 106,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 382,
      "queried_at": "2025-09-15T13:23:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 107,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 153,
      "queried_at": "2025-09-17T00:38:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 108,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 236,
      "queried_at": "2025-09-16T09:08:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 109,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 75,
      "queried_at": "2025-09-15T14:54:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 110,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 85,
      "queried_at": "2025-09-15T13:17:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 111,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-16T12:09:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 112,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 65,
      "queried_at": "2025-09-15T11:06:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 113,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 333,
      "queried_at": "2025-09-15T14:22:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 114,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 63,
      "queried_at": "2025-09-15T11:30:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 115,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 123,
      "queried_at": "2025-09-16T19:16:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 116,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-16T13:00:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 117,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T18:03:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 118,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 281,
      "queried_at": "2025-09-16T17:15:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 119,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 138,
      "queried_at": "2025-09-15T20:36:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 120,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 346,
      "queried_at": "2025-09-15T16:18:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 121,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 316,
      "queried_at": "2025-09-15T20:49:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 122,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T07:43:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 123,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 255,
      "queried_at": "2025-09-16T15:16:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 124,
    "fields": {
      "client": 65,
      "client_ip": "192.0.2.137",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 499,
      "queried_at": "2025-09-15T08:31:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 125,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 90,
      "queried_at": "2025-09-16T13:07:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 126,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 456,
      "queried_at": "2025-09-15T13:41:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 127,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 101,
      "queried_at": "2025-09-16T15:00:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 128,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 289,
      "queried_at": "2025-09-16T14:30:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 129,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 215,
      "queried_at": "2025-09-15T14:36:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 130,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 288,
      "queried_at": "2025-09-16T10:57:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 131,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 143,
      "queried_at": "2025-09-15T16:32:43Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 132,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 180,
      "queried_at": "2025-09-16T15:52:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 133,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 64,
      "queried_at": "2025-09-16T14:09:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 134,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 237,
      "queried_at": "2025-09-15T18:05:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 135,
    "fields": {
      "client": 43,
      "client_ip": "192.0.2.76",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 358,
      "queried_at": "2025-09-16T13:03:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 136,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 45,
      "queried_at": "2025-09-16T14:43:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 137,
    "fields": {
      "client": 37,
      "client_ip": "198.51.100.193",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 69,
      "queried_at": "2025-09-16T11:24:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 138,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 56,
      "queried_at": "2025-09-16T14:39:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 139,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 231,
      "queried_at": "2025-09-15T15:11:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 140,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 92,
      "queried_at": "2025-09-16T15:44:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 141,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 162,
      "queried_at": "2025-09-15T11:55:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 142,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 357,
      "queried_at": "2025-09-15T15:37:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 143,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 64,
      "queried_at": "2025-09-16T15:41:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 144,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 129,
      "queried_at": "2025-09-16T14:02:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 145,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 234,
      "queried_at": "2025-09-16T19:58:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 146,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 293,
      "queried_at": "2025-09-16T13:54:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 147,
    "fields": {
      "client": 56,
      "client_ip": "198.51.100.250",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 62,
      "queried_at": "2025-09-16T13:40:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 148,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 98,
      "queried_at": "2025-09-15T15:07:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 149,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 176,
      "queried_at": "2025-09-15T16:02:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 150,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 494,
      "queried_at": "2025-09-15T11:04:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 151,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 353,
      "queried_at": "2025-09-16T14:07:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 152,
    "fields": {
      "client": 27,
      "client_ip": "203.0.113.97",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 74,
      "queried_at": "2025-09-15T15:46:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 153,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 172,
      "queried_at": "2025-09-16T14:36:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 154,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 315,
      "queried_at": "2025-09-15T11:58:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 155,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 333,
      "queried_at": "2025-09-16T16:07:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 156,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 138,
      "queried_at": "2025-09-15T16:22:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 157,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 246,
      "queried_at": "2025-09-15T16:04:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 158,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 109,
      "queried_at": "2025-09-16T12:50:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 159,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 82,
      "queried_at": "2025-09-15T11:06:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 160,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 58,
      "queried_at": "2025-09-17T00:50:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 161,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 371,
      "queried_at": "2025-09-15T18:31:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 162,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 70,
      "queried_at": "2025-09-16T14:00:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 163,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 260,
      "queried_at": "2025-09-15T02:46:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 164,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 73,
      "queried_at": "2025-09-15T12:04:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 165,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-17T01:11:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 166,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 69,
      "queried_at": "2025-09-16T09:35:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 167,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NXDOMAIN",
      "answer_bytes": 335,
      "queried_at": "2025-09-15T19:13:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 168,
    "fields": {
      "client": 33,
      "client_ip": "203.0.113.82",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 228,
      "queried_at": "2025-09-16T09:01:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 169,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 436,
      "queried_at": "2025-09-15T08:51:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 170,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 380,
      "queried_at": "2025-09-16T10:31:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 171,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 93,
      "queried_at": "2025-09-15T18:47:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 172,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 181,
      "queried_at": "2025-09-16T14:32:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 173,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 369,
      "queried_at": "2025-09-15T20:08:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 174,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 83,
      "queried_at": "2025-09-16T22:59:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 175,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "CNAME",
      "rcode": "NXDOMAIN",
      "answer_bytes": 201,
      "queried_at": "2025-09-16T14:21:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 176,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 502,
      "queried_at": "2025-09-16T15:33:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 177,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "AAAA",
      "rcode": "SERVFAIL",
      "answer_bytes": 284,
      "queried_at": "2025-09-15T15:45:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 178,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 113,
      "queried_at": "2025-09-16T14:14:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 179,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 175,
      "queried_at": "2025-09-15T17:45:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 180,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 66,
      "queried_at": "2025-09-15T19:42:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 181,
    "fields": {
      "client": 56,
      "client_ip": "198.51.100.250",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T14:17:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 182,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 73,
      "queried_at": "2025-09-15T17:09:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 183,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-16T18:46:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 184,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 482,
      "queried_at": "2025-09-16T16:54:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 185,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 236,
      "queried_at": "2025-09-16T13:45:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 186,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 342,
      "queried_at": "2025-09-15T12:09:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 187,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T16:31:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 188,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 286,
      "queried_at": "2025-09-15T16:07:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 189,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 474,
      "queried_at": "2025-09-15T21:58:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 190,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-16T13:05:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 191,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 90,
      "queried_at": "2025-09-16T19:01:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 192,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 52,
      "queried_at": "2025-09-16T14:35:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 193,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 153,
      "queried_at": "2025-09-15T12:17:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 194,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-16T15:48:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 195,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 106,
      "queried_at": "2025-09-15T17:17:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 196,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 384,
      "queried_at": "2025-09-16T13:36:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 197,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 242,
      "queried_at": "2025-09-15T14:47:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 198,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 397,
      "queried_at": "2025-09-15T18:46:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 199,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 52,
      "queried_at": "2025-09-15T11:39:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 200,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-16T16:51:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 201,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 326,
      "queried_at": "2025-09-15T12:15:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 202,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 469,
      "queried_at": "2025-09-16T20:36:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 203,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 62,
      "queried_at": "2025-09-15T13:09:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 204,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 160,
      "queried_at": "2025-09-15T19:47:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 205,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 54,
      "queried_at": "2025-09-16T12:02:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 206,
    "fields": {
      "client": 36,
      "client_ip": "192.0.2.115",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "SERVFAIL",
      "answer_bytes": 45,
      "queried_at": "2025-09-15T14:38:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 207,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-15T16:35:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 208,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 459,
      "queried_at": "2025-09-15T11:36:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 209,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-15T12:19:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 210,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 254,
      "queried_at": "2025-09-16T14:42:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 211,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 482,
      "queried_at": "2025-09-16T14:35:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 212,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-15T17:20:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 213,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-15T15:00:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 214,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T08:36:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 215,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 47,
      "queried_at": "2025-09-16T18:53:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 216,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 240,
      "queried_at": "2025-09-16T15:15:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 217,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 260,
      "queried_at": "2025-09-16T13:40:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 218,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 91,
      "queried_at": "2025-09-16T11:29:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 219,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T15:11:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 220,
    "fields": {
      "client": 58,
      "client_ip": "198.51.100.189",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 59,
      "queried_at": "2025-09-16T12:11:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 221,
    "fields": {
      "client": 36,
      "client_ip": "192.0.2.115",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-15T16:04:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 222,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 69,
      "queried_at": "2025-09-16T16:15:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 223,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 285,
      "queried_at": "2025-09-15T18:58:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 224,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 464,
      "queried_at": "2025-09-15T16:13:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 225,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 398,
      "queried_at": "2025-09-16T17:01:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 226,
    "fields": {
      "client": 13,
      "client_ip": "192.0.2.192",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T12:32:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 227,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 47,
      "queried_at": "2025-09-15T17:13:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 228,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 362,
      "queried_at": "2025-09-15T12:17:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 229,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 361,
      "queried_at": "2025-09-16T14:16:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 230,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T00:34:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 231,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 170,
      "queried_at": "2025-09-16T13:05:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 232,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 159,
      "queried_at": "2025-09-16T20:45:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 233,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 126,
      "queried_at": "2025-09-16T15:48:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 234,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 346,
      "queried_at": "2025-09-15T20:25:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 235,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 166,
      "queried_at": "2025-09-16T16:53:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 236,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 434,
      "queried_at": "2025-09-17T02:23:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 237,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T15:52:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 238,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-16T00:46:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 239,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 496,
      "queried_at": "2025-09-15T17:18:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 240,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 280,
      "queried_at": "2025-09-15T17:12:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 241,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 489,
      "queried_at": "2025-09-16T15:49:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 242,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "AAAA",
      "rcode": "SERVFAIL",
      "answer_bytes": 450,
      "queried_at": "2025-09-15T13:40:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 243,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 426,
      "queried_at": "2025-09-15T19:33:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 244,
    "fields": {
      "client": 43,
      "client_ip": "192.0.2.76",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 49,
      "queried_at": "2025-09-16T14:07:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 245,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T12:21:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 246,
    "fields": {
      "client": 58,
      "client_ip": "198.51.100.189",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "SERVFAIL",
      "answer_bytes": 267,
      "queried_at": "2025-09-16T13:00:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 247,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 459,
      "queried_at": "2025-09-15T15:32:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 248,
    "fields": {
      "client": 62,
      "client_ip": "198.51.100.12",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 160,
      "queried_at": "2025-09-16T09:39:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 249,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 433,
      "queried_at": "2025-09-15T17:54:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 250,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 174,
      "queried_at": "2025-09-16T16:17:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 251,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 69,
      "queried_at": "2025-09-16T14:14:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 252,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 80,
      "queried_at": "2025-09-16T16:24:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 253,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 128,
      "queried_at": "2025-09-16T21:15:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 254,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 95,
      "queried_at": "2025-09-15T15:47:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 255,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 66,
      "queried_at": "2025-09-16T09:27:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 256,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 121,
      "queried_at": "2025-09-16T16:46:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 257,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 145,
      "queried_at": "2025-09-15T11:51:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 258,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 64,
      "queried_at": "2025-09-16T13:50:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 259,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 277,
      "queried_at": "2025-09-16T14:22:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 260,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 390,
      "queried_at": "2025-09-15T12:37:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 261,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 83,
      "queried_at": "2025-09-16T19:16:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 262,
    "fields": {
      "client": 8,
      "client_ip": "203.0.113.10",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 361,
      "queried_at": "2025-09-16T12:39:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 263,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 77,
      "queried_at": "2025-09-16T20:01:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 264,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 73,
      "queried_at": "2025-09-16T13:42:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 265,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-16T14:13:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 266,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 298,
      "queried_at": "2025-09-15T17:32:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 267,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-15T16:16:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 268,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T18:01:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 269,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-16T17:12:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 270,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T18:36:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 271,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 156,
      "queried_at": "2025-09-15T19:17:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 272,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 53,
      "queried_at": "2025-09-16T17:42:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 273,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 79,
      "queried_at": "2025-09-15T14:57:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 274,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 60,
      "queried_at": "2025-09-16T14:04:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 275,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 394,
      "queried_at": "2025-09-15T13:49:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 276,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 139,
      "queried_at": "2025-09-16T17:20:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 277,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 283,
      "queried_at": "2025-09-15T13:44:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 278,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 469,
      "queried_at": "2025-09-15T19:19:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 279,
    "fields": {
      "client": 33,
      "client_ip": "203.0.113.82",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 221,
      "queried_at": "2025-09-16T09:59:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 280,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 209,
      "queried_at": "2025-09-15T12:36:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 281,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 448,
      "queried_at": "2025-09-16T16:55:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 282,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T17:51:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 283,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 71,
      "queried_at": "2025-09-15T15:57:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 284,
    "fields": {
      "client": 56,
      "client_ip": "198.51.100.250",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 68,
      "queried_at": "2025-09-16T14:58:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 285,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T19:49:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 286,
    "fields": {
      "client": 13,
      "client_ip": "192.0.2.192",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 171,
      "queried_at": "2025-09-15T13:14:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 287,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 374,
      "queried_at": "2025-09-15T20:08:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 288,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 86,
      "queried_at": "2025-09-16T15:38:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 289,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-15T20:39:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 290,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 62,
      "queried_at": "2025-09-15T22:59:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 291,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 438,
      "queried_at": "2025-09-16T14:54:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 292,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 191,
      "queried_at": "2025-09-16T17:07:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 293,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 378,
      "queried_at": "2025-09-15T21:50:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 294,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 276,
      "queried_at": "2025-09-16T15:29:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 295,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-16T01:02:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 296,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 82,
      "queried_at": "2025-09-16T20:57:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 297,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 138,
      "queried_at": "2025-09-16T21:42:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 298,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 94,
      "queried_at": "2025-09-17T02:41:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 299,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 345,
      "queried_at": "2025-09-15T14:13:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 300,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 152,
      "queried_at": "2025-09-15T17:20:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 301,
    "fields": {
      "client": 62,
      "client_ip": "198.51.100.12",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T10:27:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 302,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-16T15:59:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 303,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 187,
      "queried_at": "2025-09-15T18:27:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 304,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 128,
      "queried_at": "2025-09-16T10:20:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 305,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 378,
      "queried_at": "2025-09-15T17:43:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 306,
    "fields": {
      "client": 3,
      "client_ip": "198.51.100.59",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-15T19:00:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 307,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 340,
      "queried_at": "2025-09-16T22:17:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 308,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 140,
      "queried_at": "2025-09-16T17:59:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 309,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-15T16:29:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 310,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 148,
      "queried_at": "2025-09-15T18:24:17Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 311,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T18:02:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 312,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 488,
      "queried_at": "2025-09-15T19:04:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 313,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 59,
      "queried_at": "2025-09-16T17:49:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 314,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T10:16:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 315,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 417,
      "queried_at": "2025-09-15T15:07:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 316,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 374,
      "queried_at": "2025-09-15T11:31:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 317,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 343,
      "queried_at": "2025-09-15T11:42:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 318,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 451,
      "queried_at": "2025-09-16T16:38:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 319,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 234,
      "queried_at": "2025-09-15T19:54:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 320,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 295,
      "queried_at": "2025-09-16T15:46:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 321,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T15:18:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 322,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 379,
      "queried_at": "2025-09-15T20:20:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 323,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 418,
      "queried_at": "2025-09-16T14:42:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 324,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 98,
      "queried_at": "2025-09-16T16:23:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 325,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 341,
      "queried_at": "2025-09-15T16:35:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 326,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 323,
      "queried_at": "2025-09-15T23:53:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 327,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 349,
      "queried_at": "2025-09-16T14:22:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 328,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 410,
      "queried_at": "2025-09-17T03:04:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 329,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 263,
      "queried_at": "2025-09-15T17:40:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 330,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 475,
      "queried_at": "2025-09-16T19:04:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 331,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 64,
      "queried_at": "2025-09-16T17:07:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 332,
    "fields": {
      "client": 74,
      "client_ip": "198.51.100.65",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-16T18:16:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 333,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 129,
      "queried_at": "2025-09-15T22:43:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 334,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 94,
      "queried_at": "2025-09-16T15:00:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 335,
    "fields": {
      "client": 65,
      "client_ip": "192.0.2.137",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 202,
      "queried_at": "2025-09-15T09:33:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 336,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 139,
      "queried_at": "2025-09-16T15:38:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 337,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 130,
      "queried_at": "2025-09-15T17:32:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 338,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 63,
      "queried_at": "2025-09-16T16:18:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 339,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 84,
      "queried_at": "2025-09-16T15:55:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 340,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 408,
      "queried_at": "2025-09-15T21:16:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 341,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 179,
      "queried_at": "2025-09-16T14:25:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 342,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 472,
      "queried_at": "2025-09-15T20:16:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 343,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 118,
      "queried_at": "2025-09-15T13:09:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 344,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 297,
      "queried_at": "2025-09-16T00:29:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 345,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 97,
      "queried_at": "2025-09-15T20:18:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 346,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "AAAA",
      "rcode": "SERVFAIL",
      "answer_bytes": 51,
      "queried_at": "2025-09-15T12:08:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 347,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 62,
      "queried_at": "2025-09-15T20:30:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 348,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-15T17:56:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 349,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 140,
      "queried_at": "2025-09-15T18:52:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 350,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 291,
      "queried_at": "2025-09-15T21:47:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 351,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 378,
      "queried_at": "2025-09-16T19:13:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 352,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 395,
      "queried_at": "2025-09-16T17:28:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 353,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 82,
      "queried_at": "2025-09-15T17:58:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 354,
    "fields": {
      "client": 56,
      "client_ip": "198.51.100.250",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 443,
      "queried_at": "2025-09-16T15:39:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 355,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 445,
      "queried_at": "2025-09-15T20:34:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 356,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 66,
      "queried_at": "2025-09-16T15:11:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 357,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T22:06:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 358,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 113,
      "queried_at": "2025-09-16T16:12:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 359,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 183,
      "queried_at": "2025-09-15T16:39:17Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 360,
    "fields": {
      "client": 42,
      "client_ip": "192.0.2.92",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 291,
      "queried_at": "2025-09-16T16:43:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 361,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 448,
      "queried_at": "2025-09-16T10:42:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 362,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-15T03:52:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 363,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 377,
      "queried_at": "2025-09-16T13:34:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 364,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 104,
      "queried_at": "2025-09-16T17:36:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 365,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 356,
      "queried_at": "2025-09-15T13:36:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 366,
    "fields": {
      "client": 62,
      "client_ip": "198.51.100.12",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 420,
      "queried_at": "2025-09-16T11:26:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 367,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 381,
      "queried_at": "2025-09-16T19:09:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 368,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 343,
      "queried_at": "2025-09-15T21:50:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 369,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-15T15:37:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 370,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 54,
      "queried_at": "2025-09-15T15:39:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 371,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 173,
      "queried_at": "2025-09-16T17:05:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 372,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T20:01:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 373,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 178,
      "queried_at": "2025-09-16T16:18:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 374,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 167,
      "queried_at": "2025-09-16T16:50:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 375,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 465,
      "queried_at": "2025-09-15T23:22:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 376,
    "fields": {
      "client": 33,
      "client_ip": "203.0.113.82",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 385,
      "queried_at": "2025-09-16T10:34:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 377,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-16T16:18:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 378,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-16T17:22:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 379,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 86,
      "queried_at": "2025-09-16T18:20:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 380,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 274,
      "queried_at": "2025-09-15T23:06:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 381,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 71,
      "queried_at": "2025-09-16T17:37:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 382,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 339,
      "queried_at": "2025-09-15T23:33:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 383,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 373,
      "queried_at": "2025-09-16T10:54:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 384,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 209,
      "queried_at": "2025-09-16T16:40:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 385,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 91,
      "queried_at": "2025-09-15T19:09:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 386,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 121,
      "queried_at": "2025-09-16T18:04:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 387,
    "fields": {
      "client": 43,
      "client_ip": "192.0.2.76",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 102,
      "queried_at": "2025-09-16T15:13:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 388,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 332,
      "queried_at": "2025-09-16T19:04:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 389,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 271,
      "queried_at": "2025-09-15T20:48:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 390,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 134,
      "queried_at": "2025-09-15T20:44:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 391,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-15T18:49:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 392,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T17:39:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 393,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 359,
      "queried_at": "2025-09-16T18:13:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 394,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 280,
      "queried_at": "2025-09-15T12:11:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 395,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 325,
      "queried_at": "2025-09-15T21:34:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 396,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 313,
      "queried_at": "2025-09-15T21:16:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 397,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 276,
      "queried_at": "2025-09-16T17:29:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 398,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 228,
      "queried_at": "2025-09-15T19:08:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 399,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 52,
      "queried_at": "2025-09-16T19:25:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 400,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 108,
      "queried_at": "2025-09-16T16:05:47Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 401,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 229,
      "queried_at": "2025-09-16T20:52:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 402,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 46,
      "queried_at": "2025-09-15T19:39:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 403,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 97,
      "queried_at": "2025-09-16T22:30:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 404,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 488,
      "queried_at": "2025-09-16T00:34:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 405,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 159,
      "queried_at": "2025-09-16T01:32:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 406,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 81,
      "queried_at": "2025-09-16T18:18:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 407,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 261,
      "queried_at": "2025-09-16T19:07:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 408,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 141,
      "queried_at": "2025-09-17T04:28:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 409,
    "fields": {
      "client": 59,
      "client_ip": "198.51.100.120",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 391,
      "queried_at": "2025-09-16T20:24:43Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 410,
    "fields": {
      "client": 31,
      "client_ip": "203.0.113.146",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 340,
      "queried_at": "2025-09-15T23:04:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 411,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 199,
      "queried_at": "2025-09-16T01:13:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 412,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 84,
      "queried_at": "2025-09-16T19:02:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 413,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 54,
      "queried_at": "2025-09-15T21:59:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 414,
    "fields": {
      "client": 73,
      "client_ip": "192.0.2.27",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 269,
      "queried_at": "2025-09-16T20:20:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 415,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 75,
      "queried_at": "2025-09-15T19:59:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 416,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 47,
      "queried_at": "2025-09-15T16:38:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 417,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 216,
      "queried_at": "2025-09-15T15:06:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 418,
    "fields": {
      "client": 36,
      "client_ip": "192.0.2.115",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 201,
      "queried_at": "2025-09-15T17:10:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 419,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-15T12:43:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 420,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 222,
      "queried_at": "2025-09-15T04:45:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 421,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "HTTPS",
      "rcode": "NXDOMAIN",
      "answer_bytes": 47,
      "queried_at": "2025-09-15T17:14:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 422,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 68,
      "queried_at": "2025-09-15T15:11:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 423,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 74,
      "queried_at": "2025-09-16T19:56:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 424,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 192,
      "queried_at": "2025-09-16T17:20:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 425,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 259,
      "queried_at": "2025-09-15T13:50:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 426,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 147,
      "queried_at": "2025-09-16T23:47:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 427,
    "fields": {
      "client": 65,
      "client_ip": "192.0.2.137",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 179,
      "queried_at": "2025-09-15T11:03:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 428,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 366,
      "queried_at": "2025-09-16T20:35:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 429,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 195,
      "queried_at": "2025-09-16T17:09:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 430,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 269,
      "queried_at": "2025-09-16T18:33:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 431,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 413,
      "queried_at": "2025-09-16T10:30:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 432,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 57,
      "queried_at": "2025-09-15T22:12:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 433,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 312,
      "queried_at": "2025-09-16T22:43:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 434,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 55,
      "queried_at": "2025-09-15T15:57:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 435,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 156,
      "queried_at": "2025-09-16T18:25:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 436,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-16T21:50:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 437,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 133,
      "queried_at": "2025-09-16T22:42:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 438,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 271,
      "queried_at": "2025-09-16T16:22:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 439,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 287,
      "queried_at": "2025-09-15T15:49:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 440,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 411,
      "queried_at": "2025-09-15T19:10:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 441,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 211,
      "queried_at": "2025-09-16T13:25:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 442,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T13:48:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 443,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 119,
      "queried_at": "2025-09-15T20:47:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 444,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 266,
      "queried_at": "2025-09-16T00:37:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 445,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 466,
      "queried_at": "2025-09-15T14:00:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 446,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 425,
      "queried_at": "2025-09-15T16:36:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 447,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 152,
      "queried_at": "2025-09-15T16:32:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 448,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 276,
      "queried_at": "2025-09-16T23:29:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 449,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T18:25:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 450,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 51,
      "queried_at": "2025-09-16T11:46:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 451,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 232,
      "queried_at": "2025-09-16T00:54:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 452,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-16T16:46:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 453,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 334,
      "queried_at": "2025-09-15T21:33:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 454,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 51,
      "queried_at": "2025-09-16T19:25:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 455,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 197,
      "queried_at": "2025-09-16T17:42:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 456,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 440,
      "queried_at": "2025-09-15T13:14:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 457,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 117,
      "queried_at": "2025-09-16T01:40:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 458,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 387,
      "queried_at": "2025-09-16T10:22:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 459,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 431,
      "queried_at": "2025-09-16T18:41:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 460,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 247,
      "queried_at": "2025-09-17T00:22:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 461,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 145,
      "queried_at": "2025-09-16T16:59:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 462,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T11:42:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 463,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 483,
      "queried_at": "2025-09-16T22:29:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 464,
    "fields": {
      "client": 74,
      "client_ip": "198.51.100.65",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 109,
      "queried_at": "2025-09-16T18:23:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 465,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NXDOMAIN",
      "answer_bytes": 45,
      "queried_at": "2025-09-16T19:47:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 466,
    "fields": {
      "client": 27,
      "client_ip": "203.0.113.97",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 365,
      "queried_at": "2025-09-15T16:24:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 467,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 277,
      "queried_at": "2025-09-16T21:06:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 468,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 117,
      "queried_at": "2025-09-15T23:34:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 469,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 328,
      "queried_at": "2025-09-16T12:07:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 470,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 157,
      "queried_at": "2025-09-16T19:44:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 471,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T19:11:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 472,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 237,
      "queried_at": "2025-09-15T13:18:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 473,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-16T17:27:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 474,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 96,
      "queried_at": "2025-09-15T05:43:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 475,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 338,
      "queried_at": "2025-09-15T20:30:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 476,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 42,
      "queried_at": "2025-09-15T06:36:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 477,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 78,
      "queried_at": "2025-09-15T12:19:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 478,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 182,
      "queried_at": "2025-09-15T21:43:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 479,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-15T07:37:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 480,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 45,
      "queried_at": "2025-09-15T16:42:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 481,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-15T22:59:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 482,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 411,
      "queried_at": "2025-09-16T14:21:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 483,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 183,
      "queried_at": "2025-09-16T22:35:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 484,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 416,
      "queried_at": "2025-09-15T20:25:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 485,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 114,
      "queried_at": "2025-09-15T20:35:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 486,
    "fields": {
      "client": 38,
      "client_ip": "203.0.113.149",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 104,
      "queried_at": "2025-09-15T17:17:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 487,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 330,
      "queried_at": "2025-09-16T20:54:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 488,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 440,
      "queried_at": "2025-09-15T14:04:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 489,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 374,
      "queried_at": "2025-09-15T21:22:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 490,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 105,
      "queried_at": "2025-09-16T12:32:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 491,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 451,
      "queried_at": "2025-09-16T20:07:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 492,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 192,
      "queried_at": "2025-09-16T17:48:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 493,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 379,
      "queried_at": "2025-09-16T14:54:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 494,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 172,
      "queried_at": "2025-09-15T23:51:24Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 495,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 102,
      "queried_at": "2025-09-17T01:47:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 496,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 194,
      "queried_at": "2025-09-15T15:30:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 497,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 134,
      "queried_at": "2025-09-15T19:07:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 498,
    "fields": {
      "client": 3,
      "client_ip": "198.51.100.59",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 94,
      "queried_at": "2025-09-15T20:20:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 499,
    "fields": {
      "client": 78,
      "client_ip": "192.0.2.235",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 273,
      "queried_at": "2025-09-15T17:10:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 500,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 331,
      "queried_at": "2025-09-16T20:46:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 501,
    "fields": {
      "client": 60,
      "client_ip": "198.51.100.90",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 166,
      "queried_at": "2025-09-17T02:36:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 502,
    "fields": {
      "client": 6,
      "client_ip": "203.0.113.159",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 484,
      "queried_at": "2025-09-16T20:55:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 503,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 246,
      "queried_at": "2025-09-15T21:44:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 504,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 132,
      "queried_at": "2025-09-15T14:36:19Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 505,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 140,
      "queried_at": "2025-09-15T16:25:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 506,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 100,
      "queried_at": "2025-09-16T18:01:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 507,
    "fields": {
      "client": 58,
      "client_ip": "198.51.100.189",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 446,
      "queried_at": "2025-09-16T13:53:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 508,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NXDOMAIN",
      "answer_bytes": 400,
      "queried_at": "2025-09-16T14:55:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 509,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 355,
      "queried_at": "2025-09-15T15:09:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 510,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T15:49:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 511,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 462,
      "queried_at": "2025-09-16T18:58:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 512,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 321,
      "queried_at": "2025-09-15T21:37:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 513,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-15T19:24:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 514,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 56,
      "queried_at": "2025-09-16T02:10:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 515,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 352,
      "queried_at": "2025-09-16T20:19:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 516,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 99,
      "queried_at": "2025-09-16T14:14:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 517,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 231,
      "queried_at": "2025-09-16T12:43:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 518,
    "fields": {
      "client": 33,
      "client_ip": "203.0.113.82",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 157,
      "queried_at": "2025-09-16T11:26:53Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 519,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 47,
      "queried_at": "2025-09-16T10:37:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 520,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 365,
      "queried_at": "2025-09-16T18:30:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 521,
    "fields": {
      "client": 41,
      "client_ip": "203.0.113.212",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 46,
      "queried_at": "2025-09-16T00:42:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 522,
    "fields": {
      "client": 39,
      "client_ip": "203.0.113.34",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 204,
      "queried_at": "2025-09-16T13:43:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 523,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 148,
      "queried_at": "2025-09-15T20:17:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 524,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T22:13:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 525,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-16T23:06:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 526,
    "fields": {
      "client": 58,
      "client_ip": "198.51.100.189",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 98,
      "queried_at": "2025-09-16T14:27:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 527,
    "fields": {
      "client": 40,
      "client_ip": "192.0.2.249",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 181,
      "queried_at": "2025-09-15T22:15:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 528,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 97,
      "queried_at": "2025-09-16T16:18:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 529,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 397,
      "queried_at": "2025-09-16T20:24:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 530,
    "fields": {
      "client": 39,
      "client_ip": "203.0.113.34",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 77,
      "queried_at": "2025-09-16T14:36:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 531,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 208,
      "queried_at": "2025-09-16T21:16:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 532,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 51,
      "queried_at": "2025-09-16T15:19:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 533,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 121,
      "queried_at": "2025-09-16T19:41:13Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 534,
    "fields": {
      "client": 39,
      "client_ip": "203.0.113.34",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 198,
      "queried_at": "2025-09-16T14:47:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 535,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 420,
      "queried_at": "2025-09-16T21:14:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 536,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 174,
      "queried_at": "2025-09-15T17:06:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 537,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 159,
      "queried_at": "2025-09-16T16:59:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 538,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-15T12:56:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 539,
    "fields": {
      "client": 20,
      "client_ip": "198.51.100.64",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 103,
      "queried_at": "2025-09-16T23:11:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 540,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 240,
      "queried_at": "2025-09-15T23:35:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 541,
    "fields": {
      "client": 71,
      "client_ip": "192.0.2.173",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T01:41:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 542,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 234,
      "queried_at": "2025-09-17T00:07:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 543,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T17:47:27Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 544,
    "fields": {
      "client": 10,
      "client_ip": "203.0.113.220",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 67,
      "queried_at": "2025-09-16T11:56:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 545,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 44,
      "queried_at": "2025-09-16T13:20:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 546,
    "fields": {
      "client": 47,
      "client_ip": "192.0.2.117",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 90,
      "queried_at": "2025-09-16T22:08:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 547,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 158,
      "queried_at": "2025-09-15T15:14:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 548,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 149,
      "queried_at": "2025-09-16T20:22:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 549,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 112,
      "queried_at": "2025-09-15T13:27:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 550,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 226,
      "queried_at": "2025-09-15T17:33:22Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 551,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 142,
      "queried_at": "2025-09-17T00:54:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 552,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 181,
      "queried_at": "2025-09-17T04:38:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 553,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 407,
      "queried_at": "2025-09-17T05:36:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 554,
    "fields": {
      "client": 15,
      "client_ip": "192.0.2.187",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 50,
      "queried_at": "2025-09-15T22:26:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 555,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 99,
      "queried_at": "2025-09-15T20:27:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 556,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 19,
      "qname": "crl.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 45,
      "queried_at": "2025-09-15T22:37:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 557,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 158,
      "queried_at": "2025-09-16T11:14:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 558,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 144,
      "queried_at": "2025-09-17T02:09:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 559,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 54,
      "queried_at": "2025-09-16T16:34:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 560,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-15T23:34:45Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 561,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 284,
      "queried_at": "2025-09-16T18:41:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 562,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 127,
      "queried_at": "2025-09-16T21:36:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 563,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 281,
      "queried_at": "2025-09-16T18:36:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 564,
    "fields": {
      "client": 56,
      "client_ip": "198.51.100.250",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 334,
      "queried_at": "2025-09-16T16:23:43Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 565,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 408,
      "queried_at": "2025-09-16T18:13:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 566,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 116,
      "queried_at": "2025-09-15T23:13:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 567,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 487,
      "queried_at": "2025-09-17T02:43:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 568,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 283,
      "queried_at": "2025-09-17T03:42:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 569,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 399,
      "queried_at": "2025-09-16T15:52:28Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 570,
    "fields": {
      "client": 7,
      "client_ip": "192.0.2.29",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 388,
      "queried_at": "2025-09-16T00:37:59Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 571,
    "fields": {
      "client": 65,
      "client_ip": "192.0.2.137",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 382,
      "queried_at": "2025-09-15T11:27:41Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 572,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 448,
      "queried_at": "2025-09-16T16:41:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 573,
    "fields": {
      "client": 28,
      "client_ip": "203.0.113.4",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 56,
      "queried_at": "2025-09-16T16:14:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 574,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 154,
      "queried_at": "2025-09-15T13:57:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 575,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 416,
      "queried_at": "2025-09-16T19:11:33Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 576,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-17T04:26:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 577,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 43,
      "queried_at": "2025-09-16T20:44:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 578,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "SERVFAIL",
      "answer_bytes": 284,
      "queried_at": "2025-09-15T12:57:14Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 579,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T14:26:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 580,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 470,
      "queried_at": "2025-09-16T12:56:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 581,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 425,
      "queried_at": "2025-09-16T01:59:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 582,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 414,
      "queried_at": "2025-09-16T00:22:40Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 583,
    "fields": {
      "client": 62,
      "client_ip": "198.51.100.12",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 106,
      "queried_at": "2025-09-16T12:16:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 584,
    "fields": {
      "client": 64,
      "client_ip": "198.51.100.171",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 127,
      "queried_at": "2025-09-15T17:38:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 585,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 154,
      "queried_at": "2025-09-16T17:37:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 586,
    "fields": {
      "client": 22,
      "client_ip": "203.0.113.63",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 457,
      "queried_at": "2025-09-16T00:59:52Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 587,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 88,
      "queried_at": "2025-09-16T15:51:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 588,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 59,
      "queried_at": "2025-09-16T21:44:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 589,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 184,
      "queried_at": "2025-09-16T11:53:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 590,
    "fields": {
      "client": 29,
      "client_ip": "192.0.2.129",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 283,
      "queried_at": "2025-09-16T20:30:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 591,
    "fields": {
      "client": 4,
      "client_ip": "203.0.113.133",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 129,
      "queried_at": "2025-09-16T23:24:43Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 592,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 159,
      "queried_at": "2025-09-16T20:30:51Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 593,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 276,
      "queried_at": "2025-09-16T12:07:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 594,
    "fields": {
      "client": 33,
      "client_ip": "203.0.113.82",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 291,
      "queried_at": "2025-09-16T12:25:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 595,
    "fields": {
      "client": 48,
      "client_ip": "198.51.100.50",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 204,
      "queried_at": "2025-09-16T18:25:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 596,
    "fields": {
      "client": 17,
      "client_ip": "203.0.113.210",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 406,
      "queried_at": "2025-09-16T17:26:29Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 597,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 193,
      "queried_at": "2025-09-15T16:29:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 598,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 181,
      "queried_at": "2025-09-16T19:10:25Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 599,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 374,
      "queried_at": "2025-09-15T19:32:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 600,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 116,
      "queried_at": "2025-09-16T17:04:21Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 601,
    "fields": {
      "client": 36,
      "client_ip": "192.0.2.115",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 106,
      "queried_at": "2025-09-15T18:34:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 602,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 447,
      "queried_at": "2025-09-16T21:38:38Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 603,
    "fields": {
      "client": 25,
      "client_ip": "198.51.100.127",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 238,
      "queried_at": "2025-09-16T19:32:07Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 604,
    "fields": {
      "client": 2,
      "client_ip": "192.0.2.225",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 248,
      "queried_at": "2025-09-15T13:45:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 605,
    "fields": {
      "client": 66,
      "client_ip": "192.0.2.26",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 53,
      "queried_at": "2025-09-16T17:16:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 606,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T03:23:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 607,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 82,
      "queried_at": "2025-09-15T08:48:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 608,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 425,
      "queried_at": "2025-09-15T13:30:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 609,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 306,
      "queried_at": "2025-09-15T17:21:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 610,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "MX",
      "rcode": "NOERROR",
      "answer_bytes": 230,
      "queried_at": "2025-09-16T00:32:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 611,
    "fields": {
      "client": 77,
      "client_ip": "192.0.2.145",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 148,
      "queried_at": "2025-09-15T17:46:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 612,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-15T22:08:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 613,
    "fields": {
      "client": 67,
      "client_ip": "192.0.2.89",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 143,
      "queried_at": "2025-09-16T21:40:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 614,
    "fields": {
      "client": 74,
      "client_ip": "198.51.100.65",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 111,
      "queried_at": "2025-09-16T19:34:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 615,
    "fields": {
      "client": 76,
      "client_ip": "192.0.2.63",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 413,
      "queried_at": "2025-09-16T19:05:12Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 616,
    "fields": {
      "client": 79,
      "client_ip": "198.51.100.136",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 188,
      "queried_at": "2025-09-17T00:14:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 617,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 105,
      "queried_at": "2025-09-15T21:01:32Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 618,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 350,
      "queried_at": "2025-09-15T15:16:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 619,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 421,
      "queried_at": "2025-09-15T23:40:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 620,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 9,
      "qname": "shop.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 97,
      "queried_at": "2025-09-16T12:15:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 621,
    "fields": {
      "client": 26,
      "client_ip": "198.51.100.251",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 412,
      "queried_at": "2025-09-15T17:19:08Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 622,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 421,
      "queried_at": "2025-09-15T21:33:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 623,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 218,
      "queried_at": "2025-09-17T06:12:01Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 624,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 222,
      "queried_at": "2025-09-15T17:29:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 625,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 130,
      "queried_at": "2025-09-16T01:10:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 626,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 190,
      "queried_at": "2025-09-16T21:56:57Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 627,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 351,
      "queried_at": "2025-09-16T21:56:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 628,
    "fields": {
      "client": 8,
      "client_ip": "203.0.113.10",
      "domain": 6,
      "qname": "files.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 116,
      "queried_at": "2025-09-16T14:05:11Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 629,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 147,
      "queried_at": "2025-09-16T12:38:50Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 630,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 160,
      "queried_at": "2025-09-16T20:12:04Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 631,
    "fields": {
      "client": 70,
      "client_ip": "198.51.100.254",
      "domain": 18,
      "qname": "ocsp.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 92,
      "queried_at": "2025-09-16T19:13:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 632,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 395,
      "queried_at": "2025-09-15T15:55:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 633,
    "fields": {
      "client": 16,
      "client_ip": "203.0.113.40",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 51,
      "queried_at": "2025-09-15T13:48:23Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 634,
    "fields": {
      "client": 51,
      "client_ip": "198.51.100.218",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 147,
      "queried_at": "2025-09-16T23:00:46Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 635,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T00:05:44Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 636,
    "fields": {
      "client": 27,
      "client_ip": "203.0.113.97",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 471,
      "queried_at": "2025-09-15T17:16:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 637,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 218,
      "queried_at": "2025-09-15T21:07:48Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 638,
    "fields": {
      "client": 27,
      "client_ip": "203.0.113.97",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-15T18:38:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 639,
    "fields": {
      "client": 46,
      "client_ip": "198.51.100.176",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 376,
      "queried_at": "2025-09-16T13:00:49Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 640,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 11,
      "qname": "cdn.example.net",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 56,
      "queried_at": "2025-09-16T13:37:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 641,
    "fields": {
      "client": 24,
      "client_ip": "203.0.113.54",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 396,
      "queried_at": "2025-09-17T05:35:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 642,
    "fields": {
      "client": 13,
      "client_ip": "192.0.2.192",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "TXT",
      "rcode": "NOERROR",
      "answer_bytes": 448,
      "queried_at": "2025-09-15T13:25:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 643,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 120,
      "queried_at": "2025-09-16T13:30:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 644,
    "fields": {
      "client": 34,
      "client_ip": "198.51.100.215",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 48,
      "queried_at": "2025-09-15T14:45:35Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 645,
    "fields": {
      "client": 50,
      "client_ip": "198.51.100.200",
      "domain": 14,
      "qname": "maps.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 80,
      "queried_at": "2025-09-15T16:25:55Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 646,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-15T18:29:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 647,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 138,
      "queried_at": "2025-09-16T14:04:06Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 648,
    "fields": {
      "client": 1,
      "client_ip": "198.51.100.188",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 248,
      "queried_at": "2025-09-16T19:57:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 649,
    "fields": {
      "client": 3,
      "client_ip": "198.51.100.59",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 325,
      "queried_at": "2025-09-15T20:43:00Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 650,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "domain": 16,
      "qname": "news.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 304,
      "queried_at": "2025-09-15T16:04:02Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 651,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 58,
      "queried_at": "2025-09-16T18:25:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 652,
    "fields": {
      "client": 54,
      "client_ip": "203.0.113.83",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 74,
      "queried_at": "2025-09-16T20:53:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 653,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 454,
      "queried_at": "2025-09-16T02:29:18Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 654,
    "fields": {
      "client": 11,
      "client_ip": "198.51.100.42",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 71,
      "queried_at": "2025-09-15T09:56:17Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 655,
    "fields": {
      "client": 35,
      "client_ip": "192.0.2.85",
      "domain": 20,
      "qname": "printers.example.test",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T21:03:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 656,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 85,
      "queried_at": "2025-09-15T12:53:30Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 657,
    "fields": {
      "client": 52,
      "client_ip": "198.51.100.204",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 160,
      "queried_at": "2025-09-15T23:31:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 658,
    "fields": {
      "client": 44,
      "client_ip": "192.0.2.227",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 431,
      "queried_at": "2025-09-15T22:54:37Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 659,
    "fields": {
      "client": 57,
      "client_ip": "203.0.113.223",
      "domain": 7,
      "qname": "chat.example.org",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 231,
      "queried_at": "2025-09-16T21:42:10Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 660,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 388,
      "queried_at": "2025-09-16T01:12:39Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 661,
    "fields": {
      "client": 9,
      "client_ip": "192.0.2.20",
      "domain": 5,
      "qname": "api.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 219,
      "queried_at": "2025-09-15T16:10:42Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 662,
    "fields": {
      "client": 19,
      "client_ip": "198.51.100.182",
      "domain": 17,
      "qname": "time.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 368,
      "queried_at": "2025-09-16T14:37:15Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 663,
    "fields": {
      "client": 55,
      "client_ip": "192.0.2.58",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T20:51:58Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 664,
    "fields": {
      "client": 18,
      "client_ip": "203.0.113.51",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-16T15:45:36Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 665,
    "fields": {
      "client": 80,
      "client_ip": "198.51.100.224",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 484,
      "queried_at": "2025-09-16T04:04:56Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 666,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 308,
      "queried_at": "2025-09-16T02:47:31Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 667,
    "fields": {
      "client": 21,
      "client_ip": "192.0.2.114",
      "domain": 12,
      "qname": "updates.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 261,
      "queried_at": "2025-09-16T14:20:26Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 668,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "domain": 8,
      "qname": "video.example.org",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 40,
      "queried_at": "2025-09-15T22:29:54Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 669,
    "fields": {
      "client": 37,
      "client_ip": "198.51.100.193",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "CNAME",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-16T12:05:43Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 670,
    "fields": {
      "client": 49,
      "client_ip": "198.51.100.56",
      "domain": 13,
      "qname": "telemetry.example.net",
      "qtype": "AAAA",
      "rcode": "NOERROR",
      "answer_bytes": 41,
      "queried_at": "2025-09-16T19:52:03Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 671,
    "fields": {
      "client": 5,
      "client_ip": "192.0.2.232",
      "domain": 4,
      "qname": "wiki.example.com",
      "qtype": "A",
      "rcode": "NXDOMAIN",
      "answer_bytes": 360,
      "queried_at": "2025-09-15T13:16:20Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 672,
    "fields": {
      "client": 74,
      "client_ip": "198.51.100.65",
      "domain": 3,
      "qname": "sso.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 187,
      "queried_at": "2025-09-16T20:53:34Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 673,
    "fields": {
      "client": 23,
      "client_ip": "203.0.113.108",
      "domain": 10,
      "qname": "ads.example.org",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 269,
      "queried_at": "2025-09-17T06:32:16Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 674,
    "fields": {
      "client": 14,
      "client_ip": "203.0.113.72",
      "domain": 15,
      "qname": "tracker.example.net",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 356,
      "queried_at": "2025-09-16T02:21:09Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 675,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "domain": 2,
      "qname": "mail.example.com",
      "qtype": "A",
      "rcode": "NOERROR",
      "answer_bytes": 42,
      "queried_at": "2025-09-16T23:19:05Z"
    }
  },
  {
    "model": "app.dnsquery",
    "pk": 676,
    "fields": {
      "client": 32,
      "client_ip": "198.51.100.5",
      "domain": 1,
      "qname": "intranet.example.com",
      "qtype": "HTTPS",
      "rcode": "NOERROR",
      "answer_bytes": 237,
      "queried_at": "2025-09-16T03:35:08Z"
    }
  },
  {
    "model": "app.tunnelprofile",
    "pk": 1,
    "fields": {
      "profile_set": "planted",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "direction": "outbound"
    }
  },
  {
    "model": "app.tunnelprofile",
    "pk": 2,
    "fields": {
      "profile_set": "planted",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "direction": "two_way"
    }
  },
  {
    "model": "app.tunnelprofile",
    "pk": 3,
    "fields": {
      "profile_set": "planted",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "direction": "check_in"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 1,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "started_at": "2025-09-17T03:09:37Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 2,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "profile": 1,
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "started_at": "2025-09-16T10:29:37Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 3,
    "fields": {
      "client": 53,
      "client_ip": "192.0.2.116",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "started_at": "2025-09-16T05:43:31Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 4,
    "fields": {
      "client": 68,
      "client_ip": "203.0.113.18",
      "profile": 3,
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "started_at": "2025-09-15T18:52:24Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 5,
    "fields": {
      "client": 61,
      "client_ip": "198.51.100.4",
      "profile": 3,
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "started_at": "2025-09-17T02:14:33Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 6,
    "fields": {
      "client": 30,
      "client_ip": "203.0.113.50",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "started_at": "2025-09-17T06:43:40Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 7,
    "fields": {
      "client": 72,
      "client_ip": "198.51.100.163",
      "profile": 1,
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "started_at": "2025-09-16T01:19:58Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 8,
    "fields": {
      "client": 63,
      "client_ip": "192.0.2.196",
      "profile": 3,
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "started_at": "2025-09-16T12:50:53Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 9,
    "fields": {
      "client": 69,
      "client_ip": "203.0.113.132",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "started_at": "2025-09-17T09:42:03Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 10,
    "fields": {
      "client": 45,
      "client_ip": "198.51.100.206",
      "profile": 3,
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "started_at": "2025-09-16T01:03:46Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 11,
    "fields": {
      "client": 75,
      "client_ip": "192.0.2.17",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "started_at": "2025-09-16T07:17:58Z"
    }
  },
  {
    "model": "app.tunnelsession",
    "pk": 12,
    "fields": {
      "client": 12,
      "client_ip": "203.0.113.228",
      "profile": 2,
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "started_at": "2025-09-15T16:48:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 1,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "9fd8dc913d1483f4b23c748bf0b281e3cdddce8b636307cc",
      "rcode": "NOERROR",
      "answer_bytes": 279,
      "queried_at": "2025-09-15T18:52:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 2,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "f47aa7656c870dc1e0a336c29e679604f436f218f4ab5fb7",
      "rcode": "NOERROR",
      "answer_bytes": 392,
      "queried_at": "2025-09-17T09:42:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 3,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "c28b0b60566027feab1af7dc33e3bf4ed86c7baed3a64a84",
      "rcode": "NXDOMAIN",
      "answer_bytes": 420,
      "queried_at": "2025-09-16T10:29:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 4,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "f668cf994e0f303b4442723b0a84bca51d8406e72afcee1a",
      "rcode": "NOERROR",
      "answer_bytes": 498,
      "queried_at": "2025-09-17T03:09:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 5,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "a91f046251b3757259c2fc04d8b4b0142c0e7275084151a9",
      "rcode": "NOERROR",
      "answer_bytes": 330,
      "queried_at": "2025-09-15T16:48:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 6,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "2f4c4827723fe3959485529f406fd42a5b7ea3c251c410dc",
      "rcode": "NOERROR",
      "answer_bytes": 122,
      "queried_at": "2025-09-17T09:42:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 7,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "20abae9c92d80072a86fb4c48c7a9b40d788ac97e4498003",
      "rcode": "NOERROR",
      "answer_bytes": 409,
      "queried_at": "2025-09-16T01:03:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 8,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "aeeed611fcf5b83686f2b68b588e0c13d2065d00faced11b",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T05:43:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 9,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "317d9ec40864304e75c12af3b7973d56cc6337241a5ef797",
      "rcode": "NOERROR",
      "answer_bytes": 396,
      "queried_at": "2025-09-17T09:42:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 10,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "93d2d786529dba86a1f31c7816e6fa5319028ffaee519cac",
      "rcode": "NOERROR",
      "answer_bytes": 492,
      "queried_at": "2025-09-17T02:14:37Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 11,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "0fc89fe0447c7205ade3c30b6566bccaf1f2645426d7fcc4",
      "rcode": "NOERROR",
      "answer_bytes": 447,
      "queried_at": "2025-09-16T01:03:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 12,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "eab246311911d0279aa7a15b0d607f4d87a6cf8ff7e68e29",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T10:29:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 13,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "447af367b52d610d2c9203d7f646dac61b05c14377de21d7",
      "rcode": "NXDOMAIN",
      "answer_bytes": 280,
      "queried_at": "2025-09-16T05:43:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 14,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "7ee0aa4d0d8f45919d15e7cfd56b31b99d9f1ec584fd9298",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T12:50:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 15,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "7a276ea9d42e93cca5c48df21b30d5e1f33a8270c6b0c9bf",
      "rcode": "NXDOMAIN",
      "answer_bytes": 141,
      "queried_at": "2025-09-16T12:51:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 16,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "875abc7eab96f7e3c06a270f04c061e9d46bdb52d6ea98ff",
      "rcode": "NOERROR",
      "answer_bytes": 264,
      "queried_at": "2025-09-17T03:09:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 17,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "628832e4acd8925bb4cb71928bc7bfa88687c8c15327b10e",
      "rcode": "NOERROR",
      "answer_bytes": 92,
      "queried_at": "2025-09-16T05:43:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 18,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "bfdff9e93d38d9dd57ad5e2cade28c12b506fe8778da88a5",
      "rcode": "NOERROR",
      "answer_bytes": 472,
      "queried_at": "2025-09-16T01:19:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 19,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "976f5ac36e4fe4ab163baef41a380adfb2ae86840ea594e0",
      "rcode": "NOERROR",
      "answer_bytes": 345,
      "queried_at": "2025-09-16T01:03:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 20,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "6c8c6343bbb6c74508146c115218ad8f181eb185ff55b8c7",
      "rcode": "NOERROR",
      "answer_bytes": 368,
      "queried_at": "2025-09-16T07:18:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 21,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "57023cfac7d0b10b24964b23831edf3ffd683fb52a3de6fc",
      "rcode": "NOERROR",
      "answer_bytes": 234,
      "queried_at": "2025-09-17T09:42:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 22,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "ca6072e5e0fd37e97e4a74570f0fdd49924a547802e7d704",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-16T01:20:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 23,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "649522677d1d7d6d861c7fedaea704c46d1236eb790fa2d6",
      "rcode": "NOERROR",
      "answer_bytes": 328,
      "queried_at": "2025-09-16T01:04:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 24,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "3aa92fcf0536be1f9b3855eba479f557e1b7ee78b49abc3a",
      "rcode": "NOERROR",
      "answer_bytes": 326,
      "queried_at": "2025-09-17T02:14:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 25,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "b73d35a4d6759de27e1bd6a93456cb6aac65ebf9ca766983",
      "rcode": "NOERROR",
      "answer_bytes": 344,
      "queried_at": "2025-09-17T02:14:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 26,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "2677166d82ef1537f492b01154c779b7422e1ed868dbe9fc",
      "rcode": "NOERROR",
      "answer_bytes": 136,
      "queried_at": "2025-09-16T05:43:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 27,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "a7321f1a0f30518bf9dbbf8e5826c5516a8b0eff8160208e",
      "rcode": "NOERROR",
      "answer_bytes": 361,
      "queried_at": "2025-09-16T01:04:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 28,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "543e69004310eac146baf5530fb68931a174da024454403b",
      "rcode": "NOERROR",
      "answer_bytes": 505,
      "queried_at": "2025-09-17T02:14:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 29,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "2b189462761d86a6b1277a9a725b28cfc0c4139e9b807405",
      "rcode": "NOERROR",
      "answer_bytes": 496,
      "queried_at": "2025-09-17T09:42:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 30,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "db8dc1de3ae8f68deea15d7497ba4bd0c86482505008dbb3",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-15T16:48:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 31,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "075f5fb30a4f3915ff8120c9f7c55380851422b1c7d2ab1b",
      "rcode": "SERVFAIL",
      "answer_bytes": 187,
      "queried_at": "2025-09-16T07:18:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 32,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "069181bea56766ae82fb8ab60af553b4403a85fcd432c360",
      "rcode": "NOERROR",
      "answer_bytes": 87,
      "queried_at": "2025-09-17T02:14:48Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 33,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "f178df9d74e6f7cbc66efa4b3405b1cddc6e7f9fc6df63a9",
      "rcode": "NOERROR",
      "answer_bytes": 502,
      "queried_at": "2025-09-16T01:04:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 34,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "73fde201a51612361ff2075f528f68c2498e3b0980588bcb",
      "rcode": "NOERROR",
      "answer_bytes": 348,
      "queried_at": "2025-09-17T02:14:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 35,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "a756165c72c3660bd2744f1f9f352c62cc4efe9d84a49bee",
      "rcode": "NOERROR",
      "answer_bytes": 276,
      "queried_at": "2025-09-16T01:04:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 36,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "5e4c7e101077f3508980214579f8ac8e84ab22c64784df3c",
      "rcode": "NOERROR",
      "answer_bytes": 86,
      "queried_at": "2025-09-16T05:43:44Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 37,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "5721f7087dfd9670e16d27ab0427157ac23dd007096449d0",
      "rcode": "NOERROR",
      "answer_bytes": 357,
      "queried_at": "2025-09-17T02:14:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 38,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "302bcb0020a8c7739fa6ec0fe76c2bc8acef09b68b58242c",
      "rcode": "NOERROR",
      "answer_bytes": 349,
      "queried_at": "2025-09-17T02:15:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 39,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "08c596aba5aefecfec6ed75316edd1c8d74149c153fdef8a",
      "rcode": "NOERROR",
      "answer_bytes": 368,
      "queried_at": "2025-09-17T03:09:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 40,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "0b560bcf47c646c831d3246c6f3f7240e4bb1411bd0ec6ae",
      "rcode": "NOERROR",
      "answer_bytes": 458,
      "queried_at": "2025-09-15T18:52:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 41,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "02736b3b5d933d523511ae62a19bec3c22bd01e9fc2ae2a6",
      "rcode": "NXDOMAIN",
      "answer_bytes": 502,
      "queried_at": "2025-09-17T06:43:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 42,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "65b3b1c0d99582390b76a738ccbd3efe4188c9114309c11a",
      "rcode": "NOERROR",
      "answer_bytes": 153,
      "queried_at": "2025-09-16T10:29:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 43,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "051610ee7f4b7294c55e0dc4ce69d68502045843975388d8",
      "rcode": "NOERROR",
      "answer_bytes": 432,
      "queried_at": "2025-09-16T01:20:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 44,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "c08b2c806b0066931e39828bb6e9ddf39a1fd623a2593c64",
      "rcode": "NOERROR",
      "answer_bytes": 360,
      "queried_at": "2025-09-16T07:18:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 45,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "c62810d8e7652712eaddef06564ae826337c4968d439e3d6",
      "rcode": "NOERROR",
      "answer_bytes": 235,
      "queried_at": "2025-09-16T01:20:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 46,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "305bc66ba4d203a3d099111725d82155166dae261d75ad3a",
      "rcode": "NOERROR",
      "answer_bytes": 471,
      "queried_at": "2025-09-16T01:04:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 47,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "d977294e76b6a276b8b8c08c8f5436fdf35825068352d819",
      "rcode": "NOERROR",
      "answer_bytes": 76,
      "queried_at": "2025-09-17T06:43:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 48,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "be400cee01e14fb30f2eac044e3960d659a5bf4ae74c61c1",
      "rcode": "NOERROR",
      "answer_bytes": 79,
      "queried_at": "2025-09-15T16:48:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 49,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "82345ebaca58b361791463c5fc9ea1357e809eb298879cd1",
      "rcode": "NOERROR",
      "answer_bytes": 395,
      "queried_at": "2025-09-17T02:15:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 50,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "bd1dbf33ade3027722cc80723af767366059a3e2ee8b8826",
      "rcode": "NOERROR",
      "answer_bytes": 235,
      "queried_at": "2025-09-16T10:29:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 51,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "cefc4a6cba603ef5a23e7f62ea05867913ea2359a29522b6",
      "rcode": "NOERROR",
      "answer_bytes": 502,
      "queried_at": "2025-09-17T02:15:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 52,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "eddd4ef0dadfb2b4dbe4a45e693188dabbd726640d1f4e58",
      "rcode": "NOERROR",
      "answer_bytes": 213,
      "queried_at": "2025-09-17T02:15:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 53,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "21bbf1e3999798c97738ad526e1029df3cef81cc2e60e107",
      "rcode": "SERVFAIL",
      "answer_bytes": 150,
      "queried_at": "2025-09-16T05:43:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 54,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "306ad573b12a2033080e356cf0e1f1c42a115616f9fd5ec8",
      "rcode": "NOERROR",
      "answer_bytes": 398,
      "queried_at": "2025-09-17T02:15:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 55,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "33c815779792f08e92c49df58a93761b14ab00efd391db4c",
      "rcode": "NOERROR",
      "answer_bytes": 356,
      "queried_at": "2025-09-17T09:42:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 56,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "991c4fe302ed3331db3a75dbf06a3ae890a391f6d0bafaed",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-17T09:42:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 57,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "a685212fd2ca26ebffaf8e358fb8a53741629dcb5a8d9f13",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-17T02:15:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 58,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "6932542c0688155909e4393e0c123994b384e942dba71c40",
      "rcode": "NOERROR",
      "answer_bytes": 137,
      "queried_at": "2025-09-17T09:42:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 59,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "6fa4d735263f5afaa554ec709044a7750ff1129213705b5b",
      "rcode": "NOERROR",
      "answer_bytes": 380,
      "queried_at": "2025-09-17T03:09:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 60,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "a39b76e72316769f6058c1820d672cadfeb647869a9477db",
      "rcode": "NOERROR",
      "answer_bytes": 505,
      "queried_at": "2025-09-17T06:43:51Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 61,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "6cb42cdecaa66c97e5175826ba31c4d8a8e27d7b0edc25fd",
      "rcode": "NOERROR",
      "answer_bytes": 486,
      "queried_at": "2025-09-17T06:43:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 62,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "9e51cf2284768715db84beb2e3ec6f5d81f45ce9270bdcfc",
      "rcode": "NOERROR",
      "answer_bytes": 355,
      "queried_at": "2025-09-17T09:42:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 63,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "2bb7e5b74b8045bd7ee2e59e8026ededf1433bbede789db4",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-16T01:20:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 64,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "764b8a19e50fa98a760b54c8966ee7196e158376094a394c",
      "rcode": "NOERROR",
      "answer_bytes": 500,
      "queried_at": "2025-09-16T01:20:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 65,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "219fbfff1aace453fcd4b72fe4189f6bd83b784020738bd5",
      "rcode": "NOERROR",
      "answer_bytes": 204,
      "queried_at": "2025-09-16T01:04:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 66,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "3dcdbf9adbe89c33f83cf3cba1a101f5cc5b0b85ea7269ec",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-16T01:04:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 67,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "a85d19589d40498cbea4e96b3cecb9d473f02aaefd0fe9ee",
      "rcode": "NOERROR",
      "answer_bytes": 355,
      "queried_at": "2025-09-16T05:43:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 68,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "271f92362a2b51a72363ebf36c5de5bbbffb7d91053bb3b5",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T01:04:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 69,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "516933bbc7fdcb75f9ae1c192893b74499f8fa2b568988e0",
      "rcode": "SERVFAIL",
      "answer_bytes": 507,
      "queried_at": "2025-09-16T01:20:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 70,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "ada0007d7b954a7f0adbfb36b506ad3cd74bd9e59bf0c192",
      "rcode": "NOERROR",
      "answer_bytes": 301,
      "queried_at": "2025-09-16T01:04:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 71,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "3967dc370eca15b78d4ef64ec17e33d07effe1bed75eb64e",
      "rcode": "NOERROR",
      "answer_bytes": 68,
      "queried_at": "2025-09-15T18:52:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 72,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "41a4d8dd2d1e857f87fcf92f5851a32f68ec1750b97bd653",
      "rcode": "NOERROR",
      "answer_bytes": 442,
      "queried_at": "2025-09-16T01:04:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 73,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "5df3dd452b9c3b208f8a23a4cdc30db58296cfbc7e8675d2",
      "rcode": "NOERROR",
      "answer_bytes": 407,
      "queried_at": "2025-09-17T09:42:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 74,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "70c078d69e71c122a4eb7c35212c1e219727d2aa5e3a7de7",
      "rcode": "NOERROR",
      "answer_bytes": 328,
      "queried_at": "2025-09-17T06:43:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 75,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "dfb700ef4ca9a7f8848f2888761ed07b6dd1e6831369662f",
      "rcode": "NOERROR",
      "answer_bytes": 473,
      "queried_at": "2025-09-16T12:51:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 76,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "bdcdadc410ff757b138408667175a0c627e4300d7cab8f3a",
      "rcode": "NOERROR",
      "answer_bytes": 334,
      "queried_at": "2025-09-16T01:20:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 77,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "b95517b70498b35af5caf5fc05cadb02bd2a724853e0e732",
      "rcode": "NOERROR",
      "answer_bytes": 109,
      "queried_at": "2025-09-16T01:04:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 78,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "d65081372e99057ed6d516b429aad780ab77fdf31ad65e0e",
      "rcode": "SERVFAIL",
      "answer_bytes": 172,
      "queried_at": "2025-09-16T10:29:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 79,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "5d7a304f92f0098df2df334d93e15a5e83bb78217950390a",
      "rcode": "NOERROR",
      "answer_bytes": 149,
      "queried_at": "2025-09-16T01:04:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 80,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "1584e0a26c43174e5ad74a5bcefbb2f3b66bd7162d198ba9",
      "rcode": "NXDOMAIN",
      "answer_bytes": 283,
      "queried_at": "2025-09-16T01:04:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 81,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "36f0ea147d661d3d39f0ce848c47fe79eaba45dadc34ec45",
      "rcode": "NXDOMAIN",
      "answer_bytes": 195,
      "queried_at": "2025-09-15T18:52:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 82,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "7694ceaa19b07bf55d64b3b155d854e61374e319ce10acac",
      "rcode": "NOERROR",
      "answer_bytes": 294,
      "queried_at": "2025-09-15T18:52:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 83,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "357ba4e59537557219c33690c34b408ff61b978a8339fcc9",
      "rcode": "NOERROR",
      "answer_bytes": 464,
      "queried_at": "2025-09-15T18:52:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 84,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "565b6fe21cfab5f46610006d720b59f305d3f440c8484f41",
      "rcode": "NOERROR",
      "answer_bytes": 436,
      "queried_at": "2025-09-16T01:04:37Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 85,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "26592529f898b1d08cc0e35ca0bfae707b6f3f5de8fb6d75",
      "rcode": "NOERROR",
      "answer_bytes": 394,
      "queried_at": "2025-09-15T16:48:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 86,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "9f6732779dc5e0b4955c74103dd9c2c55f3832f4309cc610",
      "rcode": "NOERROR",
      "answer_bytes": 444,
      "queried_at": "2025-09-17T06:43:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 87,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "063161adbed928aec7d90b98b0a4a5d41c1863c0323c9c6e",
      "rcode": "NOERROR",
      "answer_bytes": 339,
      "queried_at": "2025-09-16T01:20:24Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 88,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "17775e717d8289b7badba08ed7f597233379c39fb2d95239",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-16T01:04:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 89,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "9c412d4c3228b4dadae38f5e524d89e28a2c1f0e81280199",
      "rcode": "NOERROR",
      "answer_bytes": 424,
      "queried_at": "2025-09-17T09:42:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 90,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "407507910fd382b1c50584154aba4ba791b9292606b1bbd9",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-17T09:42:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 91,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "faf42d13b7cbf5930cd9e818d5a76594b6e929e0fdeb4e12",
      "rcode": "NXDOMAIN",
      "answer_bytes": 512,
      "queried_at": "2025-09-17T09:42:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 92,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "cec4c385ffafd93d4ee9aefefc366b1ce3323c16daba0d78",
      "rcode": "NOERROR",
      "answer_bytes": 254,
      "queried_at": "2025-09-17T09:42:53Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 93,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "b122b4884370ca4d6ffd5b60f659f467f827e9edee54f02f",
      "rcode": "NOERROR",
      "answer_bytes": 260,
      "queried_at": "2025-09-16T05:43:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 94,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "30e9af24f48fdb02386e121d7e0c55be791eb59e45f4dd6d",
      "rcode": "SERVFAIL",
      "answer_bytes": 308,
      "queried_at": "2025-09-16T01:04:40Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 95,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "02c4f345af3b5c6500fe51d7766bc07f581f0dfd6ad572d4",
      "rcode": "NOERROR",
      "answer_bytes": 310,
      "queried_at": "2025-09-16T01:20:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 96,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "9477d1ec23b2b41396cc2cf3a9cb9c2976040d46f1002de5",
      "rcode": "NOERROR",
      "answer_bytes": 304,
      "queried_at": "2025-09-15T16:48:24Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 97,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "b425c7d9a4d7e2188cf76cd5d08d65de1923bc9b3b1146a6",
      "rcode": "NOERROR",
      "answer_bytes": 487,
      "queried_at": "2025-09-15T18:52:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 98,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "352b64bb2cf2c2cd32f5a325802aa468601c1de1688d663f",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-17T02:15:21Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 99,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "cd60d962c1b8391e581a1c8e37d1747aec4f29cd7f1a86d7",
      "rcode": "NOERROR",
      "answer_bytes": 429,
      "queried_at": "2025-09-16T01:20:31Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 100,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "40d7a9abfbdb97c71835b0065c569c222d08b6b9ab6bf70c",
      "rcode": "NOERROR",
      "answer_bytes": 120,
      "queried_at": "2025-09-16T01:20:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 101,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "39b6e30b4732b9f1725ec1b158614ab1d5466b477280f7a0",
      "rcode": "NOERROR",
      "answer_bytes": 463,
      "queried_at": "2025-09-16T01:04:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 102,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "ba4fb585a6fa2ecaaa725b819827b04b59c1471cca188015",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T05:43:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 103,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "d6b24db5346ca99d20c4f29069ef096ea350efb0d5cb1685",
      "rcode": "NOERROR",
      "answer_bytes": 154,
      "queried_at": "2025-09-16T10:29:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 104,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "1d836a2659eb1f07e44fbed5f8d394d03e8c55f6d58dec24",
      "rcode": "NOERROR",
      "answer_bytes": 393,
      "queried_at": "2025-09-15T16:48:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 105,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "0ff472c8839ad5d25a3079620c45df1ede974d91523ba94e",
      "rcode": "NOERROR",
      "answer_bytes": 201,
      "queried_at": "2025-09-16T01:20:37Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 106,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "c4e13d22c94ff78f7a3f1a8a4dc664fa48a201756c3b9c8d",
      "rcode": "NOERROR",
      "answer_bytes": 379,
      "queried_at": "2025-09-16T10:29:51Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 107,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "9be5ca1bb05df2710cb6bb7f4b290cae86075547616fd88f",
      "rcode": "NXDOMAIN",
      "answer_bytes": 457,
      "queried_at": "2025-09-15T16:48:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 108,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "657fc625658c333be6bc6bf71978bc119dcebf85b65858c6",
      "rcode": "NOERROR",
      "answer_bytes": 466,
      "queried_at": "2025-09-17T09:42:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 109,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "ad8e63c671b101c9c63b91c1e864d26ce484fd3e1968c176",
      "rcode": "NXDOMAIN",
      "answer_bytes": 500,
      "queried_at": "2025-09-16T10:29:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 110,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "a2835edf3901ccc77654d897dcaa64ec409aef0ba5b16419",
      "rcode": "NOERROR",
      "answer_bytes": 405,
      "queried_at": "2025-09-17T02:15:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 111,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "a404810f4812c8aed24408009cac293461e1c2baecf4996f",
      "rcode": "NXDOMAIN",
      "answer_bytes": 309,
      "queried_at": "2025-09-16T01:20:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 112,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "9b8e1adbfa123a334682ba57722d478fd97420365184a16c",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-15T16:48:31Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 113,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "55311c001a13f4b377c859cc27fb584430225a7d2f90a245",
      "rcode": "NOERROR",
      "answer_bytes": 383,
      "queried_at": "2025-09-16T01:04:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 114,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "24f4b3c7948f533166c6c5a47280135babfc2f108138cc3a",
      "rcode": "NOERROR",
      "answer_bytes": 301,
      "queried_at": "2025-09-17T03:09:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 115,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "cabb67e6b58109a1a89ca473e85ea4d604a1246fdbee3935",
      "rcode": "NOERROR",
      "answer_bytes": 374,
      "queried_at": "2025-09-16T10:29:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 116,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "156e26df86e37aab0d07a1397b5df79a6abc2c1a61eb4818",
      "rcode": "SERVFAIL",
      "answer_bytes": 401,
      "queried_at": "2025-09-17T02:15:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 117,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "30ccb3e2e010a84b3baffbc2d99b920aeb727eb13b9723ce",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T05:43:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 118,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "fc3b5b7e4c966b6894aca3d3db5a5ba162fa1e201dde5812",
      "rcode": "SERVFAIL",
      "answer_bytes": 419,
      "queried_at": "2025-09-17T02:15:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 119,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "99a70266bf8e6bb4c3d7cfaa4e4df6911a6e6a335419da21",
      "rcode": "NOERROR",
      "answer_bytes": 329,
      "queried_at": "2025-09-17T02:15:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 120,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "dad809861a1cf436cd87e4fcc818ef97fcb4f71d8956b087",
      "rcode": "NOERROR",
      "answer_bytes": 333,
      "queried_at": "2025-09-16T05:44:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 121,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "d657a1891d67a539ea2f07a1d133901441694be7fb5b6018",
      "rcode": "NOERROR",
      "answer_bytes": 331,
      "queried_at": "2025-09-16T12:51:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 122,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "f69ac6882911d518401b04d9757b214452d644cda647e1a6",
      "rcode": "NOERROR",
      "answer_bytes": 365,
      "queried_at": "2025-09-16T01:20:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 123,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "31f0836f1210e1d4ddebd043805f722cef3d4584892b504d",
      "rcode": "NOERROR",
      "answer_bytes": 195,
      "queried_at": "2025-09-16T05:44:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 124,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "015726368ca0468bf0ac914704d451c9d1aa7718ab7d8621",
      "rcode": "NOERROR",
      "answer_bytes": 485,
      "queried_at": "2025-09-16T01:04:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 125,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "fdbfd1c4fcb02b55429062443f15851a3847a0294bb766e7",
      "rcode": "NOERROR",
      "answer_bytes": 274,
      "queried_at": "2025-09-17T03:09:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 126,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "8a80b878a11b028929750f9cca9a6d135a8043d126adef4e",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-15T16:48:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 127,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "156a392ff22973a59ba89091f1fd6cde87975e274f1b6929",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T01:20:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 128,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "a1fe68b4e909b037a63d6f80a870a074412f42c1b55b2815",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-17T03:09:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 129,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "f45bbc289a867a36ffd8b05eff27ffa7adf4c607566a7d05",
      "rcode": "NOERROR",
      "answer_bytes": 472,
      "queried_at": "2025-09-16T01:20:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 130,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "fc1d25c707ccc1a1f9b30525a06f61abb94a2514a9063083",
      "rcode": "NOERROR",
      "answer_bytes": 235,
      "queried_at": "2025-09-17T02:15:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 131,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "1d08f2f66962fa23291cf0a6b12970fca35e77317f739856",
      "rcode": "NXDOMAIN",
      "answer_bytes": 422,
      "queried_at": "2025-09-16T05:44:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 132,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "66fc072f51f523572a0fab569978c8a3d276e8034ac073e6",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-17T09:42:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 133,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "b6e9bc84969aca74cd468aac8797f2bee121463213c2ea38",
      "rcode": "NOERROR",
      "answer_bytes": 407,
      "queried_at": "2025-09-17T06:43:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 134,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "bb127ecf0ab08cbefcc4bc7f39dc00f774fa54695158e3df",
      "rcode": "NOERROR",
      "answer_bytes": 416,
      "queried_at": "2025-09-16T01:04:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 135,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "0573d56952b0cc5e35741d7291e081a917c3f71bfbb43174",
      "rcode": "NOERROR",
      "answer_bytes": 395,
      "queried_at": "2025-09-15T16:48:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 136,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "033fe898676405a43ccd3cafa7fdd709bc1156147a80313d",
      "rcode": "NOERROR",
      "answer_bytes": 500,
      "queried_at": "2025-09-17T02:15:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 137,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "6da395603aadd26aab6238406a707d58c71aaae5a9b3bcbf",
      "rcode": "NOERROR",
      "answer_bytes": 498,
      "queried_at": "2025-09-17T06:44:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 138,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "07a8bb01886aa8e14c7b463c457c666cf9da30d996e7ae6f",
      "rcode": "NOERROR",
      "answer_bytes": 194,
      "queried_at": "2025-09-16T05:44:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 139,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "b3eb637546d17fff5394e4d875a3fcb36cd86c00cdf46ea9",
      "rcode": "NOERROR",
      "answer_bytes": 92,
      "queried_at": "2025-09-16T01:20:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 140,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "7e9cd37cb3d3df45f25b83027b39121b7ff8b75bc9c4eff3",
      "rcode": "NOERROR",
      "answer_bytes": 143,
      "queried_at": "2025-09-17T06:44:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 141,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "30f0d7f82b38c390567ab3f3a3afe150fcc16fe2cafbcaf8",
      "rcode": "NOERROR",
      "answer_bytes": 274,
      "queried_at": "2025-09-16T01:04:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 142,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "7844af4b97fbdc58ca3edf4262ffd8d29f0b8ccb8e3c041a",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-16T01:04:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 143,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "993996b1a870added19927a8d6b2d14b1215cbce85d17c4d",
      "rcode": "NOERROR",
      "answer_bytes": 445,
      "queried_at": "2025-09-16T01:21:00Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 144,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "048c8ea1e9e1eb941153480335ea7c7bb7d5bfb18f18ff3f",
      "rcode": "NOERROR",
      "answer_bytes": 505,
      "queried_at": "2025-09-16T01:21:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 145,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "5caecd6bf4e68e3db235f13d838c5d17eadae847b38aaa53",
      "rcode": "NOERROR",
      "answer_bytes": 311,
      "queried_at": "2025-09-17T02:15:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 146,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "7135e2ef445e92cd969f346ac89392241f6ab398765431ef",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-16T01:21:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 147,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "3e52af1fc62c0c530541108658d27b05e67e22e76bae2611",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T10:30:00Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 148,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "8f9634f50146b02a3b494eaf30e43d4ddc3f2b6834007dd9",
      "rcode": "NOERROR",
      "answer_bytes": 478,
      "queried_at": "2025-09-15T16:48:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 149,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "4d426ca53139e29e3b1b4661cbaebb7192371ad4c9502683",
      "rcode": "NOERROR",
      "answer_bytes": 134,
      "queried_at": "2025-09-17T02:15:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 150,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "0744e1781817a6614e8c8b4cacb6f8ce62412ac2209daf3d",
      "rcode": "NOERROR",
      "answer_bytes": 396,
      "queried_at": "2025-09-16T01:04:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 151,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "a2eb401c75483a4cadfe996ac848fc2e342953a148bde360",
      "rcode": "NOERROR",
      "answer_bytes": 353,
      "queried_at": "2025-09-17T06:44:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 152,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "eafc055256ae05ad378eb3ffcc0af062eaa20883a1ef411b",
      "rcode": "NOERROR",
      "answer_bytes": 95,
      "queried_at": "2025-09-16T07:18:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 153,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "1d1732a995fc49323f443f885dd64248707498475f13d23e",
      "rcode": "SERVFAIL",
      "answer_bytes": 497,
      "queried_at": "2025-09-15T16:48:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 154,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "939710c479fa5d56e0fb2372533ad3bafd845c2530402a66",
      "rcode": "NOERROR",
      "answer_bytes": 197,
      "queried_at": "2025-09-16T12:51:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 155,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "7aedccc18e884c364bc61abe8b53b4839baec6be945194fd",
      "rcode": "NOERROR",
      "answer_bytes": 223,
      "queried_at": "2025-09-17T06:44:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 156,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "0c86512e74e2a5a1ecff92f68c8ef80870646a8d2fec0480",
      "rcode": "NXDOMAIN",
      "answer_bytes": 268,
      "queried_at": "2025-09-16T10:30:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 157,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "28c857e2da1bc2e9a6b159f0018d8697bb5a723a16a3284f",
      "rcode": "NOERROR",
      "answer_bytes": 484,
      "queried_at": "2025-09-17T03:09:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 158,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "b2313a01d628d9f64236228253329e4989b93780197ca5f3",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-16T01:05:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 159,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "080979478f277a720b76bb816a397bb3b7c65ab90a3efe71",
      "rcode": "NOERROR",
      "answer_bytes": 213,
      "queried_at": "2025-09-16T07:18:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 160,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "3ba615547adaba16f582b9575f54d16644fe222fc6f51edd",
      "rcode": "NOERROR",
      "answer_bytes": 449,
      "queried_at": "2025-09-15T18:52:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 161,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "8267acbdd3d49c4187283386de4ac08cf9478bf422f86a21",
      "rcode": "NOERROR",
      "answer_bytes": 377,
      "queried_at": "2025-09-16T01:05:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 162,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "af6b55527623e957edca9b271979b7c7d3eb2ee380ae7e8c",
      "rcode": "NOERROR",
      "answer_bytes": 506,
      "queried_at": "2025-09-16T01:21:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 163,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "0033474b27f1fcd351c74fe8a7a0859057c977e73c5e53c1",
      "rcode": "NOERROR",
      "answer_bytes": 449,
      "queried_at": "2025-09-15T16:48:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 164,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "3de7481502a5fa330f4be589e013d345b033a6fe4bd0f105",
      "rcode": "NOERROR",
      "answer_bytes": 403,
      "queried_at": "2025-09-16T01:05:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 165,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "40782a7fee0e596419a97766b250f3ff558e87a2585ecf8e",
      "rcode": "NXDOMAIN",
      "answer_bytes": 335,
      "queried_at": "2025-09-17T06:44:14Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 166,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "e15cee3a9414b07aedf68f9414e2f9e37119c66b4f4e537d",
      "rcode": "NOERROR",
      "answer_bytes": 489,
      "queried_at": "2025-09-16T01:21:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 167,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "743d1ff89056a6e80d4295b6a1ab1e8f6c923e35686f23be",
      "rcode": "NOERROR",
      "answer_bytes": 386,
      "queried_at": "2025-09-16T05:44:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 168,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "6635aac63e644be78529206137662d715528855a4d2f0ed9",
      "rcode": "NOERROR",
      "answer_bytes": 179,
      "queried_at": "2025-09-15T18:52:48Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 169,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "09e7e4a0f65707d7976454d4357812c8115758aa565c413b",
      "rcode": "NOERROR",
      "answer_bytes": 461,
      "queried_at": "2025-09-16T05:44:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 170,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "4877bdafdb57a6f63d9ebd229a048179ee379b29d046fd60",
      "rcode": "NOERROR",
      "answer_bytes": 474,
      "queried_at": "2025-09-17T02:15:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 171,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "73e15f4b1b49469f96cf09f74b98bd6a33dec9c2c3a8a713",
      "rcode": "NOERROR",
      "answer_bytes": 507,
      "queried_at": "2025-09-16T07:18:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 172,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "12f3f4c3a9fc4d7bc2c9f43f8159716fcc7fc28ec5332a78",
      "rcode": "NOERROR",
      "answer_bytes": 178,
      "queried_at": "2025-09-15T16:48:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 173,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "bc5347dac096bcef4dd7f7192af8ec2d4d7c57308c06abb6",
      "rcode": "NOERROR",
      "answer_bytes": 263,
      "queried_at": "2025-09-17T03:10:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 174,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "375d4abf8f51bee9da76e057ee076cbf15eb88c1bf756907",
      "rcode": "NOERROR",
      "answer_bytes": 208,
      "queried_at": "2025-09-15T18:52:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 175,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "981e3bbea40ecc9c5dd2fa23f4e0c22e907f960e22ad267f",
      "rcode": "NOERROR",
      "answer_bytes": 486,
      "queried_at": "2025-09-16T10:30:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 176,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "934225614ae5cab24324693cf26ff2fb5ed9441557058307",
      "rcode": "NOERROR",
      "answer_bytes": 434,
      "queried_at": "2025-09-16T05:44:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 177,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "c7e1f47892cc69926ef526d58e21b25550e8bdf84b6753ba",
      "rcode": "SERVFAIL",
      "answer_bytes": 185,
      "queried_at": "2025-09-15T16:48:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 178,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "848d5cfabba61375da1e609ac641ce35b8ad4a1cc667c241",
      "rcode": "NOERROR",
      "answer_bytes": 493,
      "queried_at": "2025-09-16T01:21:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 179,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "caf1f3192a62e7ad89083ede1d559ca236297cf5a85e520a",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T12:51:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 180,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "5ae39bdab3b8e9af64ba4b2febc7e897284978cda20a7bd6",
      "rcode": "NOERROR",
      "answer_bytes": 487,
      "queried_at": "2025-09-16T12:51:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 181,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "246bee0d73db27c8852d6dab84712f0c613184315bbb622d",
      "rcode": "NOERROR",
      "answer_bytes": 394,
      "queried_at": "2025-09-15T18:52:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 182,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "d0c5baaad653a51f87ab13899533be207f60122a7f75f7b9",
      "rcode": "NOERROR",
      "answer_bytes": 482,
      "queried_at": "2025-09-16T01:21:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 183,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "3e8fb09adb5f32ccee5567a90b2cf77074005cc8cf038c6b",
      "rcode": "NXDOMAIN",
      "answer_bytes": 462,
      "queried_at": "2025-09-16T10:30:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 184,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "9eb317d24ea7a23c7ce02166e5d34d5bc0a21e437cc1a1b4",
      "rcode": "NOERROR",
      "answer_bytes": 455,
      "queried_at": "2025-09-16T10:30:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 185,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "af0da14533bfccc8ba6667bafec032ec109d3adbd702feda",
      "rcode": "NOERROR",
      "answer_bytes": 365,
      "queried_at": "2025-09-17T03:10:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 186,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "4fb8043187b7b993840c0bf74e3b535e373f6005037aedd9",
      "rcode": "NOERROR",
      "answer_bytes": 339,
      "queried_at": "2025-09-16T07:18:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 187,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "71d94aa3824ef793701152d045b8fe463236d93f865f527e",
      "rcode": "SERVFAIL",
      "answer_bytes": 213,
      "queried_at": "2025-09-17T09:42:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 188,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "0204a42678497666408a967c03240a5f5847b3dc28752e3e",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-15T18:52:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 189,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "a91a5fb7836f2d80cd0792befb1a11d992b5a7daef8790f2",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-17T02:15:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 190,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "c17268a8fe468e2458980449c8e8700611da72079af75850",
      "rcode": "NOERROR",
      "answer_bytes": 494,
      "queried_at": "2025-09-17T02:15:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 191,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "a9846f2645ea583021c32bc507a22c495fc5c21171b0ccec",
      "rcode": "NOERROR",
      "answer_bytes": 434,
      "queried_at": "2025-09-17T09:42:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 192,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "747576295f1e7ec7d51c2415e7b4e24864c3c031547189d0",
      "rcode": "NOERROR",
      "answer_bytes": 417,
      "queried_at": "2025-09-16T01:05:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 193,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "1f74f70290afa602a14fa544f28720a982eb41d3ea284f45",
      "rcode": "NOERROR",
      "answer_bytes": 362,
      "queried_at": "2025-09-16T01:05:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 194,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "adbd3ff9eee0b822648649b85a5a97d9bd2a9abc7b83fbef",
      "rcode": "NOERROR",
      "answer_bytes": 147,
      "queried_at": "2025-09-17T09:43:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 195,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "c1aea30297f90408d1cc79ade08188c07a43c29a51dd3165",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-16T01:05:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 196,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "04121010f364e8827e91f6224985fc8a06379a27225c950a",
      "rcode": "NOERROR",
      "answer_bytes": 430,
      "queried_at": "2025-09-16T10:30:14Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 197,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "100086a197de918822df231f67ccbeb525e65243021f6b37",
      "rcode": "SERVFAIL",
      "answer_bytes": 72,
      "queried_at": "2025-09-16T01:05:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 198,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "9ad6c8d89096c65a458883a9c1a9c9a26e3c325e866c669e",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-16T10:30:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 199,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "579c3edc74e33b26b32fdbfdd4eb305e22af6a0bd80f85f5",
      "rcode": "NOERROR",
      "answer_bytes": 494,
      "queried_at": "2025-09-15T18:53:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 200,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "e10b511516652bed953842f137d82e2349e9f33815abbf91",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T07:18:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 201,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "5f5cb7808a300f95fd394c46567570b29e5d96b63d194f52",
      "rcode": "NOERROR",
      "answer_bytes": 255,
      "queried_at": "2025-09-16T12:51:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 202,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "6559d9d531f08f542b13ef5aefa6b6faebb52c2db309f52c",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T10:30:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 203,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "5536b0cda0cdfe51d3fb19828ee2c1f18af82ed9156bbc3b",
      "rcode": "NOERROR",
      "answer_bytes": 296,
      "queried_at": "2025-09-16T10:30:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 204,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "bdc6d2a40a83d9e43e7eadb895b96d53604a19d1ca1bd725",
      "rcode": "NOERROR",
      "answer_bytes": 438,
      "queried_at": "2025-09-17T03:10:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 205,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "eb799e5d2ffdedadc6d20a68a0f2863d790db43273606d85",
      "rcode": "NOERROR",
      "answer_bytes": 500,
      "queried_at": "2025-09-17T03:10:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 206,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "809d15fc12d1c03238da549a17efa1c8e3702769bb0287f3",
      "rcode": "NOERROR",
      "answer_bytes": 453,
      "queried_at": "2025-09-17T09:43:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 207,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "dab5a2094d760a1ca953c5ab729f8e82dbc134930f2fa5e2",
      "rcode": "NOERROR",
      "answer_bytes": 399,
      "queried_at": "2025-09-17T02:16:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 208,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "2e9e1fd530e3d4e0fcadfc4763fa730f74a0148695e71887",
      "rcode": "NOERROR",
      "answer_bytes": 428,
      "queried_at": "2025-09-17T09:43:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 209,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "451d6e487ddc7e45ed511c7577e1a5e09d59e04bebcf451e",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T01:21:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 210,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "5cfd9ee6355253f537cdc7369859ea290f285daf85dc1a29",
      "rcode": "NOERROR",
      "answer_bytes": 373,
      "queried_at": "2025-09-16T07:18:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 211,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "39ab6c5563773b5aa12d0c6669bccb695afe8c5afe2a55c0",
      "rcode": "NOERROR",
      "answer_bytes": 352,
      "queried_at": "2025-09-16T01:21:21Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 212,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "08e1699b6a6ff983d87e6021fb3fa4e02b8080b10bc2d4c4",
      "rcode": "NOERROR",
      "answer_bytes": 321,
      "queried_at": "2025-09-16T01:05:26Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 213,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "5c4991c4d8a78074ae7083c60b009f0f8210e220f46f1ab8",
      "rcode": "NOERROR",
      "answer_bytes": 396,
      "queried_at": "2025-09-16T12:51:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 214,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "8a8f5422dd6cd1ca8760ee1f4b67578bea1f953731aaae40",
      "rcode": "NOERROR",
      "answer_bytes": 466,
      "queried_at": "2025-09-15T18:53:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 215,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "1ea24ab6c9d3afbb067e8cbe11597ca29b32982da7eb0855",
      "rcode": "NOERROR",
      "answer_bytes": 413,
      "queried_at": "2025-09-16T01:21:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 216,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "419df2e180f24549196c9aa9176735e1f2f2083da6cee1e7",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-17T06:44:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 217,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "e782a1f2d0c94b60bb5f90d6c8b68d9b8e5a8606273dd762",
      "rcode": "NOERROR",
      "answer_bytes": 340,
      "queried_at": "2025-09-17T09:43:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 218,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "20939fb0d3902016ac1f57ff14f2875f9fa2df54dedf041b",
      "rcode": "NOERROR",
      "answer_bytes": 208,
      "queried_at": "2025-09-16T05:44:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 219,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "754a9c3ea69db22bd2e795643b9756ac5bb6f3ac97bb7e9e",
      "rcode": "NOERROR",
      "answer_bytes": 476,
      "queried_at": "2025-09-17T02:16:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 220,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "75433fb35e52b00f2ecce7601b5cc06e8bcec15ff19f2725",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-16T05:44:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 221,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "d40295278515841fae0b460557627d98e19d310e8ef5e0b4",
      "rcode": "NOERROR",
      "answer_bytes": 74,
      "queried_at": "2025-09-15T18:53:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 222,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "3a30f9246e9de31b35c2a99c29492e237e524f2475d933d7",
      "rcode": "NOERROR",
      "answer_bytes": 253,
      "queried_at": "2025-09-16T10:30:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 223,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "e1f50ce33bfa9acfdfa4cb4f0ca544358d52bb3214f591a2",
      "rcode": "NOERROR",
      "answer_bytes": 335,
      "queried_at": "2025-09-17T09:43:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 224,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "53d85165599b8f12f051b0b1c8a312ccec290a3f5f2d5384",
      "rcode": "NXDOMAIN",
      "answer_bytes": 285,
      "queried_at": "2025-09-16T01:21:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 225,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "6a165e8343d00ee3c9dacf2144e9eafc7c4729ae54491c16",
      "rcode": "NXDOMAIN",
      "answer_bytes": 410,
      "queried_at": "2025-09-16T07:18:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 226,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "e8d4b6833f6fc05ad3b8b6b59b12daa1a49625a8eb1e7be1",
      "rcode": "NOERROR",
      "answer_bytes": 147,
      "queried_at": "2025-09-16T05:44:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 227,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "69003ad7671e47b492ce8fcf62012d1605996b13f894d3aa",
      "rcode": "NOERROR",
      "answer_bytes": 222,
      "queried_at": "2025-09-15T16:48:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 228,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "c225bfeb5830ae58b2ff806740e1915ba5a69723df77115d",
      "rcode": "NOERROR",
      "answer_bytes": 213,
      "queried_at": "2025-09-16T01:21:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 229,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "9e2f988c55756b2bc75e61dcca1e7a6f9037032d35a3715d",
      "rcode": "NOERROR",
      "answer_bytes": 394,
      "queried_at": "2025-09-17T06:44:21Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 230,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "8a29b272a8b15bc34158b1d401e9368f9287140363219cde",
      "rcode": "NOERROR",
      "answer_bytes": 473,
      "queried_at": "2025-09-17T06:44:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 231,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "c1c3a0a0ac588dcee0d76ebef40f7a4cdb7c2b39b2a85e13",
      "rcode": "NOERROR",
      "answer_bytes": 296,
      "queried_at": "2025-09-16T05:44:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 232,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "57cfea6dc499faac2cc20b1a8d6e0ffa48d24ba8783ece70",
      "rcode": "NOERROR",
      "answer_bytes": 473,
      "queried_at": "2025-09-16T05:44:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 233,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "ddd7387fe461d83334c7ad0b48131d2a0e3a21afb841c526",
      "rcode": "NOERROR",
      "answer_bytes": 62,
      "queried_at": "2025-09-16T01:21:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 234,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "499c80778d18bdb65da68fb6052d6d2d4c2e0b8193cc4cba",
      "rcode": "SERVFAIL",
      "answer_bytes": 421,
      "queried_at": "2025-09-16T12:51:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 235,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "36ce2a24956c22003d673929e1cc8f46bcdbb849775129be",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T07:18:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 236,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "4b0c3b10f55baa088725892ba20b8cfdc7c290a05b796a17",
      "rcode": "NOERROR",
      "answer_bytes": 133,
      "queried_at": "2025-09-16T01:21:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 237,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "3673203b9fd3dd45b2fb7fe4267f61b93c9e6a5aa8781cf5",
      "rcode": "NOERROR",
      "answer_bytes": 482,
      "queried_at": "2025-09-15T18:53:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 238,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "84197b2db7d2e27cbaa597f79a21e30e7a1b4c25bd79e5f7",
      "rcode": "NOERROR",
      "answer_bytes": 502,
      "queried_at": "2025-09-17T02:16:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 239,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "8bf47a3cc9f2ca4c05e0ba5d7daa02c4fefe9bf4f0959de3",
      "rcode": "NOERROR",
      "answer_bytes": 503,
      "queried_at": "2025-09-16T01:05:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 240,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "e3662990a7a2854969f7f8a8b5214d02f5b578f1beb08056",
      "rcode": "NOERROR",
      "answer_bytes": 442,
      "queried_at": "2025-09-16T12:51:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 241,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "0d4f447b5a4a515c847af8f99cb11a380a1838ffb515cbb9",
      "rcode": "NOERROR",
      "answer_bytes": 507,
      "queried_at": "2025-09-15T16:49:00Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 242,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "43b314435d69816beb178fdeba2b990a089f2a3a764ffa64",
      "rcode": "NOERROR",
      "answer_bytes": 350,
      "queried_at": "2025-09-17T02:16:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 243,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "b58b17e5a85505cf52a55dd1f11f066aaa0a2b7abf2880b1",
      "rcode": "NOERROR",
      "answer_bytes": 364,
      "queried_at": "2025-09-17T02:16:14Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 244,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "402a1761f1aeacb4e040f57da117f1b15c8d97409e5ba8f0",
      "rcode": "NOERROR",
      "answer_bytes": 364,
      "queried_at": "2025-09-17T02:16:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 245,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "6b8b14231516d799230549138d3391f3faa6068423072798",
      "rcode": "NOERROR",
      "answer_bytes": 493,
      "queried_at": "2025-09-17T03:10:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 246,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "a9393452418de885bf40c0868eefa9a4a642efbd4b1de4a2",
      "rcode": "NOERROR",
      "answer_bytes": 407,
      "queried_at": "2025-09-15T16:49:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 247,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "cd8a1de397c03669b2ee46f01ef92619dc4a206e78ee0232",
      "rcode": "NOERROR",
      "answer_bytes": 356,
      "queried_at": "2025-09-15T16:49:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 248,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "757fad75a711db8d572a113b0c9100c608a1f507bb68c503",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-16T10:30:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 249,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "3a03e1dd6d421b4f9ceea1bc086fda3739c78e89de0cdee4",
      "rcode": "NOERROR",
      "answer_bytes": 496,
      "queried_at": "2025-09-16T01:21:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 250,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "64f75c5ae49d8311ec671294e2c568058f1ca8f20a6ea7a5",
      "rcode": "NOERROR",
      "answer_bytes": 487,
      "queried_at": "2025-09-17T03:10:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 251,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "0a03820c10404a7bf59221b3e1e851d8d3cbfc9831f73301",
      "rcode": "NOERROR",
      "answer_bytes": 366,
      "queried_at": "2025-09-17T09:43:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 252,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "788a515179086003864e2d4de5f1c80f3e67001d585f7d13",
      "rcode": "NOERROR",
      "answer_bytes": 489,
      "queried_at": "2025-09-15T18:53:14Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 253,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "31fa13a3f0d236606a2281d84a17637a96d04facbb297bb1",
      "rcode": "NOERROR",
      "answer_bytes": 452,
      "queried_at": "2025-09-16T10:30:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 254,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "3f1a02a4813c13186493cf268ac6047e340e139b77396bdb",
      "rcode": "NOERROR",
      "answer_bytes": 499,
      "queried_at": "2025-09-16T01:21:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 255,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "e0c2ae0ad1dccdb6f1ae4ec221b9a14f96ad5cd07d370c27",
      "rcode": "NOERROR",
      "answer_bytes": 318,
      "queried_at": "2025-09-17T09:43:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 256,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "bdae8c7350cba8c641aa6ab88c16d172321ea553ed617519",
      "rcode": "NOERROR",
      "answer_bytes": 338,
      "queried_at": "2025-09-16T01:21:50Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 257,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "843f5b9f95744d1717a622506f7587e40d4b4fcc5bf9a1d6",
      "rcode": "NOERROR",
      "answer_bytes": 476,
      "queried_at": "2025-09-17T02:16:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 258,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "77abc3cd02254da7b85f4a7bcb636bf020d9253d876508ae",
      "rcode": "NOERROR",
      "answer_bytes": 412,
      "queried_at": "2025-09-16T01:05:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 259,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "b79cbfdc80bad22494efa32b171d50ef451dc7fc5cbd5b3d",
      "rcode": "NOERROR",
      "answer_bytes": 131,
      "queried_at": "2025-09-16T05:44:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 260,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "b9b26c6c651fe2b2668ee69a57fde9cf1be599e00950beca",
      "rcode": "NOERROR",
      "answer_bytes": 246,
      "queried_at": "2025-09-15T16:49:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 261,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "96aaba51d8fbe71fbea1baa7a8c278895912f70b4ce8c370",
      "rcode": "NOERROR",
      "answer_bytes": 488,
      "queried_at": "2025-09-16T01:21:51Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 262,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "891630b5306bab0775fd8a086deb454da9a035c371087d91",
      "rcode": "NOERROR",
      "answer_bytes": 103,
      "queried_at": "2025-09-16T07:18:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 263,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "48db46ce7ce6d774584a07415e2b1e9ae17ecb0a4ea58839",
      "rcode": "NOERROR",
      "answer_bytes": 160,
      "queried_at": "2025-09-15T16:49:10Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 264,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "67f18a22ad52e391bcebb001084872424af11840b9375ef9",
      "rcode": "NOERROR",
      "answer_bytes": 132,
      "queried_at": "2025-09-16T10:30:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 265,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "10c3064c3750f843e6e5a5ddba59c362260269bcf4b9e4ad",
      "rcode": "NOERROR",
      "answer_bytes": 439,
      "queried_at": "2025-09-16T10:30:40Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 266,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "32cc3522be09bd3b20fdcf4b01414639d47e762d11fc6219",
      "rcode": "NOERROR",
      "answer_bytes": 95,
      "queried_at": "2025-09-15T18:53:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 267,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "7f0a2b71393e561ef357c9a58a5e3c72a700d8a94bacc427",
      "rcode": "NOERROR",
      "answer_bytes": 237,
      "queried_at": "2025-09-16T01:05:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 268,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "876af709c009be8748dd2ef3c3886216f0aaf73f0c10b881",
      "rcode": "NOERROR",
      "answer_bytes": 432,
      "queried_at": "2025-09-17T02:16:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 269,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "3cc1988024ccd18c4a14ef610f65a2ea44c39c5e1f645e25",
      "rcode": "NOERROR",
      "answer_bytes": 505,
      "queried_at": "2025-09-16T05:44:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 270,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "a8b77e2e882bc5aa2ffd52f5dcfaaa4625101466f009d7ee",
      "rcode": "NXDOMAIN",
      "answer_bytes": 495,
      "queried_at": "2025-09-16T12:51:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 271,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "a6fe545b6f86a02570381833e3a99643198998db622277c3",
      "rcode": "NOERROR",
      "answer_bytes": 498,
      "queried_at": "2025-09-16T07:18:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 272,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "2508901a2693e1c88b0a7c428de7fef7afb3e2136d49848e",
      "rcode": "NOERROR",
      "answer_bytes": 197,
      "queried_at": "2025-09-16T10:30:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 273,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "37cf1f104115009cc5096db1552085fa0f4cb108495701c0",
      "rcode": "NOERROR",
      "answer_bytes": 466,
      "queried_at": "2025-09-17T03:10:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 274,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "26f56e0bd2407956513550794fb335d0b90a3c86f80fa971",
      "rcode": "NOERROR",
      "answer_bytes": 454,
      "queried_at": "2025-09-16T01:05:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 275,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "3609e87d1e344ff422022c1f3d9e5be336121ae3590ab6da",
      "rcode": "NXDOMAIN",
      "answer_bytes": 207,
      "queried_at": "2025-09-16T07:18:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 276,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "80d94e069e6d311a167c3e239d2e2cd59f7019dd97458bfe",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T01:05:37Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 277,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "d3558791a67253d9ea37d45b637c6ef55b9c2dda553771f8",
      "rcode": "NOERROR",
      "answer_bytes": 444,
      "queried_at": "2025-09-16T01:21:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 278,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "864d64cfd07eaf06c070b3848539eea20ebbba81137bd0be",
      "rcode": "NXDOMAIN",
      "answer_bytes": 491,
      "queried_at": "2025-09-17T02:16:26Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 279,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "d9684af4fa937f81300be56f5bdacf79abc6c3000a5f72e9",
      "rcode": "NOERROR",
      "answer_bytes": 194,
      "queried_at": "2025-09-17T09:43:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 280,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "6088083b24f4eb3da064f551c41699d86387d86e9fedc210",
      "rcode": "NOERROR",
      "answer_bytes": 389,
      "queried_at": "2025-09-16T12:51:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 281,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "9ce875893875006fb3e42bb7064e61b20798042f1b442361",
      "rcode": "NOERROR",
      "answer_bytes": 463,
      "queried_at": "2025-09-16T07:18:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 282,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "eac4effa23d8557016b43df31e633a167da1116efa2eec70",
      "rcode": "NOERROR",
      "answer_bytes": 463,
      "queried_at": "2025-09-16T12:51:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 283,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "80344d257d758610b4e83c75237a153ca79ff9416c38257e",
      "rcode": "NOERROR",
      "answer_bytes": 151,
      "queried_at": "2025-09-17T02:16:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 284,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "fed5c7de1d627eb1cb03591a1b5887ed70f14e496f797f19",
      "rcode": "NOERROR",
      "answer_bytes": 501,
      "queried_at": "2025-09-16T10:30:44Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 285,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "d4421400816d4e09a229f5d09789b8e478739351fec258ff",
      "rcode": "NOERROR",
      "answer_bytes": 255,
      "queried_at": "2025-09-16T05:44:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 286,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "b9afc7f72f596697cf8e4a4103e59edbd30765d42563bbd5",
      "rcode": "NXDOMAIN",
      "answer_bytes": 471,
      "queried_at": "2025-09-16T01:21:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 287,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "05f7415114777df0732919e68c879c8fa58c17a6630c7808",
      "rcode": "NOERROR",
      "answer_bytes": 407,
      "queried_at": "2025-09-16T10:30:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 288,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "e96d034b4120bc2998e2ef4ca263ddc713b8ff21706c7e67",
      "rcode": "SERVFAIL",
      "answer_bytes": 156,
      "queried_at": "2025-09-17T09:43:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 289,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "42ae73a1bcaa8bdee6d93874aed031430ac19f7bd0ff529a",
      "rcode": "NOERROR",
      "answer_bytes": 466,
      "queried_at": "2025-09-16T10:30:51Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 290,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "6cabb0d3c5c8150339396956bdcf6c032089db0c31bdc321",
      "rcode": "NOERROR",
      "answer_bytes": 107,
      "queried_at": "2025-09-16T10:30:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 291,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "40144ebec1e5eba875b71abb6167b1e3a9d1482cf7dc0df9",
      "rcode": "NOERROR",
      "answer_bytes": 363,
      "queried_at": "2025-09-16T05:44:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 292,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "e087fee03434e728b13c8d3eba8479d422d23bd46dd36c35",
      "rcode": "NOERROR",
      "answer_bytes": 163,
      "queried_at": "2025-09-16T01:21:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 293,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "d25d179f9a73eb03050e41a37288037befd36303c3c8551c",
      "rcode": "NOERROR",
      "answer_bytes": 447,
      "queried_at": "2025-09-17T02:16:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 294,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "0de794a311a6fd25a879778983f0e8151b219b3a2bfabf7e",
      "rcode": "NOERROR",
      "answer_bytes": 271,
      "queried_at": "2025-09-17T09:43:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 295,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "b2bc2f72738b2ae8d60b488c812910b86e206eb98a249db2",
      "rcode": "NOERROR",
      "answer_bytes": 184,
      "queried_at": "2025-09-16T05:44:53Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 296,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "076fa5d20ddf1d64fa20e90755b41ae779f4438a7dc3932e",
      "rcode": "NOERROR",
      "answer_bytes": 408,
      "queried_at": "2025-09-16T12:51:42Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 297,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "4f9fcad9d048ac1225d3cbc57a67b7ee93586a79e6b31cc3",
      "rcode": "NXDOMAIN",
      "answer_bytes": 489,
      "queried_at": "2025-09-15T16:49:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 298,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "05097618206af7e5bbbd6bec3af958d09f6609b5a2b14fc3",
      "rcode": "NOERROR",
      "answer_bytes": 457,
      "queried_at": "2025-09-16T05:44:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 299,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "9bedb5104d14d8b7fab1f28d6399b41e9d504e26247572df",
      "rcode": "NOERROR",
      "answer_bytes": 428,
      "queried_at": "2025-09-17T09:43:31Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 300,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "b6ecba1467b71f3c0ecc3224908364a9cf1fce70a8a80a20",
      "rcode": "NXDOMAIN",
      "answer_bytes": 422,
      "queried_at": "2025-09-16T07:19:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 301,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "46e955fc96d5348f157dc0d34a479fd7fe07293d32d308b5",
      "rcode": "NOERROR",
      "answer_bytes": 105,
      "queried_at": "2025-09-17T09:43:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 302,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "2a17268eceaf24da0e51ba0415533b54e5f33448ff53b669",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-17T02:16:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 303,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "acb906ddd10b801275d6eea4295db84f81793042fe915472",
      "rcode": "NOERROR",
      "answer_bytes": 487,
      "queried_at": "2025-09-17T09:43:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 304,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "d5dd08a00ebb7166029761b12b03f8a1339e523da3461c19",
      "rcode": "NOERROR",
      "answer_bytes": 308,
      "queried_at": "2025-09-16T07:19:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 305,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "85bbe2b5fc7b111e8a3c70e2fa9fa9dc2bd12bbe30b9d8d1",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-16T05:44:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 306,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "a8bfcc328194eb947be37d15af6f43eb559dadadb8e072a5",
      "rcode": "NOERROR",
      "answer_bytes": 355,
      "queried_at": "2025-09-16T01:21:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 307,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "b0e19dbd8f66ed04d31c7e76bb87a7fa50dd035947c797e0",
      "rcode": "NOERROR",
      "answer_bytes": 124,
      "queried_at": "2025-09-16T10:30:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 308,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "1671836179177657ae69cd4d20a27a1ed0110b10a1f61289",
      "rcode": "NOERROR",
      "answer_bytes": 81,
      "queried_at": "2025-09-16T01:05:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 309,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "d14f2d45184555bf83c9ac99e5438c1eab5b499b66dc4130",
      "rcode": "NOERROR",
      "answer_bytes": 439,
      "queried_at": "2025-09-16T01:22:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 310,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "d98f4b90e5f493c7a999ea0232c235f1d6a17e5cbca95a45",
      "rcode": "NOERROR",
      "answer_bytes": 403,
      "queried_at": "2025-09-16T01:05:40Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 311,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "f0bc683843b7bfe16d84af7d00bace6d08830598c6cd5314",
      "rcode": "NOERROR",
      "answer_bytes": 330,
      "queried_at": "2025-09-16T05:45:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 312,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "e7ef5f544736f12acaa0b6316642867a7049afa4129e9ff6",
      "rcode": "NOERROR",
      "answer_bytes": 200,
      "queried_at": "2025-09-15T16:49:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 313,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "9a32b811a0a1a9e18e1e32034c54b850ed898a507bb55117",
      "rcode": "NOERROR",
      "answer_bytes": 110,
      "queried_at": "2025-09-15T16:49:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 314,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "ebc9787e5404cb28c86858b439b6b9840d62be66c020c792",
      "rcode": "NOERROR",
      "answer_bytes": 457,
      "queried_at": "2025-09-17T02:16:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 315,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "63201d65c32f1326335567796339bd3c5ba6862b59c0f9ba",
      "rcode": "NOERROR",
      "answer_bytes": 201,
      "queried_at": "2025-09-16T01:22:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 316,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "57df5fdddab7838085835a807436fc3d3fc87dd936314f76",
      "rcode": "NOERROR",
      "answer_bytes": 153,
      "queried_at": "2025-09-15T18:53:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 317,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "23dae44dbc3d2a6a32bc35db2ab542c86a9312b578ed499a",
      "rcode": "NOERROR",
      "answer_bytes": 114,
      "queried_at": "2025-09-16T01:05:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 318,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "8e6e81359a7afd82ca02a2e7e22bac792baa227f9746bcf7",
      "rcode": "NOERROR",
      "answer_bytes": 511,
      "queried_at": "2025-09-17T09:43:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 319,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "a7c653dd8b40f8f7ff9bb49ec3474fa8eea8ba8e5270f1ad",
      "rcode": "NOERROR",
      "answer_bytes": 96,
      "queried_at": "2025-09-17T03:10:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 320,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "13c8dc7dec092df923b43fe7f7e5de30b857a1fc2cb3e9fd",
      "rcode": "NOERROR",
      "answer_bytes": 507,
      "queried_at": "2025-09-16T01:05:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 321,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "41e0cf5157a025bd521a6d06143c124cee92e81df1ce2f70",
      "rcode": "NOERROR",
      "answer_bytes": 217,
      "queried_at": "2025-09-15T18:53:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 322,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "6f50c26817e102c8aae8189d9da1909ba968167d5a58cf0f",
      "rcode": "NOERROR",
      "answer_bytes": 506,
      "queried_at": "2025-09-16T01:05:52Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 323,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "86db522221ee78e3fd60ee4dc7f805d963ab275e4d63012e",
      "rcode": "NOERROR",
      "answer_bytes": 507,
      "queried_at": "2025-09-17T06:44:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 324,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "68cac98e09e92fd6c416a17cd623e1f84130ecba2c232e7b",
      "rcode": "SERVFAIL",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T12:51:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 325,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "a18a3037259f9dbdc9b4040219e182765b27e60062bbd84f",
      "rcode": "NOERROR",
      "answer_bytes": 280,
      "queried_at": "2025-09-17T02:16:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 326,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "bbe91eb5332103b9f7615b38cec682b953f54bde4e8ae4be",
      "rcode": "NXDOMAIN",
      "answer_bytes": 145,
      "queried_at": "2025-09-16T05:45:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 327,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "bad763bf581978940d44fa127379db4e6e02d62d9e916c0a",
      "rcode": "NOERROR",
      "answer_bytes": 506,
      "queried_at": "2025-09-16T01:05:57Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 328,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "8815d86c52edb140440c7a07672c39074ba18abf5d4f4a9f",
      "rcode": "NOERROR",
      "answer_bytes": 470,
      "queried_at": "2025-09-17T02:16:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 329,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "566816b92d7621b9b0019024eb8da40a2e73946753202655",
      "rcode": "NOERROR",
      "answer_bytes": 503,
      "queried_at": "2025-09-16T05:45:05Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 330,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "9aa1e8b0c55232fd44624cf5449dcd143e1e8ada1c627df8",
      "rcode": "NOERROR",
      "answer_bytes": 332,
      "queried_at": "2025-09-16T01:22:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 331,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "709f0bd714ab9ffb7b8dcd2b270ac5674d1c21a7fa47fe13",
      "rcode": "NOERROR",
      "answer_bytes": 485,
      "queried_at": "2025-09-15T16:49:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 332,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "5ac2090620dff148265dee5c85fc718f79f2c436c32cec75",
      "rcode": "NXDOMAIN",
      "answer_bytes": 176,
      "queried_at": "2025-09-16T01:22:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 333,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "cf137cd2ebf7dc0fc0e797b4552594fa804fa4eb9632ab2f",
      "rcode": "NOERROR",
      "answer_bytes": 108,
      "queried_at": "2025-09-16T01:22:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 334,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "04257bb1ae1694a3d17a8c38a7b97e8df8e6ec011ae426b2",
      "rcode": "NOERROR",
      "answer_bytes": 459,
      "queried_at": "2025-09-17T03:10:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 335,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "4dbe915d95e631e3b6dba42c1ee94298fccc202f9e64d1c0",
      "rcode": "SERVFAIL",
      "answer_bytes": 147,
      "queried_at": "2025-09-17T02:16:51Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 336,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "9e1e7ab03776e9eafb57a14e22a2d3c38baf3ff914d1549c",
      "rcode": "NOERROR",
      "answer_bytes": 68,
      "queried_at": "2025-09-16T12:51:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 337,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "47d84edd3cb1a538371c07f98d5364676d28bdaf0c852275",
      "rcode": "NOERROR",
      "answer_bytes": 375,
      "queried_at": "2025-09-15T16:49:19Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 338,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "fdef708b45401f336f98b2246958c91e01efd4a76d66acfc",
      "rcode": "NOERROR",
      "answer_bytes": 154,
      "queried_at": "2025-09-16T07:19:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 339,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "ffed5199780715f61402c33a87631be90e25697a5466deb2",
      "rcode": "NOERROR",
      "answer_bytes": 268,
      "queried_at": "2025-09-16T12:51:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 340,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "5d417f17f882567ee15c9a5be0cb2ef1411367b87cb50519",
      "rcode": "NOERROR",
      "answer_bytes": 251,
      "queried_at": "2025-09-17T09:43:40Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 341,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "1b157c9980ae04b3b483ff31b88c3de21ffc65eb6ac71bc0",
      "rcode": "NOERROR",
      "answer_bytes": 288,
      "queried_at": "2025-09-16T05:45:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 342,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "e472b2b1e20c4498cd8cadb3bd5a0febd1a0c43cc65235f3",
      "rcode": "NOERROR",
      "answer_bytes": 183,
      "queried_at": "2025-09-17T02:16:56Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 343,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "f36fba8ea25ebd1d141da7d034a1839b8a74bda6767431aa",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-17T02:17:00Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 344,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "c9496e468ea72442fca9f610753d34de7722e295983ebe0c",
      "rcode": "NOERROR",
      "answer_bytes": 494,
      "queried_at": "2025-09-17T09:43:44Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 345,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "e411e67a81c9b9bb47298fb4fb83ebf0071621abcdbb3524",
      "rcode": "NOERROR",
      "answer_bytes": 486,
      "queried_at": "2025-09-16T01:06:02Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 346,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "c6f487e2817974b3ac2488f64e61c8271874ea87c8a652fd",
      "rcode": "NOERROR",
      "answer_bytes": 497,
      "queried_at": "2025-09-17T03:10:31Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 347,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "6d45421e976a9206a987abe3a2286105ca56e25bc86e282c",
      "rcode": "NOERROR",
      "answer_bytes": 397,
      "queried_at": "2025-09-17T06:44:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 348,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "e2d4fe620afff1b494b510dbe788148ac1823f6f7ff5adb8",
      "rcode": "NOERROR",
      "answer_bytes": 414,
      "queried_at": "2025-09-16T07:19:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 349,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "96206e493c9c8daf86dba44324ede984798105cee5ea5e01",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-17T09:43:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 350,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "53bd35a0e7940f561d5ba453e2fe475b9e036da887b7bc78",
      "rcode": "NOERROR",
      "answer_bytes": 313,
      "queried_at": "2025-09-17T06:44:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 351,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "386b34f9b4a5b5aadf3762ae0a1b7879f76c634084e973b3",
      "rcode": "NOERROR",
      "answer_bytes": 295,
      "queried_at": "2025-09-16T05:45:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 352,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "707b82d9958634844a896f021dcb7dedd79a3b0c490f9d73",
      "rcode": "NOERROR",
      "answer_bytes": 85,
      "queried_at": "2025-09-16T07:19:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 353,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "5b525d2da2466afdef202e3d3edd8e854776a544a8e129ac",
      "rcode": "NOERROR",
      "answer_bytes": 333,
      "queried_at": "2025-09-17T09:43:49Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 354,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "78dbc7d273528594c741bbcb3f44a077b3dadf3099922b7b",
      "rcode": "NXDOMAIN",
      "answer_bytes": 497,
      "queried_at": "2025-09-16T10:31:01Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 355,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "927737fcb54a958ee0bd862aff35c6bce1bfb95a7e2523ea",
      "rcode": "NOERROR",
      "answer_bytes": 73,
      "queried_at": "2025-09-16T01:22:15Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 356,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "d1b54e8aecdeda3530f45b6cecdaa8ff7d8817bc9ae0e335",
      "rcode": "NXDOMAIN",
      "answer_bytes": 511,
      "queried_at": "2025-09-16T10:31:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 357,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "cadaff222ff6e8c452a9e5f74bb9c28e456e95162b13d388",
      "rcode": "NOERROR",
      "answer_bytes": 168,
      "queried_at": "2025-09-16T01:22:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 358,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "0d1fd581a24cf995dd0e9d7bc26000e610614eef385fefe2",
      "rcode": "NXDOMAIN",
      "answer_bytes": 279,
      "queried_at": "2025-09-16T01:22:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 359,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "093888758658e36486eb4fb162a09035fedcf1520461f121",
      "rcode": "NOERROR",
      "answer_bytes": 232,
      "queried_at": "2025-09-16T10:31:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 360,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "e32c56821be76ecfd76af562ad9417543bf22bee652e22b0",
      "rcode": "NOERROR",
      "answer_bytes": 116,
      "queried_at": "2025-09-15T18:53:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 361,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "e067c4126e68052729d1d7428ba939675acb9068617b36a2",
      "rcode": "NOERROR",
      "answer_bytes": 198,
      "queried_at": "2025-09-16T01:06:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 362,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "0bc4dc0a7e5a606bb1561dece2d31256edd237d5206dc6a8",
      "rcode": "NOERROR",
      "answer_bytes": 502,
      "queried_at": "2025-09-16T10:31:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 363,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "dd209341162caf0b94384a72b3277cf7116e4177909ead72",
      "rcode": "SERVFAIL",
      "answer_bytes": 502,
      "queried_at": "2025-09-17T02:17:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 364,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "8a89c0826e028bef83619116a5258b1b07883d5e6b6a6c2b",
      "rcode": "NXDOMAIN",
      "answer_bytes": 341,
      "queried_at": "2025-09-17T02:17:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 365,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "fdf070c42f249c109b9b3dffa78f4a59209166b0575dadbe",
      "rcode": "NOERROR",
      "answer_bytes": 128,
      "queried_at": "2025-09-16T10:31:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 366,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "9b2f8170f7985ed954238b3d58b33f98b9dd84f89064443f",
      "rcode": "NOERROR",
      "answer_bytes": 492,
      "queried_at": "2025-09-17T06:44:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 367,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "215c871f21a47ec8fd699edd93efa85844dbc5b7864263b9",
      "rcode": "NOERROR",
      "answer_bytes": 335,
      "queried_at": "2025-09-17T03:10:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 368,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "411ffadf2f58e4547ba4649ce42859fdcb885466a712175a",
      "rcode": "NOERROR",
      "answer_bytes": 204,
      "queried_at": "2025-09-17T03:10:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 369,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "43215349f6bdc6cb9f94c6ac16749f0a6e32c610d309a870",
      "rcode": "NOERROR",
      "answer_bytes": 370,
      "queried_at": "2025-09-16T12:51:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 370,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "19258adf49ef0a4e005ff53c3be5d846e5f8a539662b55c5",
      "rcode": "NOERROR",
      "answer_bytes": 461,
      "queried_at": "2025-09-17T03:10:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 371,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "27a99490d3fbfbc8e3660a05cf3268e48a9ee92e41492392",
      "rcode": "NOERROR",
      "answer_bytes": 221,
      "queried_at": "2025-09-16T01:06:08Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 372,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "b2248855928ed5fa6dbbb6afaccd316de820da6649d81443",
      "rcode": "NOERROR",
      "answer_bytes": 504,
      "queried_at": "2025-09-17T09:43:54Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 373,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "800dab396edb9b38a9d28a3fc6d830d164eac7c69a9f4ae6",
      "rcode": "NXDOMAIN",
      "answer_bytes": 499,
      "queried_at": "2025-09-16T12:51:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 374,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "be61c65d1ddadc9a4e4738c04fd247d44c7061380c90752e",
      "rcode": "NOERROR",
      "answer_bytes": 171,
      "queried_at": "2025-09-16T07:19:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 375,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "97c86e00bde67583ca18d13c142e578b0ce753366c4ca7e5",
      "rcode": "NOERROR",
      "answer_bytes": 274,
      "queried_at": "2025-09-16T01:06:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 376,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "eadeabe19f264d3737dd7d84478ae50c9fccf11ea159e2af",
      "rcode": "NOERROR",
      "answer_bytes": 211,
      "queried_at": "2025-09-15T18:53:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 377,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "69484bad5dcff66d3571a84af739154ee725246553ac433e",
      "rcode": "NOERROR",
      "answer_bytes": 509,
      "queried_at": "2025-09-15T18:53:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 378,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "ea41ec11ab5eb55d4c3c4eec403cffdf56306150c367305a",
      "rcode": "NOERROR",
      "answer_bytes": 406,
      "queried_at": "2025-09-15T18:53:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 379,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "8df5d73d11891cb8d77d7d7958a7f71d9de12a71aa835a19",
      "rcode": "NOERROR",
      "answer_bytes": 450,
      "queried_at": "2025-09-15T16:49:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 380,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "f939b88d372be354b9519250e09b23d32002e2412b7267f1",
      "rcode": "NOERROR",
      "answer_bytes": 197,
      "queried_at": "2025-09-17T09:43:55Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 381,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "334e636ef1d21eea894cd702d2ca02fd2abb51aaf6ddc7f4",
      "rcode": "NOERROR",
      "answer_bytes": 264,
      "queried_at": "2025-09-17T09:43:58Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 382,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "6582a02c9cb4d3080c4ed6558661f8607f3edca185bed0ac",
      "rcode": "NOERROR",
      "answer_bytes": 493,
      "queried_at": "2025-09-15T16:49:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 383,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "d6d41dc765e54de37d4eb2619fcf9c9263cb38cf8882b141",
      "rcode": "NXDOMAIN",
      "answer_bytes": 462,
      "queried_at": "2025-09-16T01:06:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 384,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "070dbc3764c402f73d77c5b3731f2734c30bf582f79c7fb8",
      "rcode": "NOERROR",
      "answer_bytes": 353,
      "queried_at": "2025-09-17T09:44:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 385,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "2a4473e7a96db48c281678e803d1b4b4c06d3359c22ac8de",
      "rcode": "NOERROR",
      "answer_bytes": 500,
      "queried_at": "2025-09-16T10:31:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 386,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "bec28b4f861e600a6035412a82943eb0a0ca56564037bd52",
      "rcode": "NOERROR",
      "answer_bytes": 490,
      "queried_at": "2025-09-17T09:44:06Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 387,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "90b8cb890c9df9e910b4ffe5dc782242fecd4c05fb822535",
      "rcode": "NOERROR",
      "answer_bytes": 118,
      "queried_at": "2025-09-17T03:10:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 388,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "6d5a02ad9035bad24aa0655b126520e8cdb5e5df3ab9bb88",
      "rcode": "NOERROR",
      "answer_bytes": 60,
      "queried_at": "2025-09-16T05:45:09Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 389,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "8b08a1cd9e0e6da415fd20ee9c37cd17a43939d4fc461535",
      "rcode": "NXDOMAIN",
      "answer_bytes": 338,
      "queried_at": "2025-09-16T01:06:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 390,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "d40cc1ef838b51d7b351989ece90b210337208c682bd54f1",
      "rcode": "NOERROR",
      "answer_bytes": 311,
      "queried_at": "2025-09-17T09:44:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 391,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "cfcff291b31a28eb0256b87051fee420db94405cc6999d7c",
      "rcode": "NOERROR",
      "answer_bytes": 105,
      "queried_at": "2025-09-16T10:31:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 392,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "f979cf0fe369c100673d17ed7a361d50cc450e50daa4524f",
      "rcode": "NOERROR",
      "answer_bytes": 496,
      "queried_at": "2025-09-16T10:31:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 393,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "3017b2ff015bf4603a35d94b11e393d1839808b16f274f33",
      "rcode": "NOERROR",
      "answer_bytes": 159,
      "queried_at": "2025-09-17T02:17:07Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 394,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "511dea4075ff9a055e8f70c4160df9b48aecaab400de8fe9",
      "rcode": "NOERROR",
      "answer_bytes": 250,
      "queried_at": "2025-09-16T12:51:59Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 395,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "2b7bc7239f16ff225905f0c66bef98c27b775d92549dcf93",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T01:22:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 396,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "b9cbb0822273e4571906ac59a2083ad2be2f6d5c4082257c",
      "rcode": "SERVFAIL",
      "answer_bytes": 487,
      "queried_at": "2025-09-16T10:31:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 397,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "ce2f5270a9353b6d8ccfadd7fe688eb0bf7ce9d039291805",
      "rcode": "NOERROR",
      "answer_bytes": 429,
      "queried_at": "2025-09-17T09:44:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 398,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "6d568ecda1b78d0c2ad3973f28312202132974f19f514cca",
      "rcode": "NOERROR",
      "answer_bytes": 437,
      "queried_at": "2025-09-16T10:31:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 399,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "646f469b2c8a3f1bbf0be519bd3c1a8adda1da5f224979e0",
      "rcode": "NOERROR",
      "answer_bytes": 340,
      "queried_at": "2025-09-16T01:06:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 400,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "7a76a2e9f5b058873e42b8d58d1e945f72961941dcc4c0b6",
      "rcode": "NOERROR",
      "answer_bytes": 501,
      "queried_at": "2025-09-16T01:22:26Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 401,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "672548beaffae7cd9da170288a592fa07a856938213ec267",
      "rcode": "NOERROR",
      "answer_bytes": 387,
      "queried_at": "2025-09-16T05:45:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 402,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "dec73b28c29284a5b527ce15fdf0a1a3ee8093943be5419f",
      "rcode": "NOERROR",
      "answer_bytes": 193,
      "queried_at": "2025-09-16T10:31:33Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 403,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "dd5ae636bfe685ba016416420a4779b19fa50fa959fc850b",
      "rcode": "NOERROR",
      "answer_bytes": 302,
      "queried_at": "2025-09-16T01:22:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 404,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "fc017b384b5008040ab52ed7152fd961e357974da6af1ea5",
      "rcode": "NOERROR",
      "answer_bytes": 287,
      "queried_at": "2025-09-16T12:52:03Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 405,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "5d27b1c5285248ec45e45016af986184c6424161aeee4598",
      "rcode": "NOERROR",
      "answer_bytes": 346,
      "queried_at": "2025-09-16T10:31:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 406,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "6654622435433b7e2a30e2e97cc69f8364b95cdcf403d1a6",
      "rcode": "NOERROR",
      "answer_bytes": 499,
      "queried_at": "2025-09-15T16:49:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 407,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "0e4dbe31cfd6e743a5670fc0d18a4c792802ab4d4b702bfe",
      "rcode": "NXDOMAIN",
      "answer_bytes": 183,
      "queried_at": "2025-09-16T01:06:26Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 408,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "3496fbccf701d826c16b7c9750b853865acb01db7141048f",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-17T06:44:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 409,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "771bf42a0b1f4722277d09ef87b010a450413011679336fc",
      "rcode": "NXDOMAIN",
      "answer_bytes": 491,
      "queried_at": "2025-09-17T02:17:11Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 410,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "b196722980be7834bb0333393c02ca2d8b99ae359e7d5b7f",
      "rcode": "NOERROR",
      "answer_bytes": 304,
      "queried_at": "2025-09-16T01:22:29Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 411,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "8cb411838f9629157bd69d4c03870356ba98a22a8ea1df4b",
      "rcode": "NOERROR",
      "answer_bytes": 252,
      "queried_at": "2025-09-15T18:53:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 412,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "c3ded353095277612ccb972334d4c5f851d953077722da86",
      "rcode": "NOERROR",
      "answer_bytes": 430,
      "queried_at": "2025-09-16T10:31:39Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 413,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "6b4483e65cf5b50ab45343b7ac51aa66dffd51858f685d44",
      "rcode": "NOERROR",
      "answer_bytes": 304,
      "queried_at": "2025-09-16T01:06:28Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 414,
    "fields": {
      "session": 9,
      "client_id": 69,
      "client_ip": "203.0.113.132",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns47.394bb5.test",
      "encoded_label": "4d40e26559a208addf9a0b52f47bccf43e860452e24d2c11",
      "rcode": "NOERROR",
      "answer_bytes": 242,
      "queried_at": "2025-09-17T09:44:17Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 415,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "e76f2e072e2d5dc3fd45ce833041293a8a492ce0eca03f7d",
      "rcode": "NOERROR",
      "answer_bytes": 113,
      "queried_at": "2025-09-15T18:53:43Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 416,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "ae686a3ce0bbf359a54b1fcda02dbd14f2fa936b8c4bd9d1",
      "rcode": "NOERROR",
      "answer_bytes": 283,
      "queried_at": "2025-09-17T02:17:13Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 417,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "3f763b78681b91a3061b58eb7e02e64e0f1b0f79fda40ac2",
      "rcode": "NOERROR",
      "answer_bytes": 462,
      "queried_at": "2025-09-16T10:31:40Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 418,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "e4fe0f5dd34b07c72d0f517dbd527680e3bd3114851d0a9c",
      "rcode": "NXDOMAIN",
      "answer_bytes": 490,
      "queried_at": "2025-09-15T16:49:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 419,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "f85146815a89dfe9d39b2943c7720b2ae7bda7dc3b350843",
      "rcode": "NOERROR",
      "answer_bytes": 510,
      "queried_at": "2025-09-16T05:45:12Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 420,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "a9afeb343133ca5cda82f1046a46e163d33ecf7e295f7533",
      "rcode": "SERVFAIL",
      "answer_bytes": 507,
      "queried_at": "2025-09-16T01:22:30Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 421,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "6e575e2a8abac346f2eb3b811df9b919d425b8e57c3ee6b2",
      "rcode": "NOERROR",
      "answer_bytes": 359,
      "queried_at": "2025-09-17T02:17:18Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 422,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "73066823241cec0802620511bb20452f37273f6d41f4e8b0",
      "rcode": "NOERROR",
      "answer_bytes": 488,
      "queried_at": "2025-09-15T16:49:34Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 423,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "9d151f5b5fc6a414299a69a273603042c1a5558a007d00b4",
      "rcode": "NOERROR",
      "answer_bytes": 355,
      "queried_at": "2025-09-16T05:45:16Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 424,
    "fields": {
      "session": 8,
      "client_id": 63,
      "client_ip": "192.0.2.196",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns26.d57dab.test",
      "encoded_label": "4588d48b64cbd30516be49f0392d109c6cf57103397922be",
      "rcode": "NOERROR",
      "answer_bytes": 422,
      "queried_at": "2025-09-16T12:52:04Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 425,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "a4a5d976380aefa875dd7c036f77568b6e73f6f7b157bfbf",
      "rcode": "NOERROR",
      "answer_bytes": 212,
      "queried_at": "2025-09-16T01:06:31Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 426,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "93838f24b9bbf91eba0caff3c4ffae92fb42f788aaac5599",
      "rcode": "NOERROR",
      "answer_bytes": 418,
      "queried_at": "2025-09-16T01:22:35Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 427,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "29dfbf2c3c6ff0e4138208317236d1612bb3b51699e1921d",
      "rcode": "NXDOMAIN",
      "answer_bytes": 297,
      "queried_at": "2025-09-16T10:31:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 428,
    "fields": {
      "session": 4,
      "client_id": 68,
      "client_ip": "203.0.113.18",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns58.acaf2d.test",
      "encoded_label": "ade8824d8eedd536de31a02dafb1f8de01e13c459936078e",
      "rcode": "NOERROR",
      "answer_bytes": 164,
      "queried_at": "2025-09-15T18:53:47Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 429,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "09c2934cc7a62d34ca019cce8b8d564ea8262c72310928f5",
      "rcode": "SERVFAIL",
      "answer_bytes": 445,
      "queried_at": "2025-09-16T05:45:20Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 430,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "853f1acfc792a478f975cb4bd50a36fd171ebf27441b813a",
      "rcode": "NOERROR",
      "answer_bytes": 498,
      "queried_at": "2025-09-16T01:06:36Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 431,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "184d82d09e87f9473349508a16af646c40efe4cfa4bbcb15",
      "rcode": "NOERROR",
      "answer_bytes": 183,
      "queried_at": "2025-09-17T03:10:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 432,
    "fields": {
      "session": 7,
      "client_id": 72,
      "client_ip": "198.51.100.163",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns63.8c7f5b.test",
      "encoded_label": "704d6f4d6f17398943182e10de693973c0ec71ab138b3599",
      "rcode": "NOERROR",
      "answer_bytes": 379,
      "queried_at": "2025-09-16T01:22:38Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 433,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "b277e42343bf0e790984c4cfde488863f5d09f6e35927b89",
      "rcode": "NOERROR",
      "answer_bytes": 467,
      "queried_at": "2025-09-16T05:45:22Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 434,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "23d119c86423549f85559ffc5fe44af8e4384c30fa7e5e3e",
      "rcode": "NOERROR",
      "answer_bytes": 347,
      "queried_at": "2025-09-17T02:17:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 435,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "f8190123fec399cd471ef69f042873b06acb4805ae3eb307",
      "rcode": "NOERROR",
      "answer_bytes": 450,
      "queried_at": "2025-09-17T02:17:27Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 436,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "d363b7e7c59d9879a3d9b6a493847a78737aa4931aa1146e",
      "rcode": "NOERROR",
      "answer_bytes": 508,
      "queried_at": "2025-09-16T05:45:23Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 437,
    "fields": {
      "session": 2,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "txt_bulk_upload",
      "qtype": "TXT",
      "parent_domain": "ns88.b1f1b7.test",
      "encoded_label": "fe76222ad15838d592d138ea55a4630a47a887fa2fa5d546",
      "rcode": "NOERROR",
      "answer_bytes": 166,
      "queried_at": "2025-09-16T10:31:44Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 438,
    "fields": {
      "session": 6,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.6201e8.test",
      "encoded_label": "4206f344a1b81dd868cf57e923b4fe418dd0d8aab3ddd755",
      "rcode": "NOERROR",
      "answer_bytes": 68,
      "queried_at": "2025-09-17T06:44:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 439,
    "fields": {
      "session": 3,
      "client_id": 53,
      "client_ip": "192.0.2.116",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns10.76240a.test",
      "encoded_label": "c289451b79f3dd02e031248760d25e56b21345d466def9b1",
      "rcode": "NOERROR",
      "answer_bytes": 498,
      "queried_at": "2025-09-16T05:45:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 440,
    "fields": {
      "session": 5,
      "client_id": 61,
      "client_ip": "198.51.100.4",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns07.0df166.test",
      "encoded_label": "a44db1e3346bd240c5c36968d13d74cd35f1d604dd1b8761",
      "rcode": "NOERROR",
      "answer_bytes": 493,
      "queried_at": "2025-09-17T02:17:32Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 441,
    "fields": {
      "session": 1,
      "client_id": 30,
      "client_ip": "203.0.113.50",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns50.e5ce70.test",
      "encoded_label": "70d4b315b95fa656c00b00e0777c2bbc8ecfddec2747aa04",
      "rcode": "NOERROR",
      "answer_bytes": 512,
      "queried_at": "2025-09-17T03:10:46Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 442,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "1929ff59b64007563196390a2992a9a3689ad206d435edf6",
      "rcode": "NOERROR",
      "answer_bytes": 144,
      "queried_at": "2025-09-16T01:06:41Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 443,
    "fields": {
      "session": 10,
      "client_id": 45,
      "client_ip": "198.51.100.206",
      "technique": "cname_beacon",
      "qtype": "CNAME",
      "parent_domain": "ns41.e986e5.test",
      "encoded_label": "cb7a55afb75c2534ee8381871655a59a5a93d839dafd7ba9",
      "rcode": "SERVFAIL",
      "answer_bytes": 438,
      "queried_at": "2025-09-16T01:06:45Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 444,
    "fields": {
      "session": 11,
      "client_id": 75,
      "client_ip": "192.0.2.17",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns24.20dc6a.test",
      "encoded_label": "bcb661eccd52ff491f6e862320f5c9d98bcf259dc73b3fce",
      "rcode": "NOERROR",
      "answer_bytes": 233,
      "queried_at": "2025-09-16T07:19:25Z"
    }
  },
  {
    "model": "app.tunnelquery",
    "pk": 445,
    "fields": {
      "session": 12,
      "client_id": 12,
      "client_ip": "203.0.113.228",
      "technique": "null_record_channel",
      "qtype": "NULL",
      "parent_domain": "ns38.2a9b0e.test",
      "encoded_label": "679627612112169c6e773f081e9080207228557e01c1d890",
      "rcode": "NOERROR",
      "answer_bytes": 457,
      "queried_at": "2025-09-15T16:49:37Z"
    }
  }
]
