1. A method of monitoring network activity, the method comprising: receiving a domain name service query from a first device at a server, the first device and a second device being associated with a same public Internet protocol address; identifying the first device as originating the domain name service query based on an identity of the server; and crediting the first device with accessing content associated with a domain name identified in the domain name service query.