1. A method of monitoring network activity, the method comprising: receiving a first domain name service query from a first device at a first pseudo DNS server, the first device and a second device being associated with a same public Internet protocol address, the first pseudo DNS server does not provide domain name to IP address translation; identifying the first device as originating the domain name service query based on an identity of the first pseudo DNS server and the public Internet protocol address of the first device; transmitting a domain name service redirect message to the first device in response to the first domain name service query, the redirect message to cause the first device to send a third domain name service query to a DNS server; and crediting the first device with accessing content associated with a first domain name identified in the first domain name service query based on the first domain name service query being received at the first pseudo DNS server from the public Internet protocol address.