My DSL modem/router (ActionTec) I use keeps a web log. I’ve never liked the
idea of ANYone keeping track of my computer, and I DO route that log to
/dev/null. That, of course, does not mean the events are not HAPPENING,
My question: What ARE these things? I can understand ‘double.click.com’ and
such..but d.turn..choices.truse.com…i1.wp.com.. The last list listed as a
site ‘maintained’ by four DNS servers. OK..doing WHAT? It’s a 73.xxx.xxx.xxx
Anyway, there are pages..and PAGES of sites my machine accesses..and most I
would probably prefer are NOT accessed.
Although..there is a good lot of ‘leo’ stuff listed there, too. Still, how
can ‘kona.kontera.com’ matter to me?
TOO MUCH STUFF!!
Yep, surfing the web’s a complex operation these days and your browser is
busy fetching information from sites all over the internet.
The vast majority of it is for two district reasons: displaying you the
content you want and displaying the advertising that pays for it all.
I’ll show you how to determine who owns those domain names … sometimes,
that’s enough to determine what they’re up to. I’ll also run down the list of
domains that are currently involved in displaying a single page on Ask Leo!
and show you the tool I use to figure it out.
Become a Patron of Ask Leo! and go ad-free!
Who Is The Owner?
We’ll start with a tool called “whois”. That’s actually an old generic name
for a specific information seeking protocol on the internet that is used to
determine who owns a specific resource. For domains I like to use the whois
service from DomainTools.com.
The easiest is simply to do it in one step, by going to a URL constructed
from the domaintools.com whois service and the domain you’re interested in
Let’s look up ask-leo.com:
Note that the url begins with “whois.” on domaintools.com – that’s how you
access their whois service. The domain you’re looking up is simply appended to
the URL as shown above.
The resulting page will show you that I own the server, and give you a
mailing address and the telephone number of my voicemail service1. Additional pages there will give you
more information, including the “Site Overview” tab, and the “Server Stats” tab
which will tell you the IP address of Ask-leo.com and where the site is
Interpreting an Example Domain
Let’s use one of your examples. Let’s figure out what’s up with
The first step is to ignore everything except for the last two segments – in
otherwords we’ll look up “wp.com”. Anything that gets placed in front of that
is under the control and direction of whomever owns the base domain, so that’s
all we need to look up. In fact it’s all we can look up, since that’s the only
part that is registered when you actually register a domain.
The intial results aren’t very helpful, showing that the domain is
registered to “Automattic, Inc”. We could Google that, but instead I’ll look at
the “Site Profile” tab to see that the title of the site is “WordPress.com –
Get a Free Blog Here”.
So I test it out. I go to http://wp.com and am immediately redirected to wordpress.com.
In this case wp.com is most likely used in conjunction with sites that host
on wordpress.com – perhaps it’s a domain they use to put pictures or other
types of support files for sites that are hosted there.
And at some point you probably visited one of those sites causing your
browser to fetch whatever is kept there.
Now, do the same thing on “kontera.com” (remember, just the last part, no
need to include the “kona.”) and you’ll find out that they’re one of the
advertising networks I use here on Ask Leo! to keep it a free service to
But what else does an Ask Leo! page load involve? Much more than you’d
What Does That Page Reference?
To get an idea of the sheer number of items that can be referenced by
visiting a single web page, let’s analyse one.
Test is a service I use to test how many different things my pages are
loading, and how long they all take. From a website designer’s point of view
it’s a pretty darned cool service. ( NOTE: it is free, but it’s also not
speedy, and can take a little time to run.)
If you go to Web Page Test you’ll see a form where you can enter the full URL
of any page. Let’s test this URL:
After a while you’ll see what’s called a “waterfall” diagram of everything
that’s referenced by loading that page:
There’s a lot of information for people like me on that page, but what’s
interesting to you would be the list of additional files that are loaded when
displaying that page. Click on the diagram after a run at Web Page Test and
you’ll get a readable list of everything that was referenced in order to
display that page.
In my example run there were 85 different items on 35 domains associated
with 23 parent domains.
Let’s run the list of parent domains:
This one we expect – it’s where the page we’re looking at lives, and we
might assume also the source for additional resources required by that
med.askleomedia.com are two domains I use to hold resources
that don’t change often. Files stored on these domains are delivered via a
CDN or content delivery network so as to be transfered more
quickly to your machine when you view the page. I happened to set up my own,
but domains from amazon.com, akamai.com and others are often used for this same
purpose. In my case “med” stands for media, and hosts the CSS files used on
every page of Ask Leo!, and “img” stands for images and is the domain on which
all the images you see from Ask Leo! are hosted, including the logo at the top
of every page.
Aweber is the
service I use to publish my newsletter. forms.aweber.com is
where the newsletter signup form comes from,
analytics.aweber.com is analysis software that allows me to
determine what newsletter articles people actually click on and find useful,
www.aweber.com is apparently where aweber stores the button
image used in the form.
Owned by Google, doubleclick.net is a well known advertising network, and
the primary advertising network I use to keep Ask Leo! free. The three
different subdomains referenced off of doubleclick.net all provide ads, or
software related to displaying ads.
Facebook provides the “Like” widget below each article.
This is Facebooks CDN. Subdomains on it are used to
provide various resources such as button images used in the Facebook Like
Google provides a powerful analytics tool that allows me to understand
exactly how my site is used. Each page loads some analytics code directly from
Google via this domain.
I use Google’s search on every page, and pull the “Google Custom Search”
graphic from their servers, as well as the Google Plus One icon that appears at
the end of articles.
This is apparently some support code requested as part of Google
As described in
Why do some blogs have pictures next to some people’s comments?, Gravatar
is a service that allows you define a picture associated with the email address
you use whdd
Kontera is the other ad network that I contract with, once again providing
part of the revenue that keeps Ask Leo! free.
This domain appears to be involved in fetching the default gravatar.
Gravatar.com appears to be owned by the same people that own WordPress, and
thus the wp.com domain is used.
These all are or appear to be ad-related, typically involved in market
research, analysis or actual ad delivery. Some are specifically related to the
ad networks being used, and others are unique to the specific ads that were
Note that the various domains and resources used will change, probably every
time you reload a page, since the advertisements will change. This is just an
example of a single load.
85 different items on 35 domains associated with 23 parent domains.
That’s a lot of stuff! And, in fact, my pages are relatively simple – both
in design, and the number of ads and ad networks I choose to work with. Other
pages on other sites can easily load several hundred different resource before
Do I Want All This?
To quote the original question: “most I would probably prefer are NOT
Maybe, maybe not.
I made it a point above to mention that ads are what keep Ask Leo! free. In
fact, without ads Ask Leo! would simply not exist.
You can certainly use an ad blockers to prevent the ads from showing, and
all those accesses not to be made.
There’s a serious and growing concern that the use of ad-blockers is
beginning to noticeably impact the ability of free sites to stay viable.
I hate to say it, but I can envision a future where popular free sites might
need to shut down simply because so many people are blocking ads that the
revenue required to keep the site up goes away.2
So in my mind you do want it, as it’s part of what keeps large
portions of the free internet free.
Your Router Logs More Than the Web
I do have to point out that your router is, of course, logging all
internet access, not just your web browsing. I focus on web browsing
specifically because it’s responsible for so many more internet accesses of
obscure domain names than people realize.
The other concern, of course, would be the other programs running on your
PC, and malware.
To really understand everything that’s possibly being accessed from your
machine requires more extensive techniques, as outlined in
How do I see what’s happening on my machine’s network connection?
Since you have the list of domain names from your router, however, you may
be able to more easily reverse engineer what’s going on by identifying the
specific domains, as I’ve outlined above, and what they’re used for. Given that
you can make some reasonable deductions as to what kind of thigns – web
browsing or otherwise – might be responsible for the access.
If nothing else it’ll give you a great starting point and will allow you to
weed out the majority of the list.
1: For the record I can’t take questions by voicemail, and any left there
are, sadly, ignored. Please ask questions using the ask-a-question form. The number is present there
because it’s a required part of domain registration.
2: Ask Leo! is not at imminent risk, but it absolutely could
happen. Advertising revenue per visitor has been steadily declining, which
could well correspond to the increased use of ad-blocking technologies.