X-RAY · 17 SEPTEMBER 2026
Eight AIs on a clean PC: which services each one looks up as soon as you open it
ChatGPT, Gemini, Copilot, Perplexity, Grok, DeepSeek, Meta AI and Mistral, opened one by one in a freshly installed Chrome on a Windows 11 PC, no account and nothing typed, 20 seconds each, with GUARDIANA recording every name their page made the machine ask for. Opening a landing page alone makes the machine talk to between four and nine services that are not that AI.
How to read this. GUARDIANA writes down every name the machine asks to resolve (DNS). It sees names, not content. Here each AI was opened alone, in a clean browser with no account, and measured from the inside; what is counted is the names its page asked for, and whatever other apps on the test PC resolved during that time is left out. This is the landing page: what happens in conversation, signed in, is in the signed-in x-ray.
The record
- Date: 17 September 2026 (Bogotá time): 11:28 to 11:32 for the first ones and 14:13 to 14:19 for the rest.
- Machine: a Windows 11 test PC with its DNS pointing at GUARDIANA 0.2.3 on the machine itself (with the router as fallback). Only this machine’s own queries and the names each page asked for are counted.
- Browser: Google Chrome 152.0.7977.84 with a profile created fresh for each AI, default settings, no account, no scrolling; measured from the inside (DevTools). Windows’ name cache was emptied beforehand.
- Each page opened by itself: 20 seconds to load and 15 of waiting at the end. Nobody typed anything into any of the eight.
- When counting “third-party services”, the names Chrome itself asks for are left out (updates, safety lists and its new-tab page); on Gemini, which is Google’s, several of those would also be its own.
- Claude is not measured here. GUARDIANA is built with its help, and measuring whoever helps you is not an independent measurement: it is left out by rule, before the result is known, not because of what it gave.
- Made by GUARDIANA in Cartagena de Indias. None of the eight companies took part.
Scoreboard
How many services that are not that AI its landing page makes the machine ask for, in 20 seconds, with no account and nothing typed. They may belong to the same company or group as the AI, or to other companies: under each figure you can see how many of each. Beside it, how many of those names are on the open advertising and tracking lists: fewer, which is why the first figure is the one that counts.
| AI | Services besides the AI | Of those, advertising or tracking | Its own domains | Distinct names its page asked for | The fewest |
|---|---|---|---|---|---|
| Copilot | 4 1 from Microsoft, 3 from other companies | 1 | 4 | 8 | yes |
| Perplexity | 4 4 from other companies | 2 | 6 | 10 | yes |
| Gemini | 4 4 from Google | 4 | 9 | 13 | yes |
| Mistral | 5 5 from other companies | 1 | 1 | 6 | |
| Grok | 7 7 from other companies | 2 | 2 | 9 | |
| DeepSeek | 9 9 from other companies | 0 | 2 | 11 | |
| ChatGPT | not measured (see its section) | — | |||
| Meta AI | not measured (see its section) | — | |||
Tied on 4, the fewest third-party services: Copilot, Perplexity, Gemini, against 9 for the one loading most. Not being on those lists does not mean it does not track: it means the lists do not know that name. This is a result of these pages on this day, not a general verdict.
What it says
Opening an AI's landing page, with no account and without typing anything, makes the machine talk to between 4 and 9 services that are not that AI. From fewest to most: Copilot 4 (surveys, error reports and Microsoft's telemetry endpoint), Perplexity 4, Gemini 4, Mistral 5, Grok 7 and DeepSeek 9. If you look only at the open advertising and tracking lists, the picture changes and misleads: DeepSeek comes out at zero, Copilot and Mistral at one, Perplexity and Grok at two, and only Gemini at four, the only one loading advertising and audience measurement (DoubleClick, Google Analytics, Tag Manager) on its own landing page. But DeepSeek's nine names include ByteDance's measurement and device identification, and none of them is on any list: the machine looks them up all the same. That is why GUARDIANA counts names instead of trusting a list. ChatGPT and Meta AI could not be measured with this method: one did not load in three attempts and the other asks you to sign in before showing anything.
Detail
| Measure | Copilot | Perplexity | Gemini | Mistral | Grok | DeepSeek | ChatGPT | Meta AI |
|---|---|---|---|---|---|---|---|---|
| Distinct names its page asked for | 8 | 10 | 13 | 6 | 9 | 11 | 1 | 1 |
| · advertising | 0 | 1 | 4 | 1 | 1 | 0 | 0 | 0 |
| · trackers | 0 | 1 | 1 | 0 | 1 | 0 | 0 | 0 |
| · telemetry | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| · on no list that knows them | 7 | 8 | 8 | 5 | 7 | 11 | 1 | 1 |
| Advertising + trackers + telemetry | 1 | 2 | 5 | 1 | 2 | 0 | 0 | 0 |
| The site's own domains | 4 | 6 | 9 | 1 | 2 | 2 | 1 | 1 |
| Names the browser blocked | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Blocked names that reached the DNS anyway | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Services besides the AI itself | 4 | 4 | 4 | 5 | 7 | 9 | 0 | 0 |
| · from the same company or group | 1 | 0 | 4 | 0 | 0 | 0 | 0 | 0 |
| · from other companies | 3 | 4 | 0 | 5 | 7 | 9 | 0 | 0 |
| Attempts to use someone else’s encrypted DNS (the “DNS evasion” signal) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Measured from the inside (DevTools) | yes | yes | yes | yes | yes | yes | yes | yes |
Copilot
Microsoft's. Besides its own names it looks up Sprig (in-product surveys), Sentry (error reports) and browser.events.data.microsoft.com, Microsoft's telemetry endpoint, which the open lists mark as telemetry.
Services besides the AI itself (4)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
o4508134825000960.ingest.us.sentry.io· 2 queriesbrowser.events.data.microsoft.com· telemetry · 2 queriesapi.sprig.com· 2 queriescdn.sprig.com· 2 queries
Its own domains (4)
login.microsoftonline.com· 4 queriescopilot.fun· 2 queriescopilot.microsoft.com· 2 querieslogin.live.com· 4 queries
Perplexity
It talks to Datadog (browser logging), Eppo (A/B testing), Cloudflare Insights (measurement) and the Google account, for signing in.
Services besides the AI itself (4)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
accounts.google.com· 4 queriesbrowser-intake-datadoghq.com· tracker · 2 queriesstatic.cloudflareinsights.com· advertising · 2 queriesfscdn.eppo.cloud· 2 queries
Its own domains (6)
frontend-cdn.perplexity.ai· 2 queriesr2cdn.perplexity.ai· 2 queriespplx-next-static-public.perplexity.ai· 2 queriesedge.perplexity.ai· 2 querieswww.perplexity.ai· 2 queriescount.perplexity.ai· 2 queries
Gemini
It is Google’s: almost every name it asks for is Google’s, and here they count as its own. The ones that do not count as its own are Google’s too, but they are not Gemini: Google Tag Manager, Google Analytics and DoubleClick, Google’s measurement and advertising tools, which count as tracking just as on any other site. It is the only one of the eight that loads advertising and audience measurement on its own landing screen.
Services besides the AI itself (4)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
ad.doubleclick.net· advertising · 4 querieswww.googletagmanager.com· tracker · 4 queriesstats.g.doubleclick.net· advertising · 2 querieswww.google-analytics.com· advertising · 2 queries
Its own domains (9)
lh3.googleusercontent.com· 2 querieswww.google.com· 6 querieswaa-pa.clients6.google.com· 2 querieswww.google.com.co· 2 queriesgemini.gstatic.com· 2 queriesgemini.google.com· 4 queriesanalytics.google.com· 2 queriesnjl0.static.usercontent.goog· 2 queriesfonts.gstatic.com· 2 queries
Mistral
It talks to Intercom (the support chat, three names), Sentry (error reports) and Cloudflare Insights (measurement).
Services besides the AI itself (5)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
o4507101628137472.ingest.de.sentry.io· 2 queriesstatic.cloudflareinsights.com· advertising · 2 querieswidget.intercom.io· 2 queriesapi-iam.eu.intercom.io· 2 queriesjs.intercomcdn.com· 2 queries
Its own domains (1)
chat.mistral.ai· 2 queries
Grok
xAI's. It talks to OneTrust (the cookie notice and the location that decides it), Stripe (payments, three names), Google Tag Manager and Cloudflare Insights.
Services besides the AI itself (7)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
js.stripe.com· 4 queriesm.stripe.com· 2 querieswww.googletagmanager.com· tracker · 2 queriesstatic.cloudflareinsights.com· advertising · 2 queriesgeolocation.onetrust.com· 2 queriescdn.cookielaw.org· 2 queriesm.stripe.network· 2 queries
Its own domains (2)
grok.com· 2 queriescdn.grok.com· 2 queries
DeepSeek
It loads more outside services than any of the others: ByteDance's Volcano Engine (apmplus.volces.com, gator.volces.com and two CDNs, measuring performance and use), portal101.cn (two names, from a device identification and risk service), an AWS firewall, a Cloudflare check and sign-in with Apple. Not one of those names is on the open advertising and tracking lists yet — which is exactly the gap a list leaves.
Services besides the AI itself (9)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
fp-it-acc.portal101.cn· 2 queriesgator.volces.com· 2 queriesapmplus.volces.com· 2 querieschallenges.cloudflare.com· 2 queriesappleid.cdn-apple.com· 2 querieslf3-data.volccdn.com· 2 queriesapm.volccdn.com· 2 queriesstatic.portal101.cn· 2 queriesa0fea896111e.ef4f2a4f.sa-east-1.token.awswaf.com· 2 queries
Its own domains (2)
chat.deepseek.com· 2 queriesfe-static.deepseek.com· 2 queries
ChatGPT
Not comparable: in three attempts of 45 seconds the page never finished loading in a Chrome driven from outside; it asked only for its own name. In my own browser, with the account signed in, it does open (that is the signed-in x-ray of 18 September).
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (1)
chatgpt.com· 2 queries
Meta AI
Not comparable: to the browser driven from outside it answered with its own name and nothing else. Opened by hand it does load, and the first thing it shows is “Sign in to get started” — so without an account there is no screen to measure.
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (1)
www.meta.ai· 2 queries
What only a guardian on the machine sees
The browser shows the page; GUARDIANA writes down every name the page makes the machine ask for, including the ones no content blocker ever shows you:
- Outside the browser: in each window the machine also looked up between 1 and 6 services belonging to other apps. They are not published (they are the test machine’s), but in your own panel you would see them one by one, next to the phones and the TV of the house.
- Attempts to bypass the machine’s DNS (the “DNS evasion” signal): none in this test.
- And it says what escapes it: traffic over its own encrypted DNS, a VPN or a private relay does not go through the machine’s DNS. GUARDIANA flags it when it detects it and writes it into its limits; it does not promise to see a hundred per cent.
What can be claimed
- The moment their page opens, with no account and nothing typed, six of the eight AIs make the machine talk to between 4 and 9 services that are not their own: anti-robot checks, error logging, usage measurement, payments and cookie notices.
- Gemini is the only one of the eight that loads advertising and audience-measurement tools (DoubleClick, Google Analytics, Google Tag Manager) on its landing page.
- The open advertising and tracking lists miss most of these services: DeepSeek loads nine third-party names and none of them is on those lists.
- ChatGPT did not load in three attempts in an externally driven browser, and Meta AI asks you to sign in before showing anything.
What cannot be claimed
- That the machine went on to connect to those services, or that it sent anything: what is seen here is that the machine asked for the name. A connection almost always follows, but a browser also looks names up ahead of time and sometimes never uses them.
- What is sent when there is a connection, or what is written in the conversation: GUARDIANA sees names, not content.
- That an AI “spies”: these are documented sign-in, measurement, support and payment services, and the owner of each name is identified above.
- That the one loading least is the best, or that zero on the lists means zero tracking: they are names, not intentions.
- That this is what an agent working for you does: this is the web page, with no account and no task. The agent receipt, whose protocol is already published, measures that with a real task.
What you can switch off
- In any of the eight: a content blocker in the browser stops the measurement and advertising tools; the conversation with the AI keeps working.
- With GUARDIANA, any of these names is blocked from the panel the moment you point at it, with undo beside it; each AI’s own domains are better left alone, or it stops working. Blocks that reach the whole house do wait until GUARDIANA has been watching for a day.
- If you use Gemini inside your Google account, “My Activity” lets you switch off the saving of Gemini app activity.
Data and method
Full data: ocho-ia-en-un-pc-limpio-2026-09-17.csv (name, category, whether it belongs to the maker and, per AI, queries and whether its page asked for it). Method: each AI opened alone with site/src/radiografia/navegar.mjs (Chrome on Windows, empty profile, no account, no scrolling, 20 s + 15 s); names taken from the PC's GUARDIANA ledger for each time window, this machine's queries only; the tables count the names the page asked for, and when counting “third-party services” the ones Chrome itself asks for are also left out. The tools are in the program's repository (site/src/radiografia/); anyone can repeat the test with GUARDIANA installed.
Brands named as the names of their owners. If you are the maker and something here is inaccurate, write to hola@guardianagroup.com: it is corrected, with the date.
See it with any website. In the ZERO browser, the X-ray shows you who each page talks to, with no account. Enter →