← All sites

El Mundo

https://www.elmundo.es · measured 2026-10-12 from GitHub servers in the US · ES

This site mainly serves readers in Spain, but it was measured from GitHub servers in the US. Sites often adapt what loads, including consent walls, to the visitor's country, so these figures may differ from what a local reader sees.
23tracking services contacted · band C
47third-party domains
255third-party requests
4.0 MBfrom third parties, 47% of 8.5 MB transferred (1.3 MB from tracking services)
16third-party cookies (64 in total)

What we measured

The page attempted 3 request(s) to private or loopback addresses. TraceGuard blocked them.
During a 12-second window with no user interaction, the page made 255 requests to 47 third-party domains (median of 3 passes).
Of 8.5 MB transferred in that window (compressed responses that finished loading), 4.0 MB (47%) came from third-party domains, 1.3 MB of it from services classified as tracking (92 requests).
23 third-party services classified as advertising, analytics, social or audience measurement were contacted before any interaction: adtrafficquality.google (Google, advertising), amazon-adsystem.com (Amazon, advertising), creativecdn.com (RTB House, advertising), criteo.com (Criteo, advertising), criteo.net (Criteo, advertising), crwdcntrl.net (Lotame, advertising), cxense.com (Piano (Cxense), advertising), doubleclick.net (Google, advertising), ebxcdn.com (Unidentified operator, analytics), facebook.com (Meta, social).
16 cookies were set by third-party domains (64 cookies in total).
The main document response did not include a Strict-Transport-Security header.
The main document response did not include a Content-Security-Policy header or meta tag.

Comparison with last week

No stable change in tracking services or third-party domains.

What each tracking service did on your computer

Counted in the browser that loaded this page, before any interaction: 23 tracking services ran 40 scripts, made 90 requests in total and set 6 cookies (6 that stay after you close the browser). We see that these things happened, not what was sent or what the service does with it afterwards. What these mean.

ServiceOperator and typeIn your browser
doubleclick.netGoogle
Advertising
ran 8 scripts in the browser; made 8 background requests to send or fetch data; loaded 4 embedded frames; loaded 1 other resource (styles, fonts, media); set 1 cookie (1 that stays after you close the browser, the longest lasting about 400 days).
cxense.comPiano (Cxense)
Advertising
ran 11 scripts in the browser; made 1 image request (often tiny “pixels”); set 1 cookie (1 that stays after you close the browser, the longest lasting about 365 days).
taboola.comTaboola
Advertising
ran 1 script in the browser; made 5 image requests (often tiny “pixels”); loaded 1 embedded frame.
googleadservices.comGoogle
Advertising
made 3 image requests (often tiny “pixels”); made 3 background requests to send or fetch data.
adtrafficquality.googleGoogle
Advertising
ran 1 script in the browser; made 2 image requests (often tiny “pixels”); made 1 background request to send or fetch data; loaded 1 embedded frame.
amazon-adsystem.comAmazon
Advertising
ran 2 scripts in the browser; made 2 background requests to send or fetch data; loaded 1 embedded frame.
newsroom.biMarfeel
Analytics
made 5 background requests to send or fetch data.
criteo.comCriteo
Advertising
made 1 background request to send or fetch data; loaded 1 embedded frame; set 2 cookies (2 that stay after you close the browser, the longest lasting about 390 days).
crwdcntrl.netLotame
Advertising
ran 1 script in the browser; made 1 background request to send or fetch data; set 2 cookies (2 that stay after you close the browser, the longest lasting about 270 days).
facebook.netMeta
Social networks
ran 2 scripts in the browser; made 1 background request to send or fetch data.
google-analytics.comGoogle
Analytics
ran 1 script in the browser; made 2 background requests to send or fetch data.
googlesyndication.comGoogle
Advertising
ran 1 script in the browser; made 1 background request to send or fetch data; loaded 1 embedded frame.
mrf.ioMarfeel
Analytics
ran 3 scripts in the browser.
ebxcdn.comUnidentified operator
Analytics
ran 1 script in the browser; made 1 background request to send or fetch data.
id5-sync.comID5
Advertising
ran 1 script in the browser; made 1 background request to send or fetch data.
pubmatic.comPubMatic
Advertising
ran 1 script in the browser; made 1 background request to send or fetch data.
creativecdn.comRTB House
Advertising
ran 1 script in the browser.
criteo.netCriteo
Advertising
ran 1 script in the browser.
facebook.comMeta
Social networks
made 1 background request to send or fetch data.
imasdk.googleapis.comGoogle
Advertising
ran 1 script in the browser.
openxcdn.netOpenX
Advertising
ran 1 script in the browser.
permutive.comPermutive
Advertising
ran 1 script in the browser.
scorecardresearch.comComscore
Audience measurement
ran 1 script in the browser.

Companies behind the tracking services

Operators as named in our list; subsidiaries are not merged. See how many sites each operator reaches.

  • Google — adtrafficquality.google, doubleclick.net, google-analytics.com, googleadservices.com, googlesyndication.com, imasdk.googleapis.com (72% of the measured sites)
  • Amazon — amazon-adsystem.com (54% of the measured sites)
  • Comscore — scorecardresearch.com (46% of the measured sites)
  • PubMatic — pubmatic.com (38% of the measured sites)
  • Criteo — criteo.com, criteo.net (36% of the measured sites)
  • OpenX — openxcdn.net (36% of the measured sites)
  • RTB House — creativecdn.com (36% of the measured sites)
  • ID5 — id5-sync.com (31% of the measured sites)
  • Permutive — permutive.com (31% of the measured sites)
  • Lotame — crwdcntrl.net (28% of the measured sites)
  • Marfeel — mrf.io, newsroom.bi (28% of the measured sites)
  • Taboola — taboola.com (28% of the measured sites)
  • Meta — facebook.com, facebook.net (21% of the measured sites)
  • Piano (Cxense) — cxense.com (18% of the measured sites)
  • Unidentified operator — ebxcdn.com (18% of the measured sites)

Third-party domains

Only changes seen in most passes count as stable. “Unclassified” means the domain is not in our list, not that it is harmless.

DomainServiceCategoryPasses seen
adtrafficquality.googleGoogleAdvertising3/3
amazon-adsystem.comAmazonAdvertising3/3
creativecdn.comRTB HouseAdvertising3/3
criteo.comCriteoAdvertising3/3
criteo.netCriteoAdvertising3/3
crwdcntrl.netLotameAdvertising3/3
cxense.comPiano (Cxense)Advertising3/3
doubleclick.netGoogleAdvertising3/3
ebxcdn.comUnidentified operatorAnalytics3/3
facebook.comMetaSocial networks3/3
facebook.netMetaSocial networks3/3
google-analytics.comGoogleAnalytics3/3
googleadservices.comGoogleAdvertising3/3
googleapis.comGoogleAdvertising3/3
googlesyndication.comGoogleAdvertising3/3
googletagmanager.comGoogleTag managers3/3
id5-sync.comID5Advertising3/3
mrf.ioMarfeelAnalytics3/3
newsroom.biMarfeelAnalytics3/3
openxcdn.netOpenXAdvertising3/3
permutive.comPermutiveAdvertising3/3
piano.ioPianoPaywalls and subscriptions3/3
pubmatic.comPubMaticAdvertising3/3
scorecardresearch.comComscoreAudience measurement3/3
taboola.comTaboolaAdvertising3/3
tinypass.comPianoPaywalls and subscriptions3/3
tiqcdn.comTealiumTag managers3/3
cloudflare.comUnclassified3/3
fusion-platform.comUnclassified3/3
google.comUnclassified3/3
gstatic.comUnclassified3/3
im-apps.netUnclassified3/3
jquery.comUnclassified3/3
jsdelivr.netUnclassified3/3
marca.comUnclassified3/3
mgaru.devUnclassified3/3
mygaru.comUnclassified3/3
ocmtag.comUnclassified3/3
ocmthood.comUnclassified3/3
privacy-center.orgUnclassified3/3
sensic.netUnclassified3/3
spadsync.comUnclassified3/3
tradedoubler.comUnclassified3/3
visualwebsiteoptimizer.comUnclassified3/3
yahoo.comUnclassified3/3
youtube.comUnclassified3/3
zeotap.comUnclassified3/3

Evolution

2026-10-09: 232026-10-12: 23

Tracking services contacted each week. Only weeks measured from the same place are plotted together.

History

DateMeasured fromStatusTracking services
2026-10-09GitHub servers in the USok23
2026-10-12GitHub servers in the USok23

Raw report: JSON