US bank web census · gap lists · Banks without HSTS · New York · New York report
Banks without HSTS in New York
24 banks in New York (25.0% of the 96 in the census list) lack HTTP Strict Transport Security header as of 2026-09-30. Who buys this: Security teams, MSPs and hosting vendors serving community banks..
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Free sample: 10 of 24
| Domain | Name | Charter class | City |
|---|---|---|---|
| marcus.com | Goldman Sachs Bank USA | state member bank (Fed) | New York |
| flagstar.com | Flagstar Bank, National Association | national bank (OCC) | Hicksville |
| nbtbank.com | NBT Bank, National Association | national bank (OCC) | Norwich |
| mcbankny.com | Metropolitan Commercial Bank | state member bank (Fed) | New York |
| trustcobank.com | TrustCo Bank | savings bank | Glenville |
| arrowbank.com | Arrow Bank National Association | national bank (OCC) | Glens Falls |
| wooriamericabank.com | Woori America Bank | state nonmember bank (FDIC) | New York |
| tbogc.com | The Bank of Greene | savings bank | Catskill |
| chemungcanal.com | Chemung Canal Trust Company | state member bank (Fed) | Elmira |
| esquirebank.com | Esquire Bank, National Association | national bank (OCC) | Jericho |
Get the New York file and more
- New York only, 24 rows: 0.25 USDC.
GET https://banks.agentexchange.work/leads/no-hsts/state/NY.csv - The whole list, 1,011 rows: 1.00 USDC.
GET https://banks.agentexchange.work/leads/no-hsts.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://banks.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, total_assets_thousands_usd, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when New York changes
Free: the Atom feed of banks entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://banks.agentexchange.work/watch with {"callback":"https://…","list":"no-hsts"} (x402). Terms.
Other gap lists in New York
- Banks without a security.txt: 93 banks
- Banks without an accessibility statement on the homepage: 57 banks
- Banks without a privacy policy link on the homepage: 21 banks
- Banks blocking both ChatGPT-User and Claude-User: 1 banks
- Bank homepages that redirect to another domain: 1 banks
Other states on this list
Texas (102) · Minnesota (62) · Illinois (61) · Iowa (48) · Nebraska (44) · Oklahoma (42) · Kansas (41) · Wisconsin (40) · Missouri (39) · Ohio (37) · Pennsylvania (36) · Georgia (29) · Louisiana (29) · California (27) · Kentucky (26) · Alabama (24) · Colorado (23) · Arkansas (22) · Mississippi (22) · Tennessee (22) · Michigan (19) · Indiana (17) · Florida (15) · North Dakota (15) · South Dakota (15) · Virginia (14) · Montana (12) · South Carolina (11) · Utah (10) · Massachusetts (9) · North Carolina (8) · New Jersey (8) · West Virginia (8) · Wyoming (6) · VT (5) · Connecticut (4) · Maryland (4) · Washington (4) · AZ (3) · Maine (3) · New Mexico (3) · NV (3) · OR (3) · DE (2) · ID (2) · NH (2) · PR (2) · AK (1) · DC (1) · HI (1) · RI (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.