World university web census · gap lists · Universities without HSTS · IQ · IQ report
Universities without HSTS in IQ
23 universities in IQ (48.9% of the 47 in the census list) lack HTTP Strict Transport Security header as of 2026-09-30. Who buys this: Security teams, MSPs and hosting vendors serving higher education..
The HTTPS response carried no Strict-Transport-Security header, so a first visit can still be downgraded to plain HTTP.
Free sample: 10 of 23
| Domain | Name | Country | City |
|---|---|---|---|
| ahlulbaitonline.com | Ahlulbait International University | Iraq | |
| alayen.edu.iq | Alayen University | Iraq | |
| auc-edu.org | Al Maarif University College | Iraq | |
| baghdadcollege.edu.iq | Baghdad College of Economic Sciences University | Iraq | |
| cihanuniversity.edu.iq | Cihan University | Iraq | |
| duc.edu.iq | Dijla University College | Iraq | |
| komar.edu.iq | Komar University of Science and Technology | Iraq | |
| muc.edu.iq | Al Mansour University College | Iraq | |
| nawrozuniversity.com | Nawroz University | Iraq | |
| soran.edu.iq | Soran University | Iraq |
Get the IQ file and more
- IQ only, 23 rows: 0.25 USDC.
GET https://universities.agentexchange.work/leads/no-hsts/state/IQ.csv - The whole list, 4,029 rows: 1.00 USDC.
GET https://universities.agentexchange.work/leads/no-hsts.csv - All 8 gap lists of this census: 5.00 USDC.
GET https://universities.agentexchange.work/leads/all.json
x402 on Base, paid per file, no account or key: the GET answers 402 Payment Required with the terms; an x402 client signs the USDC authorization and resends with X-PAYMENT. Columns: domain, name, type, city, state, known_domains, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title.
Get told when IQ changes
Free: the Atom feed of universities entering or leaving this list. Paid: a webhook to your https URL after each 6-hourly re-check that moves a domain on or off this list, 1.00 USDC for 30 days: POST https://universities.agentexchange.work/watch with {"callback":"https://…","list":"no-hsts"} (x402). Terms.
Other gap lists in IQ
- Universities without an accessibility statement on the homepage: 28 universities
- Universities without a privacy policy link on the homepage: 27 universities
- Universities without a security.txt: 29 universities
- Universities blocking both ChatGPT-User and Claude-User: 1 universities
- Universities answering only over plain HTTP: 5 universities
- University homepages that redirect to another domain: 4 universities
Other countries on this list
the United States (943) · Japan (361) · India (215) · Indonesia (111) · South Korea (111) · France (93) · RU (93) · TR (89) · AR (77) · Germany (77) · Brazil (75) · PK (70) · NG (69) · Mexico (65) · Malaysia (58) · BD (56) · Poland (54) · the United Kingdom (52) · Italy (50) · Canada (49) · the Philippines (48) · IR (44) · Spain (42) · PE (37) · Ukraine (37) · TH (33) · KE (32) · Romania (32) · Switzerland (27) · VN (27) · AF (25) · Australia (24) · Portugal (23) · Slovakia (23) · AZ (22) · BG (20) · Chile (20) · BO (19) · EG (18) · LK (18) · Austria (17) · Greece (17) · GH (16) · Israel (16) · SD (16) · VE (16) · DZ (14) · KZ (14) · China (13) · ET (13) · SA (13) · SV (13) · Taiwan (13) · ZW (13) · AE (12) · LV (12) · Sweden (12) · TZ (12) · UZ (12) · Hungary (11) · KH (11) · LB (11) · UG (11) · South Africa (11) · BA (10) · JO (10) · MA (10) · NP (10) · RS (10) · LY (9) · PS (9) · AL (8) · Belgium (8) · GE (8) · KG (8) · NI (8) · the Netherlands (8) · PY (8) · SO (7) · AM (6) · BH (6) · BW (6) · BY (6) · GT (6) · LT (6) · PA (6) · PR (6) · Finland (5) · HK (5) · MK (5) · MN (5) · OM (5) · SY (5) · TN (5) · YE (5) · CM (4) · EC (4) · EE (4) · Ireland (4) · MD (4) · MZ (4) · NZ (4) · SG (4) · UY (4) · AO (3) · FJ (3) · GM (3) · IS (3) · MW (3) · Norway (3) · PG (3) · XK (3) · ZM (3) · BI (2) · GN (2) · HN (2) · HT (2) · KW (2) · LU (2) · MG (2) · MM (2) · MO (2) · MT (2) · QA (2) · SC (2) · SN (2) · TJ (2) · TT (2) · VA (2) · AD (1) · BT (1) · BZ (1) · CF (1) · CO (1) · CR (1) · CV (1) · Czechia (1) · Denmark (1) · GL (1) · GP (1) · GY (1) · JM (1) · KN (1) · LA (1) · LC (1) · LI (1) · LR (1) · LS (1) · MR (1) · MU (1) · MV (1) · NA (1) · NU (1) · RE (1) · RW (1) · SI (1) · SL (1) · SM (1) · SR (1) · TC (1) · TD (1) · VG (1) · WS (1)
Membership reflects the homepage and well-known files as fetched on 2026-09-30. Data licence CC BY 4.0. Not legal advice.