thielfellowship.org

.org crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2478 ms crawled 2026-05-19

US · 76.76.21.21 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

sector tech type homepage

HTML metadata

Title: Thiel Fellowship
Description: The Thiel Fellowship gives $250,000 to young people who want to build new things instead of sitting in a classroom.

Open Graph

description: The Thiel Fellowship gives $250,000 to young people who want to build new things instead of sitting in a classroom.

Technology

CDN: Vercel
CMS: Nuxt

Contact

Email

Registration

Registrar

Squarespace Domains II LLC

Created

2009-08-24

Expires

2026-08-24 96 days left

Updated

2025-08-14

Name servers

ns-cloud-a4.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a2.googledomains.com

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

MX

1 aspmx.l.google.com
10 alt4.aspmx.l.google.com
10 lt3.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=lcw2jMldtM_M64ILWBx7ml2Nisv6sOe1c3WdPr6kBNY
airtable-verification=481af592f5ca4f05a7e99723989a293c

Email authentication weak

SPF

not published

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-02 to 2026-07-01

Expires in 42 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://thielfellowship.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-F57BiF6QEmG2Sr3GL8bgwA=='; upgrade-insecure-requests;
strict-transport-security: max-age=15552000; includeSubDomains;
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: same-origin