firststudentinc.com

HTML metadata

Title

Home - First Student, Inc.

Description

Home First Student, Inc.

Language

en-US

Canonical

https://firststudentinc.com/

Feeds

Open Graph

url: https://firststudentinc.com/
title: Home - First Student, Inc.
locale: en_US
site name: First Student, Inc.
description: Home First Student, Inc.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Ads

Xandr

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (14)

cdn.jsdelivr.net×9
cdnjs.cloudflare.com×8
maxcdn.bootstrapcdn.com×3
cdn.cookielaw.org×2
fd.cleantalk.org×2
fonts.googleapis.com×2
stackpath.bootstrapcdn.com×2
www.google.com×2
100019245.collect.igodigital.com×1
d1b3llzbo1rqxo.cloudfront.net×1
fonts.gstatic.com×1
gmpg.org×1
secure.adnxs.com×1
www.googletagmanager.com×1

Social

Contact

Phone

166292566

Address

Registration

Registrar

Network Solutions, LLC

Created

2001-11-09

Expires

2026-11-09 174 days left

Updated

2024-09-24

Name servers

ns95.worldnic.com
ns96.worldnic.com

DNS records live

NS

ns95.worldnic.com
ns96.worldnic.com

MX

10 us-smtp-inbound-1.mimecast.com
20 us-smtp-inbound-2.mimecast.com

TXT

Show 11 TXT records

docusign=f1f5d706-83a5-471b-ade1-33943033350a
adobe-idp-site-verification=eb2b043619a63e939d538accac30fd35c1ba3fe5fbc2e047ac5bd2baadf80c17 Copy record valueCopy entire DNS record
taegis-domain-verification=8ec6d4552cb910415b1b7e2cd29c59c163c6bdde2528ef160f17d0db621340e6
ZOOM_verify_QFTYA14oYi7jjsgXkeIzGm
google-site-verification=X2JcTeT6b8odBtnTmnYj66iDPhZvwOjmPJAnEDfipOk
detectify-verification=f9dc598c7b85e446eaf64c2052e3e3f2
docusign=b9bf8252-bf4f-49d6-8d0c-126906bf387d
v=msv1 t=A0A13044-051B-477A-B4B5-FEA3F4E17430
adobe-idp-site-verification=eb2b043619a63e939d538accac30fd35c1ba3fe5fbc2e047ac5bd2baadf80c17
atlassian-domain-verification=/3SHIhVTmKOz9m7Y5OfuH5ogsWk7gBqM8fRCa42xuqfaoA/VRIEpDJpNl9YjJxiY
zscaler-verification-74411-07292025-Ti5L4xK8

Email authentication strong

SPF

v=spf1 include:_spf.salesforce.com include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:sendgrid.net include:spf.qb-feedback.com include:_spf.tivian.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:CentralITSecurity@firststudentinc.com; ruf=mailto:CentralITSecurity@firststudentinc.com; fo=1

policy: quarantine

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJmLU73EKE2BBLNKs2uMKjPUOF5OxJ9/oYgfr8qK9ozqTQxJjE6F3xhTAIUGL8nOquLpPb/h6GrXiWCKNF…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNNctv2GPeWLHKgrdhjfpt5xzfVCgZ63Gkj3uXNHb+FvJJULQzxGEhj3jl4iHrLr09D+58wxPZB8IENXyH4zKB0V…
smtpapi: TXT k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRpr…

selectors probed

Certificate (current)

E7

from 2026-04-29 to 2026-07-28

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 55/100 Checked live page: https://firststudentinc.com/

present

content-security-policy
x-content-type-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://firststudentinc.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://snap.licdn.com https://cdn.cookielaw.org https://fd.cleantalk.org https://acsbapp.com https://d1b3llzbo1rqxo.cloudfront.net https://100019245.collect.igodigital.com https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://i.icomoon.io; img-src 'self' data: https: blob:; font-src 'self' data: https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://i.icomoon.io; frame-src '