aidandattendance.com

HTML metadata

Title: VA Aid & Attendance Benefits | Department of Veterans Affairs Benefits
Description: Find out if you qualify for Department of Veterans Affairs benefits in less than 5 minutes. The benefit pays $1,558 to $2,874 monthly.
Language: en
Canonical: https://aidandattendance.com/

Open Graph

url: https://aidandattendance.com/
title: VA Aid & Attendance Benefits | Department of Veterans Affairs Benefits
locale: en_US
site name: Aid & Attendance
description: Find out if you qualify for Department of Veterans Affairs benefits in less than 5 minutes. The benefit pays $1,558 to $2,874 monthly.

Technology

Server: nginx
CMS: Next.js

Analytics

Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (2)

www.youtube.com×2
www.googletagmanager.com×1

Social

Contact

Email

info@aidandattendance.com

Phone

8006267145

Registration

Registrar

GoDaddy.com, LLC

Created

2006-10-04

Expires

2026-10-04 138 days left

Updated

2025-10-05

Name servers

ns-1231.awsdns-25.org
ns-1577.awsdns-05.co.uk
ns-53.awsdns-06.com
ns-848.awsdns-42.net

DNS records live

NS

ns-1231.awsdns-25.org
ns-1577.awsdns-05.co.uk
ns-53.awsdns-06.com
ns-848.awsdns-42.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 8 TXT records

google-site-verification=9xFd-2pwUKwYqw8XC0fqdm8xp0CZthn5sgdIwsWUT2Q
google-site-verification=CLe5Vo6fYkgAX3p8HxBNdnqS6g4v1TKjVn5GJjV0whk
google-site-verification=q77TcennsDJTb3_FHgXu12MJAtPSdC7jXqUzMdXTH3U
stripe-verification=b4e87c42ab4e369c75f90efc79f6f1c97bb01a46a8d999513f76cccf65922c81
MS=ms64740304
apple-domain-verification=B2cHX94MjZILn8k2
google-site-verification=25vKDh4yGHuDbZxXaghr7NcmE9Pr_yQkyHhWTcSdVgc
google-site-verification=7g8_LEfBlPeAIXPgfoPEMC09KmB4co69wrxilQUxZ4w

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:amazonses.com include:_spf.salesforce.com  include:spf.protection.outlook.com include:23624809.spf10.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:55f8a2c9@mxtoolbox.dmarc-report.com; ruf=mailto:55f8a2c9@forensics.dmarc-report.com; fo=1

policy: none (monitoring only)

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5a/O2X3CHJ5N9/XUwfBFOIqjizDe8eLZthbjXo8iBfuPOoEBcOFCrrmTN8Fb/ljF25P4rLseBq4qY…
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkybcC8lDTL5i9F9HwkDxiR7ThENkmO0gOB5dvgEnwg8VkdAxvyuOU0sOuNFlrjlJhl26s3bWxsmB9O…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-18 to 2026-12-18

Expires in 213 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://aidandattendance.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aidandattendance.com forms.leadgenapp.io *.cliqforms.com www.googletagmanager.com *.google-analytics.com *.googletagmanager.com cdn.jsdelivr.net unpkg.com www.google.com www.gstatic.com; img-src 'self' blob: data: *.aidandattendance.com api.leadgenapp.io p1.socds.net *.botsrv2.com www.googletagmanager.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.com.co *.gstatic.com *.doubleclick.net cdn.jsdelivr.net; font-src 'self' *.aidandattendance.com fonts.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com; frame-src 'self' *.google.com *.youtube.com blob: *.hubspot.com forms.hsforms.com botsrv2.com i.liadm.com forms.leadgenapp.io *.cliqforms.com; connect-src 'self' *.aidandattendance.com forms.leadgenapp.io api.leadgenapp.io *.cliqforms.com cdn.jsdelivr.net *.google-analytics.com analytics.google.com *.googletagmanager.com www.google.com *.google.com.co; object-src 'none'; base-uri 'self'; form-action 'self' forms.hsform
strict-transport-security: max-age=31536000; includeSubDomains; preload