HTTP/2 301 
server: CloudFront
date: Wed, 26 Aug 2026 20:50:09 GMT
content-length: 0
cache-control: max-age=3600
location: https://www.bankofamerica.com/
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 bd77d1e956cc066393ec0533e3914af4.cloudfront.net (CloudFront)
x-amz-cf-pop: KUL50-P1
x-amz-cf-id: qCYL0EBgDenXYo8h24JHMJvMilkcKaSpkEe-zE4E21a5rN2zGwHZlA==
strict-transport-security: max-age=31536000

HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 18 Aug 2026 00:26:19 GMT
ETag: "4f0d2-6594755eb409f"
Accept-Ranges: bytes
Content-Encoding: gzip
Cache-Control: max-age=1
Expires: Wed, 26 Aug 2026 20:49:53 GMT
X-BOA-RequestID: ao9RcLO63H3ZXAEskxUD7AAAAcQ
Content-Length: 51822
Content-Type: text/html
X-BOA-AFFINITY_COOKIE: WPID=C2S2; Domain=.bankofamerica.com; Path=/
X-Serviced-By: /sparta/homepage/dap/--6SGn2KUXtCqBLywdmdMoCQ==--Ad9Tdu4C/PLwVdcgx0oKXQ==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com glancecdn.net www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.merrilledge.com;
Date: Wed, 26 Aug 2026 20:50:09 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: FPID=b4d1a342-36d1-457b-be44-09ee788e5d2f:exp=1822337409; expires=Thu, 30-Sep-2027 20:50:09 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax
Set-Cookie: FPID_CLIENT=b4d1a342-36d1-457b-be44-09ee788e5d2f; expires=Thu, 30-Sep-2027 20:50:09 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax
Set-Cookie: akacd_BAC_eComm_www_Splash_PROD=3965230208~rv=97~id=0a1116e4ea6b192ba6ef05ae322c8a8d; path=/; Secure; SameSite=None
Set-Cookie: WPID=C2S2; Domain=.bankofamerica.com; Path=/
X-BAC-AKM-C: ON