{"report_id":"22f4bbed-8937-42cc-beb3-f8da8022f4bc","version":6,"status":"done","tags":[],"date":"2025-11-23T22:28:32Z","url":{"schema":"http","addr":"171.159.116.100/","fqdn":"171.159.116.100","domain":"171.159.116.100","tld":""},"ip":{"addr":"171.159.116.100","port":0,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"title":"Bank of America - Banking, Credit Cards, Loans and Merrill Investing","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"171.159.116.100/","fqdn":"171.159.116.100","domain":"171.159.116.100","tld":""},"ip":{"addr":"171.159.116.100","port":0,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T22:28:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:00Z","timestamp":1763936880,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:00.879774+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:00Z","timestamp":1763936880,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:00.980014+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:01Z","timestamp":1763936881,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:01.180223+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:01Z","timestamp":1763936881,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:01.580507+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:02Z","timestamp":1763936882,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:02.380743+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:03Z","timestamp":1763936883,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:03.981105+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:28:07Z","timestamp":1763936887,"ip_dst":{"addr":"52.208.80.187","port":3478,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.9","port":48456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-23T22:28:07.181342+0000\",\"flow_id\":226591912258718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48456,\"dest_ip\":\"52.208.80.187\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:28:00.879774+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"storage.glancecdn.net","ip":{"addr":"3.167.2.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-01-29","domain_rank":61042,"first_seen":"2022-12-02T23:11:03Z","last_seen":"2025-11-20T14:27:44.871222Z","alert_count":0,"request_count":2,"received_data":32221,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2025-11-16T22:59:57.302651Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bankofamerica.com","ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-12-28","domain_rank":9954,"first_seen":"2012-05-22T18:04:28Z","last_seen":"2025-11-18T19:57:21.567326Z","alert_count":0,"request_count":3,"received_data":332216,"sent_data":1799,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"bup.bankofamerica.com","ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":66599,"first_seen":"2021-11-04T23:40:21Z","last_seen":"2025-11-18T19:57:22.422449Z","alert_count":0,"request_count":7,"received_data":9177,"sent_data":3720,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2025-11-16T22:59:57.232912Z","alert_count":0,"request_count":11,"received_data":877281,"sent_data":5547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"boss.bankofamerica.com","ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":173622,"first_seen":"2016-08-17T17:16:20Z","last_seen":"2025-11-14T19:36:15.5796Z","alert_count":0,"request_count":5,"received_data":340878,"sent_data":15599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"171.159.116.100","ip":{"addr":"171.159.116.100","port":80,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":301076,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"F5 BigIP","description":"F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.","website":"https://www.f5.com/products/big-ip-services","common_platform_enumeration":"cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*","icon":"F5.png","categories":["Reverse proxies"]}]},{"fqdn":"www1.bac-assets.com","ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2015-02-18","domain_rank":1549896,"first_seen":"2017-02-01T14:18:03Z","last_seen":"2025-10-01T03:54:25.992065Z","alert_count":0,"request_count":45,"received_data":4796340,"sent_data":24554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"glassbox-hlx-igw.bankofamerica.com","ip":{"addr":"171.161.100.253","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":165210,"first_seen":"2020-11-10T15:36:34Z","last_seen":"2025-11-18T19:57:22.173657Z","alert_count":0,"request_count":3,"received_data":4712,"sent_data":7278,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dull.bankofamerica.com","ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":174884,"first_seen":"2016-08-17T17:16:20Z","last_seen":"2025-11-08T07:08:22.388099Z","alert_count":0,"request_count":9,"received_data":376201,"sent_data":26755,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rail.bankofamerica.com","ip":{"addr":"52.20.46.252","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":176657,"first_seen":"2019-02-14T08:31:50Z","last_seen":"2025-11-18T19:57:21.300457Z","alert_count":0,"request_count":1,"received_data":81701,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"smetrics.bankofamerica.com","ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":154841,"first_seen":"2021-05-24T13:31:46Z","last_seen":"2025-11-18T19:57:22.431783Z","alert_count":0,"request_count":18,"received_data":36689,"sent_data":46247,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aero.bankofamerica.com","ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":157859,"first_seen":"2016-08-17T17:16:20Z","last_seen":"2025-11-18T19:57:21.215226Z","alert_count":0,"request_count":4,"received_data":120574,"sent_data":16301,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"awuseb.advanced-web-analytics.com","ip":{"addr":"3.167.2.120","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-11-19","domain_rank":194900,"first_seen":"2019-09-25T07:55:07Z","last_seen":"2025-11-18T19:57:22.346805Z","alert_count":0,"request_count":1,"received_data":80360,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"secure1.bac-assets.com","ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2015-02-18","domain_rank":1623635,"first_seen":"2017-09-08T14:37:20Z","last_seen":"2025-10-01T03:54:25.286422Z","alert_count":0,"request_count":66,"received_data":12978557,"sent_data":37834,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"secure.bankofamerica.com","ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"domain_registered":"1998-12-28","domain_rank":1908,"first_seen":"2013-01-30T17:07:07Z","last_seen":"2025-11-18T19:57:22.092659Z","alert_count":0,"request_count":14,"received_data":1939453,"sent_data":11506,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]}]},{"fqdn":"tags.tiqcdn.com","ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2012-07-11","domain_rank":6802,"first_seen":"2013-01-15T05:04:26Z","last_seen":"2025-11-17T06:42:43.846221Z","alert_count":0,"request_count":8,"received_data":1039062,"sent_data":3714,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=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%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nt_gmwguappffxpm\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee4c518918fb22f0eba2a0fade2e34a5","sha1":"f5d921eaa31f13c207abcbecf31e6624a5aedf17","sha256":"38bcf9f5aa0eca86d7fbf4f4274830c68a9d1888f6c127547328479caafdb337","sha512":"47e0ea65397a266e4e56c7784c4b769c2f4b79c178e7ae8b2f8097b23b7a728c2b80b085bcc3044a30616cc3515da6443482831ec4f27d3b9f38ef7f40686306","ssdeep":"","tlshash":"74c08c5e5c188208968091cd0c2a9b69d8a7a11b8f1c48ce696a0d34aa328f4a906a66","size":156,"data":"","first_seen":"2025-11-23T22:29:02.296535Z","last_seen":"2025-11-23T22:29:02.296535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=17639368865573872","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d350fbf9b4d49ddc0ad9f3d44e5469d4","sha1":"3058983ad74720779ca8150ca0d08a332a4a6695","sha256":"f0c1b8adeea2e331050bf0b127434547a32ed2815ccfe37b246631cb0a7c62c6","sha512":"d67a5d0461c72dcfc1f226ee808485892f77d2359ed235f0af7fe36223bc4a00a5101847e9f416f745d35adecbb4577521b5eb89e768a99b6025bcdc1e9cacdf","ssdeep":"768:VQHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIK:VgfoEAw/A4nlT3jfQmW6XFfhtK","tlshash":"82c2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","size":28253,"data":"","first_seen":"2025-11-23T22:29:02.473574Z","last_seen":"2025-11-23T22:29:02.473574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/globals/prod/utag.1.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d1be9c64b93b427ebf028950514841","sha1":"5a8f5a541a06f86bb50d042dca17791cbb67c0fc","sha256":"e7863d94f68e3323f5bfdd361de8a27017cf69c776df7b933fdbb897b5771e34","sha512":"d5252cf8560d2499b4cfd3fc84532a2ac6b95abb17eea829473fba19e068e474b35d4a3987b92a446da62b15e6c941ca920fced817100ef9e7c29ea5b3877761","ssdeep":"6144:/p1qBvVbWzNYSYJFlBpvcVC1nsiTKI5QCmP1q2WCC6fQvhq:/uv9lBpv6ybqPo2yq","tlshash":"38b46dee364634770adb107690bf120962361a995c0d8090f529daea2c7dfca437bf7d","size":509962,"data":"","first_seen":"2025-11-18T19:57:41.628258Z","last_seen":"2026-02-20T15:16:03.957439Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-4b884495e6ab63432fc9.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"83d60006c994e8068fbdfdbe7877dda6","sha1":"ca248a89b57fd2265d63014bd92ae9e3f89fa64d","sha256":"3ac772edc0c9a1813f7744ef8ccceaf19894c30f857188642758f90caaf3902b","sha512":"4a28288f450561b77516dd7b677b33f0d899dae5640a5fa20ebaf607aefe84c5d57a15065628f90b0ca187d9e05b657e3a1227da59601e360326677650003c7c","ssdeep":"12288:geHNY0q5ZYdupobOKALV+gQ9oTB1KcKHCBzSdJhlOIR:gZ0uZYgpobOGoTB1KdHyEJF","tlshash":"73356bd972d0b2b653ea52f1502b1106b3392879b809c884f17dd9ca3d3a94a417ff7e","size":1086676,"data":"","first_seen":"2025-11-23T22:29:02.475796Z","last_seen":"2026-02-15T01:17:16.774676Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9513b4335e38da17f65af8dbe6e9a446","sha1":"2f06cd5955f9f0c0ab8172b1b27af5471b54eca9","sha256":"0081e15c248ae84b01ad243c5ebb36585ca045f4f195efefc5247f2e34c57844","sha512":"3e160437690312888f6dcb113683c8bafa70db3ea371370ab107c28553837c88e5cd0ecf90a573ea74395b4aa02bbf59d0f86fc742f80126ac5f196d91a8de1b","ssdeep":"","tlshash":"1cd0a9ba2fc29c2a80e37ac909ee8012906009202790c5308bab212b6c00da276bc09a","size":218,"data":"","first_seen":"2024-12-03T21:16:27.745204Z","last_seen":"2026-04-20T16:09:49.985539Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"14cc5df518bc6217950818122d466fd4","sha1":"44a5920474b02e06f81ae97a8c2987e846d5ae9b","sha256":"e977d02d91106447ae0c541904190e2c0f34ffdcb38a59a4322fdc9e042266d6","sha512":"e81d0baf716853bf4e95a4eddec48c0f03b79dca0b17d72ffdaeed48b295a4371fcf41922190850fb154983b5033e85165044d5bb9e563c1feefbe8b9a0f066f","ssdeep":"","tlshash":"f0019e80bae51e70a799675c215af400fa01850352b42e02b76ccf76dfc302a09566f5","size":666,"data":"","first_seen":"2025-09-22T15:23:50.120669Z","last_seen":"2026-02-15T01:17:16.773303Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/pHAQ?d=ZW5jZEBmdHIyeWl3LzJLQWxBeE5CYnhNd2lYSm9OZ2hFK3ptVWlZTnlCNWhQazd0UENTcmRVK2hNeW41RithYWVab0c3WlEvZmd3V2krUFBvMHIweGU3MnVsQy9DNFF1M2RqSlBNZVYvQlQxZ2VLMmxHQWt4Rk9uZ25DZktXWHdnN05xcnY3MVI4RUZ1NVBZMzBMa29vUmFTUEp0M0FzKzdPS0pZM2Zqa1RZTHlmdlplU1lraGFBK2RsYWQvRGxIb1N6OFoyMmZzTUtJOFlhaWVLbmRpcXQzQXFBcy9KMWN0dzVuUjVGQ25PV0pDNnVWRjhFeVFqLys1UXBRV0d4Zk1nbnBrT0RZTWdsSlJWUWJQYy91Z2hROFl8YTBkYzlhYzY0ZDJmNTJkZTgzNGM0NTk2OTU3ZGE1ZTdkMmQwZjY2Njg2MTBmN2RkYjJhNzM3N2NhMWZjZmVkNDIzMzAzNDEwZjEwZDVhZmU5ZDVhMzA2OGY5ZGYwZDM0NjIxYjdiOWEyMTc3NTY2YjU4MzlhZDZiOTVhZTAzOGQyNjE4ODZjMGQ0NjNlMzA1N2UwNTBiMDYwZDdjYWM3OWNhODc4ZDE1MTU4ZjllNTA3ZjAwNzMxYzM1YTJlNzMzOTY5MGFiOTU3ZjNkMDRhMTQ5ZjNhZDkyMjkxMjFlZjE1ZGYyYTE3ODE1YzdjMTk0MDYwYjVkYWY1NmIzMmVhMWQwYjY1NmIwZjJjNzAzMWVkZDQzMmU1NTkxNGJhZmRhOThjZTM1YTQ5ZmQxYzBmMTE1MzA1Zjc1ZGVhMmI3YWUyYmE4MTgwMTdlODMwY2FjMzgyZjVkOTM0MjM4Y2MzYmQ2MzEzNDNlMzNkNzEyOTQ3YWE0Yzc2YTFhZWE3ZDQ2ZDdmZGVkZGNkZTc5NGQ0YjA4MzBjNWIwN2U3ZTI1NTE3ZWM2YjUyYTIwMzEyNzBkNWQ1MzEwY2M0N2U4M2Y3N2Q3ZmI0NTA4NjQzNTA5NjhiNjI1YTAzNjM0ZWU0MGUwZDkxZDA1MGZmOWYyZjQ3MTFhMGYzZmRkNTZjYTEyOWN8MDBlZTBiNjJlY2FhYzg5Zg%3D%3D\u0026cid=15%2C28\u0026si=2\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=dyhmlgvhfrwmdgik\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96ddfdac1585abd9dabba220e55ac338","sha1":"0f82e716890942934bc1bc6685410aa18ffe5099","sha256":"cdaa1d459d6283d87442aa4881fe39035d14f6f2979c3a89b6e5af944beff97c","sha512":"6aea719459ea2447983ba5f55a1f585e524407b3bc2e2c5279151f5b71de6c066f756799e1cd933d8b978221f2e8da166cb62b398af1a078a3be6069bae39bc9","ssdeep":"","tlshash":"f5c0801e4d58d110c54050cc0d595f68c457e91b4f0c44c9555d1c1455354f4d64a473","size":166,"data":"","first_seen":"2025-11-23T22:29:02.361046Z","last_seen":"2025-11-23T22:29:02.361046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=c2d30e706a23f0133c2ed6da4bd70515166520d28571991d3907665a22665f65\u0026s=567\u0026ti=3.559\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=vgzceeqfrk_qszqp\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c18644ac903727978108aacf05397dc5","sha1":"cdbc0cc61fc6751b11d15d894c1c7f23f69640fc","sha256":"bb3007af5cfb953c5d13050cf09e0866ae5c5f867f2b11bfd8de79f94928c3dd","sha512":"8545eb88cfef4256f001cb09bb3697256d1c9b27f2de7695d70f62aac784e1ec0614c5054bd4e8bf8c18ffbec16692ee7332ca3ea9bdc50e2da7cf467295c4d3","ssdeep":"","tlshash":"61a0223e8e000330c22003880c3f28280030cb280ec820c008a03c228032030008fc83","size":70,"data":"","first_seen":"2025-11-23T22:29:02.311374Z","last_seen":"2025-11-23T22:29:02.311374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b47477de8f0f856b783e8a7f84e49a2f","sha1":"6d51dfd71051b85c6049bc8238b5d94de58395ba","sha256":"fdca79fbebe3484387b0fa7566d7ece32da32e7028c37a4fd80c3ee67dfc3dcd","sha512":"2ba20ebf490b5e7576a02164d116092642417ca314c9edb18a9442d79eebd63bb1c7d94a64dcece73a9e15739d4cb2f6b831da6d3857fdb4c54e6ee15a0ba44c","ssdeep":"1536:vQH729pKSGWiAMiT3UflrAwEDKMAzA7VK4t02qlG6vLXnSHT+glfVaQsuN+nVIfC:vQa9pKSOiT3ClEwtOVKTvLXnS9LapOqv","tlshash":"b7832ada73e7b43983b624b056ff0807b3396d535c48a455e010f4d63a78aa985bbf2c","size":81330,"data":"","first_seen":"2025-11-23T22:29:02.480565Z","last_seen":"2025-11-23T22:29:02.480565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688529757365","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d350fbf9b4d49ddc0ad9f3d44e5469d4","sha1":"3058983ad74720779ca8150ca0d08a332a4a6695","sha256":"f0c1b8adeea2e331050bf0b127434547a32ed2815ccfe37b246631cb0a7c62c6","sha512":"d67a5d0461c72dcfc1f226ee808485892f77d2359ed235f0af7fe36223bc4a00a5101847e9f416f745d35adecbb4577521b5eb89e768a99b6025bcdc1e9cacdf","ssdeep":"768:VQHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIK:VgfoEAw/A4nlT3jfQmW6XFfhtK","tlshash":"82c2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","size":28253,"data":"","first_seen":"2025-11-23T22:29:02.473574Z","last_seen":"2025-11-23T22:29:02.473574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/vendors/vue-bb2d465d2bebb533b21d.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c9b09e894a3ae8d51fed9ea8173931d","sha1":"c2a51fa77cbff970ec1c4980eaf07e2b0cc156c3","sha256":"4b2b7150b63d04a5377b0a6b204069ffe173442cf2236f122fbde4d8b87874a6","sha512":"401624d90153b2c608b3db8a0c66dddfcd92b719654eaee2e9f9ab9c491166fb656e16a80edbb74b027a153be332b7d28d7f957df5f4932d30590be5e2931c80","ssdeep":"1536:/lrzT8iVr8wCbPdxDSpWlOPQAmX6i2rdsCsMfBZNFAmzbPQbazSY09KU:dr8iVr8wCbPdxC2OPYKiQdsCfFzDQw8","tlshash":"7bd329a87582b07223ea14e210bb1016f33e18697c0d94e4f229fddb3d7651951e7fae","size":134610,"data":"","first_seen":"2025-05-25T20:05:30.742551Z","last_seen":"2026-02-02T22:49:09.281586Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=67dcdca7ff28396e53878a587166b8e8eee98c38e403768b8415c649d1852ee5\u0026s=458\u0026ti=0.362\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nfadvmtlmhdevliq\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"143b624ad989f7d699d1af5d770a4d8a","sha1":"f66c90d71251f6eb5e79d7ee0af6b8346300b645","sha256":"29cd851b45dedbbd034715e674ac22f5d545dba909fa0c1a112c0bf9c0970ace","sha512":"6a5f8404f173cd4d3b0090f37c51ac8f5b1c8fb893bf9e42f701ef1ec186aea758912b5f0bdd829ab6ad57f9781b56f7e2dbb2674cfb096be2716ad26de6cb92","ssdeep":"","tlshash":"5ca0223e20080320e20000808ebf383a8033c33ccf8802c00c203c808e32030a00bcc2","size":70,"data":"","first_seen":"2025-11-23T22:29:02.309605Z","last_seen":"2025-11-23T22:29:02.309605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20afceac79b85d13f825bd3c95508d46","sha1":"465932e9a1163692fbd996731d880694a84ba8d4","sha256":"d107e8acbe7a880e3cef0fc1f99066ad3153bd595640f160489a23d7c265c1b1","sha512":"94ac486c6b6a7917ab345ef27288ca215387ec5baf36b4d220ade9dfd21219d1477da424ca23cda23e598b2aed6ea93a5cba5fa67d30e78ab570a7a6fe7d57b4","ssdeep":"","tlshash":"7f5152f62f6433208ab901ebb513310e94ad5c4a3acb8099e308ce9dbd93243d5f12b5","size":2932,"data":"","first_seen":"2025-09-11T03:39:38.413648Z","last_seen":"2025-12-27T18:14:53.855173Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=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%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=xfnxwmamkmnpxqph\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a010624e874aba46d2f773fd5696e8","sha1":"a1e41b7cddcc6ae8925e505af5f76cc73f791599","sha256":"bc92b368ca01e50598c49846526267de4ce513629b7436676720417bb493e04f","sha512":"6768ae49f508e6921d37a2a24a8653a15d4370c68de3d09f2d0a66f8d92adce8c07ab6afc3c09f92f1d4ed29bc738525d6c8d1522524a5881dcc6bcc39da8c55","ssdeep":"","tlshash":"37c0809d4d1483149540508d4c5a8e95c567d51f4e0c44cd69591c1455314b4d506991","size":156,"data":"","first_seen":"2025-11-23T22:29:02.458293Z","last_seen":"2025-11-23T22:29:02.458293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=d87fa48b0719da8a8bd1f42810f6de5e7fc753d992b9bbc78d63d0204e1056a2\u0026s=677\u0026ti=5.57\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=wtdxwqhigyykpinx\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0eb1c4372c577e9a104a5d8f1cc0bb5","sha1":"1cfcea723d0f1c421c1054f47e2a1f95f388fef0","sha256":"520b3bd84187486ce044731bc9419912ca9bf645b91cf0d69874d546726335cf","sha512":"a32222ccaffbe460a6ad75d84455bc40b0008709a0ce0a3d3ed5aa9e1cddc7bc08a969ca7d3cb91c6108b7f6e6652958b5ba654e978e4a227358f661d89d3f21","ssdeep":"","tlshash":"62a0223f000f0220c00002820ebf082e0830cb2a0e8820c08a003c20f23a030022fc82","size":70,"data":"","first_seen":"2025-11-23T22:29:02.221845Z","last_seen":"2025-11-23T22:29:02.221845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688692288799","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d350fbf9b4d49ddc0ad9f3d44e5469d4","sha1":"3058983ad74720779ca8150ca0d08a332a4a6695","sha256":"f0c1b8adeea2e331050bf0b127434547a32ed2815ccfe37b246631cb0a7c62c6","sha512":"d67a5d0461c72dcfc1f226ee808485892f77d2359ed235f0af7fe36223bc4a00a5101847e9f416f745d35adecbb4577521b5eb89e768a99b6025bcdc1e9cacdf","ssdeep":"768:VQHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIK:VgfoEAw/A4nlT3jfQmW6XFfhtK","tlshash":"82c2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","size":28253,"data":"","first_seen":"2025-11-23T22:29:02.473574Z","last_seen":"2025-11-23T22:29:02.473574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7d2f22239885304323e38dfff3e4b5b","sha1":"af7e0e6610c9deaaa0a66e1b20e8cd9d7ff87f47","sha256":"b93021dc0ff24c1fec0a3e94d913507392eacd0241d3a4185c5ff70592b15fd4","sha512":"c8a63eb6eac2a99afcd42b91782ab0b516bffaf197ec497c465e77bd1b0151e2a6e2c26e79511fd919cc4b7430b99fa83c8af87580a5cdcb23b8be4eac2a013b","ssdeep":"","tlshash":"f8d0a7ae700c466553fd511d7257b76c357241423564a122503ec4847529e4b4276acf","size":236,"data":"","first_seen":"2024-06-12T19:11:33Z","last_seen":"2026-05-01T18:56:55.133023Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-es6-page-8e3ff0a4a2caffa97491.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a403bae92208947efe22a8e84cc1ee30","sha1":"2f405ff2ae335cecc909bf88d4ca195ce4ccec3f","sha256":"6cbb3f083624af37807723ed5ecbd9cfc0d3310890ab3cc983bdd02ab8f8de86","sha512":"71db2570eebe56cf9fbc45b3e74dab2488474a2bb7a990dd296ea46c248a461c52017ab4f6255038dd5e47fe9fdae9c982e907e28f5c4b0f1fa7c8ac48265a30","ssdeep":"192:Mb+ESFrG0HExS4GnGt4E4G4Jy4JY4S444/414h474i4I4o4aGVGPG8GuG5GDGJGF:q+EgGaVzJPJ5vZAyOs/pJd8O/BwyACZK","tlshash":"38e1b0acb9a2246d187ca87bf23b7d47237444eaac8e46d0651d22cd1a4f74ba1311bd","size":7003,"data":"","first_seen":"2025-11-23T22:29:02.471752Z","last_seen":"2026-02-15T01:17:16.637208Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"3fedde95ee4a575414c57c72a6b2f341","sha1":"bb0e5f717daf8c05b33b60a5d94fc75d6951aeff","sha256":"1f0679f85c8ad6ada9054469d2ba5f7b2edba3318269e689dc229552158bb37c","sha512":"65cfd21702a44f1e3d7f8076ab810f16c013524de36ce280b5ed89a5f8e1aee89dc5dba563005391c865a904f1c5e759d0469b57a436ed8be70883ec2d30760e","ssdeep":"","tlshash":"a3f05980fbf02c6067b5965c2579f800f7498d1351b80e01f39cc7939bc21364982aa6","size":507,"data":"","first_seen":"2025-05-01T20:16:06.076734Z","last_seen":"2026-05-01T18:56:55.159292Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee007517982034e740cdd6a5d5637bbb","sha1":"b39c17faa4c71704e18df0abae4dcd207419ca15","sha256":"dd6bb99eca452ae8e326fcfeced7167ad127f3a58546a9efd01b896ec8e89c48","sha512":"f0f8bdea949c9417de36ce80e1419c097226b17c71c891b611151af3ba15cf1d94c3faf8e7bce7a635afaaabd8b9a98ea7944deb96c2f9f6a807620ea750910d","ssdeep":"768:foCj12CTKOQTadRB76+vd1p+PRbfM9o6kIi1FtTKOQTaSc+PqTKW9o7sI:dTKOQTadRp6SdCbAGTKOQTahTKbsI","tlshash":"82432b214686dd370f71a69d608f7ba3526c049cfec88f68f6ed900026d7f98527b6b4","size":58313,"data":"","first_seen":"2025-09-22T15:23:49.960503Z","last_seen":"2026-04-29T12:07:41.736191Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d50207d68bf3d9595c7144f275fbb9a","sha1":"0016135b691d287ebbb7a92fd3fd9a6f975882b9","sha256":"c5b5d1be640c0bffb88c595ec89e0c3e58ba6a3830601c72fe11a2d6837aef84","sha512":"60194de7383844598ce577d8e772ef859d0cb0e8c1e4b78c137c291b418f28797c5b7bd57d18eaf72a2d36cf491c3f3485d72a14e06a5012d9c380bd7a6ec974","ssdeep":"","tlshash":"5b112218a1ddecd1267444aff56f33a942100d9effd926cc2d9a6960220fdc743315d9","size":1011,"data":"","first_seen":"2024-12-03T21:16:27.666173Z","last_seen":"2026-04-29T12:07:41.84573Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cadc16f8504f58e6bdbbae052ba1779a","sha1":"22f961456cbaedd3afcdfbb61add7aad4da2a3f3","sha256":"054afaad641a7f18a0714d54c8915754d06962a24e7876d092a94e7df6e79abf","sha512":"98aea915404db37bd211995d3292a3162f4e19b5183d283c8f5e2152ba376c3c639f513f0fad1ad507a6e9c9a8c804b7ceb8afc548bc81e01398e5ec864440be","ssdeep":"6144:CYmlQVRAJGjYL3+qYktlCGsRLMRtH25HQDZOICufj/uAc98fDu3filyNzXKEt5/Q:CNKE+dktlCGsRIH25HWL2AcZfVw","tlshash":"da055aca73d0b2f953d663f4102b1102733a387a7819d948f17dc9da792688a417fe7a","size":804189,"data":"","first_seen":"2025-11-23T22:29:02.333717Z","last_seen":"2026-02-15T01:17:16.71105Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9513b4335e38da17f65af8dbe6e9a446","sha1":"2f06cd5955f9f0c0ab8172b1b27af5471b54eca9","sha256":"0081e15c248ae84b01ad243c5ebb36585ca045f4f195efefc5247f2e34c57844","sha512":"3e160437690312888f6dcb113683c8bafa70db3ea371370ab107c28553837c88e5cd0ecf90a573ea74395b4aa02bbf59d0f86fc742f80126ac5f196d91a8de1b","ssdeep":"","tlshash":"1cd0a9ba2fc29c2a80e37ac909ee8012906009202790c5308bab212b6c00da276bc09a","size":218,"data":"","first_seen":"2024-12-03T21:16:27.745204Z","last_seen":"2026-04-20T16:09:49.985539Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/vendb/6.0.0/js/vendb.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddd1b1ded7bf089a3cb82ecd0ee7d299","sha1":"e1cdd7841bd5cd33e905d8acfe2f5966212c2456","sha256":"adc8152340cbcb7bbbba0be257c6384c85d550b3e5763586554baa0dcc20aafc","sha512":"d0bf797b8b9d71b381d49be4054d988989ce1fc8db712baf4a000c0e068be5c44ee8fbcdc9b4b755a341f7216f1682ca05044df908462b4ee409bc234d41ed4d","ssdeep":"6144:nD8UvxKQ2WRU2Z+oahFPpE1ancvzBdHygbsxZgBbbz8LtXYXp+ZGeezuF7o4AU1V:Xvxf8FOqg+QEREO7sAr3c0rxazelR","tlshash":"d345078cb291f43246976276413f010bf2396865609a94d4f679c8e9befc8dd9233f39","size":1268919,"data":"","first_seen":"2025-11-23T22:29:02.486663Z","last_seen":"2026-04-29T12:07:41.932741Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rail.bankofamerica.com/30306/hover.js?dt=login\u0026r=0.5547464570655793","fqdn":"rail.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.20.46.252","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d0c20f0d3acb186cdbdf57709388a8e","sha1":"b2098f7ae780771fbfdc8d1700da31d8a365d71c","sha256":"fe85f32d39af9b73846fb295434733c56b23102af6b885d337cbb66b6c0dc8ad","sha512":"f6adf5931413bfaefcae2c4081ba4ad67641b1c8dfb81c11fc571fe9e0f81aaf91ac528770ad4177169bd6808af75b8e18f850fe22bfe325514ada60421ecb4c","ssdeep":"1536:4SCEd8xKucZt9OTT3ufmR0/fnEJArADONgiS8LQ9s77gkJzhAOqfaxX8wRGC8dhJ:4h4PMT3Ammn2ONpSuQ9sPTJzmaxXE5hJ","tlshash":"3e8319da33dbb03843e6287057ff050bb2796c525d8da499e154f4c43978aa8867bf2c","size":81062,"data":"","first_seen":"2025-11-23T22:29:02.22933Z","last_seen":"2025-11-23T22:29:02.22933Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"f4f3d7465471e8d3e2a6f55e2574b0b2","sha1":"8b9e1d38fc143c10820e3266123f1fa382fe9f37","sha256":"00bd9e217ef3ced116c2034697873d38f7d55f132fc9c9abbd3c53b77d48033d","sha512":"6eb5eadb0edbfa13a850dbda47c55bdfec8154d29ecdb8b1d6a0fcd4aee03de1016263d9743337da2e69da504ea86c339a05b03f16a05dda648b64a09a1454e0","ssdeep":"384:1cXFL06OgTL1OtE73RR6KIcD35U/7xFlO1aF5f:SX7PTL1iETRRxIm3e/77lO1aF5f","tlshash":"7d626f42b5fc09e117e0d58d55dea885abce9e8717b50a42b39ccfda43c217f88c26a4","size":15313,"data":"","first_seen":"2025-11-23T22:29:02.488608Z","last_seen":"2026-02-15T01:17:16.775211Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.108.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5e70247692aa3480f8b3eb67226ced8","sha1":"6a1aa75aabf1968f0346ebae8c6870cfeb9b93d7","sha256":"151c1f5bc0237e9d5bc2c9dcc60a860c10d6185c799d4bf501171955a13edee8","sha512":"66588b8aa58d38fb301b43aa1c6f87d4777ef54fa2c874f5b72c523ee64936f81738d9011d52723a15dca799863148a899d4b5c638b7ef0177a0a39989d27e4d","ssdeep":"","tlshash":"e54193253aa5613f99a0b1a1ad7fdf087272b1370e82442291d5cc8c9bc4ddd84baf0e","size":2227,"data":"","first_seen":"2025-11-23T22:29:02.292353Z","last_seen":"2026-02-20T22:41:29.18481Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/globals/prod/utag.12.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c592947dbcb48aa52b63c60de5e3178a","sha1":"3c520ff2c2bf96eceed1a99367f3bf1a5eb1bae9","sha256":"73fb1cf78f95c4990bc7ba6e264f29fa49c298cf1575604da7f3bd83cef1ba9d","sha512":"800fda04a62a4da3fb23c6f89b87aea1db112e5a01f297dfa4c5dab647f12a2f47593fea70cebaa40874f99569a0573153d54929d070e3196c962bf307fcbe16","ssdeep":"192:TrHUkDIolkA9IUVI5BVgOtR4C2Vq0Q/LJKIogiCev3wFib:HPDjkoIsI5BuOtqOJKGiW8b","tlshash":"7ef1777c2fe9503b483a12665b6f510bf739e323a245e18539acd7200fb1a948cd6dde","size":8158,"data":"","first_seen":"2025-11-18T19:57:41.642177Z","last_seen":"2026-02-20T22:41:29.208699Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/GIS/helper/1.0.0/js/helper.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7370da5190517683a6ce7312e3cf0773","sha1":"b81f50087d28309967d97d026215b53abade9d1c","sha256":"55957050a049260a7c7535f1a4eac02c4c31d659319958ce9dbf22e1e9057a2a","sha512":"e5f97f4c6ad5c809d88205558ba431e051f98779b78f3572cdce1fcb923d8e5da4fb13225004f215525beeee452c254a1cf27b3f41cc600dfbb733baec2f3a05","ssdeep":"96:56z9xqu/nLxQPaNgWUjMy/8JeQ01q0z0gz3DWavqavmvdvtL9YvmLXvM9vBvbvMp:56xxr/nngWUjMy/8Je7jou6dl9HUk4CN","tlshash":"52c12ed41f41294d43f22bbe6d3edecaa4fd5e831d4180c310535c779da91abba8aa70","size":5695,"data":"","first_seen":"2023-12-14T14:57:11Z","last_seen":"2026-05-01T18:56:55.105673Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-13T15:37:23.244168Z","times_seen":88089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.glancecdn.net/cobrowse/js/GlancePresenceVisitor_6.48.0M.js","fqdn":"storage.glancecdn.net","domain":"glancecdn.net","tld":"net"},"ip":{"addr":"3.167.2.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f5ab53985949dd5efa3098f28298e8","sha1":"d4d29149e025ebcbc6e7f0f371a779a64db87a57","sha256":"dd54f783cf0523257265670ab05f29c7376f17f1fcae44e1d772f157d2a1f013","sha512":"8365e56a92410e1a0ee26b6afe78672fa7279b13d4d547d45135b572d0bc34d270b5be8f1d7f57972136aa602b454e539fe0c5546668cdb5e8feffcff5196d8d","ssdeep":"384:tgnxLQ+P5h47Itz0TIPYOWj+LGLcaGTudvqHEhdZUavfxdoyZ+k5zEsEtw/j0g:tV2zA2WaLGIktnrJIWH","tlshash":"4c82f9687961303a076ba0f2541f210a7137e1ada64940aeb1c8e5f13c74b9b5377fbb","size":18514,"data":"","first_seen":"2025-07-23T13:02:41.796475Z","last_seen":"2026-02-20T22:41:29.209215Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"52ef42c1148595ad16c08dcfabe1ec97","sha1":"8bfd8e404f29dd22bc9a0195b85d11e4fba332f9","sha256":"d154d7b9430de6ef0505a00f50d7f3399cb84880df0c68203199a4f038dc8006","sha512":"8530bef780bd82ec86c5d73b367645e9d63ed870091085ffdf3f521236265dc326acceff08c30efc9bb3d416b952f9dcf240776af465f0be5d9c0ba896910629","ssdeep":"","tlshash":"a6b092b612969a3626bdba2b1aa5806d2030acfca90d08414817d7220018f9a01f0b9c","size":122,"data":"","first_seen":"2024-06-12T19:11:33Z","last_seen":"2026-05-01T18:56:55.135124Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=bofa/main/202511210113\u0026cb=1763936878837","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-13T14:39:55.169862Z","times_seen":30433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/login/rest/sas/sparta/iac","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bf18ded191481fab90470135dae628c","sha1":"311e1fb66e36f61bc3f8a7e0a11021d332eaabaf","sha256":"f30bb5518c9dc5947b7159f3b56685e02088f5c46d20bf83d552cd07eaaa8b43","sha512":"a5de7c53d284145e0753542279715546e390eafca4d88ffac56e66d2cb5d41b77c0821ca8626ae97fe38ec5ba1f8e619a220f143ee4b5ea790669ddf7a5422e0","ssdeep":"768:o1n3NDUtj4wRn/nUO+uYPY5QizHEjI9yU1fwOwOoS:Un36tj1RnfrYPY7zHEWyYD","tlshash":"3d034d993276312952373275617f620ff0b256a1a806dc9090f6cde4bdb4eaf1233f69","size":39469,"data":"","first_seen":"2025-11-23T22:29:02.492974Z","last_seen":"2025-11-23T22:29:02.492974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/creanza.js","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cab9e582c10cf420488eaca4e1a6e49e","sha1":"1237e673b17ad23d7be2a24b967a94e1c085ec20","sha256":"b02fbd9430b64ba92d1a0b307bb474ea63571519afee93cd58407d367f65ea17","sha512":"b2dc4fcb9f4270e12a6ae29476d26d98afb268355cefae1b23474c9832ddbc618b3a081e6c817b6504ffecd018fe85875fdaea2583327b498f59079e5944b44d","ssdeep":"1536:Dz7+KETSv/c2aKiUT31fdrSIYaDA4AeOxy2X4LB9gO8VLqmRfmHlXgryCYxm7Nw:D/+KETSfBT3ZdGMOxTXqB9gbFrmHzyw","tlshash":"1b7308ca33dbb07943e63c7096ef0507b6396c925c8dd495e144e4c43978aa986bbf2c","size":79992,"data":"","first_seen":"2025-11-23T22:29:02.261806Z","last_seen":"2025-11-23T22:29:02.261806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-es6-page-4a7ab1cfa01b24f8f73a.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba2c425976af58f67ea79a5ffae6d8bc","sha1":"fc4b3971ad4a7a928bc8508b7990851cffbe434a","sha256":"b3b9b4a7519d529fa5114324bcab8d73964d4c32f1ca9ab2f0aae4b08ad24e08","sha512":"86f37145c4496eac0f4475cdb5ef86d7a3a491bcd0c146ca95ccea1e3c0267facd017dc08155e4fe44aa6d3537945bfbca842b8ceb7ac2495264a9d641ac8039","ssdeep":"","tlshash":"e211e604d2a6a4b2927448aee5b73b74030408bff9c58ac87c8a36dc155fdc78131afa","size":1000,"data":"","first_seen":"2025-09-22T15:23:50.118508Z","last_seen":"2026-04-29T12:07:41.928171Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/on-demand/global-global-social-module-styles-afb8a96bcd0d93782d5d.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b5abd82b01b4062700d6e04b687f1b","sha1":"846959296988357d339691d5f8953e6017129222","sha256":"69d145b681ae09f8ecb1fb5faba46b5b6cedd9f11f252305ca716ece0fd35d8d","sha512":"333930ac3adf5a71de4c2d479f710b44f718158789e8ff1944d5636d3e40394fe632d7c155cae8bfd4ce993e935eb7853337f318ad7a176bc3a52536e02c5f82","ssdeep":"","tlshash":"ace068112cf2316a347d60fef0b765a40b5901f6f12d6ec07c3c74c4108aa6a02f20ac","size":396,"data":"","first_seen":"2025-09-22T15:23:50.069839Z","last_seen":"2026-04-29T12:07:41.793536Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"305af54dac749971fb1a0981edc866e5","sha1":"176fe0d82813c4288abe4db08f160f63ce3a5585","sha256":"ed4c4856a66f0f3fb4aa8cdd62aab6deec9d684e610ecc773fe5cdfa15918821","sha512":"640c85c0e6ba2a1d6af44516d805b9a495d7a12f7e30c53b99fb4e337740641704e45ece39f0d08e8b664f35aa37561771885aa1d8b657167cbe9df8c03715af","ssdeep":"","tlshash":"77f05980fbf4286063b5964c25b9f400f7494a1351b40e01f39cc7935bc203619826a6","size":502,"data":"","first_seen":"2025-05-01T20:16:06.064811Z","last_seen":"2026-05-01T18:56:55.167264Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb93339990904bad80ac253e86ea7817","sha1":"4f3d925aac809bae3ea2d11b2b8ee5e06f916dd7","sha256":"f1f3473b2ec40635550c6cf2e7ae2aa0b0c87ccf91ff96c652a87ffb29d585ff","sha512":"2ef46d41a8d1a40a0494aa1f21b330cafc81d2d65dac9f5ae11a207476dae888651cc3938bf4071ee8d006a4fd9cc5f810467e5742e14d062c6c27c054c0cd63","ssdeep":"","tlshash":"4501897739ffb194f01b702a277a3188bcb87722c49cc6178e9bb5200e91647d6550d7","size":784,"data":"","first_seen":"2024-12-03T21:16:27.7536Z","last_seen":"2026-04-29T12:07:41.934794Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"e5deb6976e98ae1816bfe4bf11d79ece","sha1":"c76f53f8002f11b217b4e0283537301de4281874","sha256":"ce403ed0289d76d9549d8db7001e04283ce747c9c764eeb33a1e1f84d5c16dc5","sha512":"7a8be56b3d75353c4efbd9b03404c4a5da39cb8637aa8547f120fbe7e2b2eaae2acd9108fb6888ff7539b676ac04cb05e20cd9af99f27337c805d74ee63ef7fa","ssdeep":"","tlshash":"3321e691faa80d906794e28d55dea480f7ce8e8756b40b41b39ccbea47c313a48d13e5","size":1418,"data":"","first_seen":"2025-09-22T15:23:50.132579Z","last_seen":"2026-02-15T01:17:16.779524Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b141e191770866dc1bbe62ddab6a0db3","sha1":"f5f6666700c71e9fc2982dd5377317efa9e5c743","sha256":"903a520150f39948efd1186cb3766e92e3df92421fca35773d947b13d4ffb412","sha512":"942f2e386c28079e60f453149767ccbbe0a3b27d9e4155de0052a6659f1ba2c5b1e164e5c1d053d18b951ee5b9488280d392426af4ce1b545048a7dea3ff5b5e","ssdeep":"6144:A5xoQ7gmIlKWI9b5AaLOGoiLyCZLdBn65WUeCjXVXnNJWlD:AiKD5bLOG3yCRa5WUeCjFXnNJi","tlshash":"8db44c9776a6743a43d720a0106f65039036f86b66d4c0bcf358ecd8e9d8e49527bb3e","size":500073,"data":"","first_seen":"2025-11-23T22:29:02.35198Z","last_seen":"2026-02-20T22:41:29.192187Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.85.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9678b39fba79071c17a887edd5156dac","sha1":"90854d7c93a3d4fb51230f1d59d3aa683159e632","sha256":"8bd808b1a9fc79cd93a5c2996b534b25ee3dc4907e94f810c492d33269d0f24d","sha512":"8a4f5418794cf5fefdbb94205b45d96360667faf39314b9be238dd237470e0578f06c3457a9e046aa4e6201f4d902ce923bce3f1eb6ad036578710a5604d2e68","ssdeep":"192:3174Ojuk63EEiuDS2ic8Izve4AWe4dhI3Ju8dspzKg5UeptZoiGnfwWnDBwjIXOf:3Z4Ouk2EEiuDS2icFzwzupzKg5Uepb0g","tlshash":"8822a7cfec051e7b0e75eda9e0eaeb201214aa57f401c486d59e486f21cf5d690f0a8f","size":10081,"data":"","first_seen":"2025-11-23T22:29:02.326744Z","last_seen":"2026-02-02T22:49:09.243815Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.48.0M.js","fqdn":"storage.glancecdn.net","domain":"glancecdn.net","tld":"net"},"ip":{"addr":"3.167.2.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aa423d45977cc4a11e8b7df5906772e","sha1":"95baf9c2b04548fa65660452e9baf80cbbd5827b","sha256":"b0ebf5cab8723817b93c6cb10e30fd4f875cd6272aa3bc6d2c07e8455b941540","sha512":"0679124ead7536c3412d81c3702b9c985576db762bcd0b28a27af4ab8e63b5b44fdd3a375e2bf839650ef9c2775ff273088e9e98292336113dd545ea9cd39404","ssdeep":"192:y4PpgnFuYt3Ytx+G1uGVj1BV5VNGt35D/st2sfatu74P+BY/Zp0Ul1xao631KwT4:ySpgFu45kuEpBHfGt3V/xuatu74PIY/D","tlshash":"b542e6be7751b831056660b3126f230ab53b69d7b889a404b189ccd03ca5e5b8377fed","size":12219,"data":"","first_seen":"2025-06-07T00:36:34.320293Z","last_seen":"2026-03-30T22:57:30.786379Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/porte.js","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"604fbc5d3edc98f6acdd5a5bfb48b959","sha1":"c88f9cf6fea8f7697fde72f542973fcdb9807d63","sha256":"3e82b90b117a5dcd0501177181683d89fc2d1147cd5b5d980574f3077f7f1e30","sha512":"d678a762c6690d4708ed88a46cc7c33fb8ab404129d078365897fdd75f3ae39ecfec8eb7764479ccc337758e416ac5a3a83cbeccdcf2279ad851a9f7259ccc1b","ssdeep":"3072:bWDDBT3qj37uO8mJ59Z/E3gLTpECJbBfNJZ1edhGKgM2IlTxZl4ErxFtyy3+77A8:bWDdObJ59GC7Z16hGR2fltmE08tCtVx","tlshash":"8924cfca37db703943e628b066af1547b2796c524c8de099e145f0d03d7caa985bbf2c","size":228509,"data":"","first_seen":"2025-11-23T22:29:02.328597Z","last_seen":"2025-11-23T22:29:02.328597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=ZW5jZEBKQllyRWMrZVFsRkhpell1NWd3R054VHFTMDA2S0xrUmpmZW9scmNKY2RnS1hBVG85aWsyS3dFQU5Wb2ZqaERJcTRoN3RIeVpIc09jS2RzQy96TWlPQlJDaGNlby9WdldpeXRvb0EzanY4UWdoUUp1VzhnZnRQY1JjZVJVVFl4b0l6bUlGNkIzV25nd20vWjc2SlpTTENncHZFbEVPMHppZklQVks2TWhPSGM0bm5hU3J2NS81VkloWnpMb3gxcFY3TnZPT1Q5VHFyTnRJclE3dnJNbzVhNk9Eb0pVMXRUVHRkenNjMVBnM3BhemY3VFNjZnpVYk9HRU5iNHE0VXpXVUlHL01vdVhGNzJoRDVsUG1lNUptWVlVYWZCUG9telFkT09oZmNZaHA5ZGZJQXY1OVYwNjhZNjhReEdtTmlaR2NHQTFNczZJYkJrOEZrL0wzdmpBL3RRRVVVcUhCSjdtdG5NOEc4V3JjTmllY2ZxbHZ6Y04xdktKSkg0YmFpdXNCT0dlY25MYU1mc1FxNXppSkJLMjB3UlExVEl2cjBreVBwTnZGblJIWkpYdDJGOUwyMUVVNmNkOSt4aGM4bzZETGdGVXllZzJNMERwZFBsdzBKRHN4clVqbkR4QlBXK1Z8NzUzYjkxODQ4NDk1YWUxZDU2YmMyMTMxNmU0ZDM5YTliMzMyZmVjYTZiNTAzZTk3MzIyOTEzNTFlMmNhMzFmYmNhZDFlYzg1ZTVmYTM4MGExOGU4OTIxN2I3Mjk0MTk4ODc5YjA1N2E5Yzk0Mzg5Y2I1NmMzZDQzNzc2ZDJlMjU1ZTk4MDNkZmViYjYxNWNmOGZkOTc1MzIxYjg5Njg1N2RhZTc1MzVjMjNhOGQ1Yzg5YjExZDNiN2NkMDdhMjkwMTg1Yzg5YWFiZmE1NjYwYzA4ODg2YmM2OTk0YTFlM2I4YmNhM2QxNjAxZjM5MGM5YWZhYjA5ZDQxNjYyNjc5NTMyY2ZhNWJhNzQ0OWEzMDRlNmM0NTNhYmRlN2I4YTY0ODE1NzNlNjFhN2ZlMWRlMzc5OGQxZGY3ZWQwZmJlZjkzNzNmZDM0NjMyMjU0YjJmMDU2Y2M2Y2EzYTJmNWU4MWZmNDNmNjFlYzczOTYxMDQxNTg4OGIwODY0MmQ2M2ZhODlmNTM5NGFlNzQ4NjUwNGY3MTRmMzZjNTM0NTc1MTY5ZTNiYzA0MmFhNWExZjE5ODhlOWFkMDQyMGEzNDMwNjI3YzIyY2EzNzNmYzI2YzE2YzdlNDQyNGYyZmM1MTViZDlhNDlhY2I2N2QyNjI1ZDNlMDI2M2M4NTk3MWQ4MGR8MDBlZTBiNjJlY2FhYzg5Zg%3D%3D\u0026cid=15%2C8\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=lyynvdoueiotyqlt\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89f86353da80cf6a9837826b0bd831f3","sha1":"cfbffba82359b67149c57d7c601f37e77a44f6cd","sha256":"9ae8162343e26c85a76105f2921bbb58b2151be491d4583309483ef15eb6df1b","sha512":"e5a9a64a6068004473a50a5a1ea8682b305a04b302421f584c5bfabbeac5e825883f1c11c70db971a636283fb5e3c2666517e2de48dca8d13a663d62dc2115ec","ssdeep":"","tlshash":"40c08c6f8c208120c78051cd1d696fb5d4abd56b8f6c58ca252d6c202c328b8e60aa63","size":165,"data":"","first_seen":"2025-11-23T22:29:02.323994Z","last_seen":"2025-11-23T22:29:02.323994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"c126be22626a34f892cdb88ae92792f6","sha1":"0738c78c1a2175f6af0d538ece56c239f95f2a5c","sha256":"641c2b7de279ac41807b33f5edd49002114631fae18d251a94a5035f47228f24","sha512":"fc942047bdbacedad3d33f164ed040fe1d7a01dd3b66f5d78bb8ec3730911f7f1e91242a7bec88f3ab4b976be6121ed2d613d7ca68a9940eb25029602ecf9874","ssdeep":"","tlshash":"0d01b180faa81c502791e25c55efb480f3ce8e8756b80b41b39cc7e64b8313a04c16a5","size":740,"data":"","first_seen":"2025-09-22T15:23:50.129117Z","last_seen":"2026-05-01T18:56:55.155794Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ec62ac4c63f61529793d41a4330158e","sha1":"80a1a1a671d15bbc34ffe8ab4c6f42d90f02bdf3","sha256":"681eaae69a02951f252cfd2c48507470218c13fbb4da68778d7584cad767ea00","sha512":"40f7adc1786f415a7d76e751002d1fff8ededcaf853e97f027e5ebe1e86d99af171dbd5b53bf2a09b63cd582494a52edaddca22c7616b9be9116ff9c3d7cd81c","ssdeep":"384:+hMpV6BJ/0vCaKI1d35gKuSVQhXjgZgun1nQU+m1sXH1z2yZd0m2o2nyfHLMsJ7h:+cQ993BSVQhTgZgu1nJ+mqXb8nyfH97h","tlshash":"f0e22c8ab141bd3443c2a1ac993f8717b23bb42d74c4c168b884e8f15da9c4f1577bb9","size":32550,"data":"","first_seen":"2025-11-18T19:57:41.708595Z","last_seen":"2026-02-20T22:41:29.186999Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9513b4335e38da17f65af8dbe6e9a446","sha1":"2f06cd5955f9f0c0ab8172b1b27af5471b54eca9","sha256":"0081e15c248ae84b01ad243c5ebb36585ca045f4f195efefc5247f2e34c57844","sha512":"3e160437690312888f6dcb113683c8bafa70db3ea371370ab107c28553837c88e5cd0ecf90a573ea74395b4aa02bbf59d0f86fc742f80126ac5f196d91a8de1b","ssdeep":"","tlshash":"1cd0a9ba2fc29c2a80e37ac909ee8012906009202790c5308bab212b6c00da276bc09a","size":218,"data":"","first_seen":"2024-12-03T21:16:27.745204Z","last_seen":"2026-04-20T16:09:49.985539Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/dis4.js","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0fc72e78478fd7ad48258a5107d560","sha1":"081361692b3ba355330c297b474d109006fc256a","sha256":"cdffc0f0a7c1bfee50c10496b2eb44356b7a6b804087296544956aae477944c7","sha512":"7667d982332f9e91b96f3c7736937bb6f84efcb2393b79308e3841ea5a63fa97903544e5cabbf2523b34c70abd6e812afbf3d6be93398ffd28601e0cc46bc317","ssdeep":"1536:bSfPVDyUjSwtQ7PT3mfQE6pWIEiASA3OHHqALl96oXFZndCf2sqIV1zp2wI:b+VDyUObT3IQjgOHKSl96w7aPqH","tlshash":"7d7319ca37d7b03843e6287056af050bb2796c525c8de499e150f4c43d78aad86bbf2c","size":77734,"data":"","first_seen":"2025-11-23T22:29:02.356619Z","last_seen":"2025-11-23T22:29:02.356619Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-b04d42b9adccb105c065.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"da990d558066862514a4cc7ef0bbe59f","sha1":"ef5ae4d522a3b988621f1eda7dc3df21832cecdc","sha256":"16ad7439c161086c3db8bc3de97d9c5b3033af5e852a7f9b81c8c83d0555de72","sha512":"92ad175ad728666042544ce1c1da390adc822624c8604c5db408dc00b0b3636f7df9eae41f027d94f30e505952cd25c6be453a0bf988d13c40604bc84d81aea7","ssdeep":"24576:VXmhtB262EhZ4CDfpitT8C/i94vW9DdCyyvjK9oPaRB+Zr/Z9ZtYn4/JKpmUwVi/:tmhtB262EhZ4CDfpitwC/i94vW9DdCy7","tlshash":"81556cd972c072b647ea16e5503b1101b3342c69b849d884f07dd9ce2e7a98b41bbf7e","size":1387259,"data":"","first_seen":"2025-11-23T22:29:02.501713Z","last_seen":"2026-02-15T01:17:16.769451Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"0e67be3ed8d881fb1da68a3a113e2863","sha1":"0200cfc85e981cf59a159a96b40cdbec11cf02c8","sha256":"1ab9dbca5468b46c2e96fc2c1d9847acb40f6001cb4d8742237a6b75d418d76e","sha512":"f8fdefb2b28ddbf551885132dbe76b45b590829b78ee744ba46c8d8a3202e78ea0ce1ee8143322473154c764e761c7c8716abaa0d65d67f430e45fecd70b5e8c","ssdeep":"","tlshash":"7ff09e80fbf01c7067b6a64c257df404f7494e1351b90e02f39cc7935fc203609816a6","size":506,"data":"","first_seen":"2025-05-01T20:16:06.054916Z","last_seen":"2026-05-01T18:56:55.1657Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"047d439f438c485f4c25a4a8a1ebb16f","sha1":"6cd0397dd7086b3960c94338c65839f5caed6ac9","sha256":"99bc7890b152901cc708c90ccc76bc882a2188b1dd2c879a8971babab4e808c1","sha512":"67048b1aa25e9a67eec52080b149b03d9fc57e6019bf9ee04cbab798db9091c2052620f57ce880c0c4b6e97020d5ee661711a48c9032b7c1e0ed77c888750116","ssdeep":"","tlshash":"1701261937bad863c84b6aeee0b25f225ecaf244f98f4ec4124d8aa451d1f3971d3544","size":818,"data":"","first_seen":"2025-09-22T15:23:50.115924Z","last_seen":"2026-02-02T22:49:09.374046Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb23aa405c5541d4ef5fb7d55d3fd0e7","sha1":"477f1abd59c54d35cb4fe022ac0948d2bbdc329f","sha256":"f360195fe3f79ede2d6daa4c7b93d1bbdb1446c698ef37cccb801e9ede8d9bae","sha512":"b78309f48b7d9a5b11717610ddf4c11af985f87193e11a1512bf59239c75892007ea63713267eb862c56d3b15b2042acf26169f85c5e4800a9f70c69d1cb0102","ssdeep":"768:2U9/xe2TKOQTa+e++8dv+Pdb84yd9M6gcyxBxTKOQTaS4+PqTNA7i9MfXss:NTKOQTa+e+fd+b83aTKOQTatTNA7Pss","tlshash":"98433a2046c9dd770f61a29e608f76d79268089dfbc4cf5cbaed900026c6f98527f6e4","size":58572,"data":"","first_seen":"2025-11-23T22:29:02.278992Z","last_seen":"2026-02-15T01:17:16.639866Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://afd36e3c-6115-4459-8b56-4bb832c26172/injections/js/bug1472075-bankofamerica.com-ua-change.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"86b80a0f8f53c3efa026e419396b2dd8","sha1":"5d0fe3c490cb6d388ab962bc4c7f70ff300df11b","sha256":"850227dba6ed88d79aea1d76dd4836f791b29f3d3f6793778f1bab09c7057317","sha512":"8b99727ff46a3884856e7283cbe8ef43bb32346e98e7cd90a599de46532b249bafb5cebf02ee86e09cd86c7d85ce7118a1184375c41ef4152eb6428c9290857a","ssdeep":"","tlshash":"1f21da8e7674a091023374fa131fd6cda13b44326026b94539989bf8bf7419f10a7ce6","size":1374,"data":"","first_seen":"2023-04-19T23:23:32Z","last_seen":"2026-05-09T20:59:46.716605Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60ad5e39ff06eea05514af238c6fdc1","sha1":"6f4968e69357576d4fcb794e8f3447704c743f11","sha256":"02fb0831aeddebf3d24692f7280a17a7c6e816086db42229192fa603ba026d8e","sha512":"0a538c48c2acb5ddc81c50b3332e6b9de18e96ed40433f05b6e9b9210618601c0a61485d9a3719555093fb8d761f9a0a1f6cf8314ad62685d9c4f8b9e20dd9f6","ssdeep":"","tlshash":"97a0129d90d88081402b428c87925241313000c3388090c9421a4c418944000188c960","size":82,"data":"","first_seen":"2024-12-03T21:16:27.740094Z","last_seen":"2026-04-29T12:07:41.914275Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"d0b413295d3da33424c42df0bfba8e36","sha1":"3055708a9cb2d396d3f00a877c3f8c56cfcf94b3","sha256":"2eb5b34fa5938b2af784a939692d7ba32ba387f0ed6e40ef59d7491436c729a8","sha512":"ae65258dfae97ae3d4876060a4d24dfde8c9a1d420bf605945fd233eb9b5f648891a37751cf83ae70ef9482b8cb22ef46d4f1036eb2e888c193af679b85e4d1b","ssdeep":"","tlshash":"e421f745fae80da067b0938d959eb840e3da8e4717f41a42f39ccbe687c213e44c16f5","size":1291,"data":"","first_seen":"2025-09-22T15:23:50.150806Z","last_seen":"2026-02-15T01:17:16.772057Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/dle/bofa/main/prod-_-homepage-content-personal-homepage_personal.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b519d08ef66fd54910edbedba6181ec2","sha1":"8d06436c33a3086259f2f1ccaf03425707eeff17","sha256":"101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860","sha512":"f7195d19d40b60aa9f992c5830f88dcbed7348521eeeb426a2544a18f9e13efbe4acfbf03d9a3961ae8174572e5aba28d9013ab6b4849a18ef35508b1e011c14","ssdeep":"","tlshash":"c72000000000000030000000000c00c000000000000000000000000000000000000000","size":3,"data":"","first_seen":"2023-03-07T12:04:38Z","last_seen":"2026-05-13T14:42:09.288442Z","times_seen":6400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"f16c41437b0f2e8733e04c118382bf62","sha1":"01c4a8614145077b5a6de47bbcd449270aa28017","sha256":"8468aa77ce4ed3a4dba6f8c832e6e9b88abd05dfa2614f6121b96d0d06f6cfdc","sha512":"6771b9c913286e8b709ac1d34c61f1aca41d72d3ba3d673bf74f6cdf53d69d88fb44f9a25da18d88d3db6cbc55ed5f10956a4231c757c3f3281603d20c60e066","ssdeep":"","tlshash":"44f0e980fbf4186067b5965c2579f404f7494d5355b84e01f39cc7939bc213659826a6","size":504,"data":"","first_seen":"2025-05-01T20:16:06.042191Z","last_seen":"2026-05-01T18:56:55.162516Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee007517982034e740cdd6a5d5637bbb","sha1":"b39c17faa4c71704e18df0abae4dcd207419ca15","sha256":"dd6bb99eca452ae8e326fcfeced7167ad127f3a58546a9efd01b896ec8e89c48","sha512":"f0f8bdea949c9417de36ce80e1419c097226b17c71c891b611151af3ba15cf1d94c3faf8e7bce7a635afaaabd8b9a98ea7944deb96c2f9f6a807620ea750910d","ssdeep":"768:foCj12CTKOQTadRB76+vd1p+PRbfM9o6kIi1FtTKOQTaSc+PqTKW9o7sI:dTKOQTadRp6SdCbAGTKOQTahTKbsI","tlshash":"82432b214686dd370f71a69d608f7ba3526c049cfec88f68f6ed900026d7f98527b6b4","size":58313,"data":"","first_seen":"2025-09-22T15:23:49.960503Z","last_seen":"2026-04-29T12:07:41.736191Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/vendors/vue-router-95c3ec4fbf970b9fff0a.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d473ba498e57633c5071ff337c92797","sha1":"0d2ca1ed114a94ad45bee16ecb6de2ea4a837b09","sha256":"003b5694daf5fc870037e78b4fb6a2eb8daa2db322cabf37211420615d482d7e","sha512":"b41fefbd1db00853a7f2602589755b97e35b64a3147d484ca2c0a968e0ca54d1e8a9b3a46fc13f1c665c36868e83555790870a8a9dc7d7381209d74d7db982ee","ssdeep":"768:Jw1zoGYhvCK0WDk2ufj0irvHwg0WnBJviKb3Xs7Ek3qH9WMGawhO5lTDUiBD073O:ARgAH55k8p1O914t","tlshash":"5e03f8fa32c2703597e61be2417f2115f23648d6384d85d1f05cb9973c3399ac2abe5a","size":39514,"data":"","first_seen":"2025-05-25T20:05:30.821286Z","last_seen":"2026-02-02T22:49:09.322491Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cf36dff5bb229631d8a5e1b28c2c96f","sha1":"a59d6fdd9f6f05935d8a1beaeca44403160c620c","sha256":"e4a4e646988da9ff17c1390f40929de6dbad336b137a818a80163075807184af","sha512":"785e13a618dc1ea9da32c80015ccc135a4d415930c42e36130d4e8ff2ba55b5a960b2e010a763ad96151a68a8763c82a61dba6bd8bbff0abe0692b6511a90d9f","ssdeep":"6144:Utz7PEhOVJZ9xzGtE7qxo6zqNXxJrJbtdusSMEj5pBrr7Beud7aC:UCQVpxzGtE7qxevSMgrcI","tlshash":"87b42a8e7590793587e752b8c027414ab63174acac95806cb45cc5f90bf9f821ea3fbb","size":515360,"data":"","first_seen":"2025-09-26T10:39:51.823405Z","last_seen":"2026-05-13T14:29:54.684422Z","times_seen":5341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/GIS/ap/1.0.0/js/ap.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b266983fa37435392d8e31f416e192b","sha1":"d9f83edc10ebfd455f908f2fad7379a5515d6018","sha256":"e06e57628e6b61532762d58a957b7ef153526a3b4859361e9584713a72d67358","sha512":"abf598cc55db2b112d043b5fd262766b3e2de5e7600a676647b6a7c5c0b16c8447ef8d8f23e438a3ca058693b98d6750f04d168ddf403a2529215618fe3571f0","ssdeep":"96:q8m5l7Dz0T4spSrdRSy9na+xzGd0ey0k+lSUMlIeohAmi5mX19onE:q8m5Vz0TJSBRSQna+xzLetk+oPDmlCE","tlshash":"c5a1fe5523200c5d237b9ba0be366dc6b8f16eb13c178013e91389d9fca8ba65f45b70","size":4948,"data":"","first_seen":"2023-12-14T14:57:11Z","last_seen":"2026-05-01T18:56:55.065798Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d50207d68bf3d9595c7144f275fbb9a","sha1":"0016135b691d287ebbb7a92fd3fd9a6f975882b9","sha256":"c5b5d1be640c0bffb88c595ec89e0c3e58ba6a3830601c72fe11a2d6837aef84","sha512":"60194de7383844598ce577d8e772ef859d0cb0e8c1e4b78c137c291b418f28797c5b7bd57d18eaf72a2d36cf491c3f3485d72a14e06a5012d9c380bd7a6ec974","ssdeep":"","tlshash":"5b112218a1ddecd1267444aff56f33a942100d9effd926cc2d9a6960220fdc743315d9","size":1011,"data":"","first_seen":"2024-12-03T21:16:27.666173Z","last_seen":"2026-04-29T12:07:41.84573Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a16fc5b0e86ac2d1309256f10f59491","sha1":"290cabef0e35adb329612be19f9f056fb602fd0d","sha256":"c298933c2292984a435faff34de2254d6ee019656066fda85ec3a1b1ee6132f6","sha512":"ce03d2a79c6cff648e748b011760296138598385a645627dc6fd7ce6c4236f6c1445777373eac8f41e7f7a9a951aacdd26c3a8f732e58c8644d24b6148976ee1","ssdeep":"6144:tvU9v7+UcJ1Pi4pFeTEYOh8ymRJCa/EXPpPhmXds+y/pXnFfpG1CnKks6L/:xURjY1aImRJCaMMsH/pXnO1C3s6L/","tlshash":"a7255bca33d0b2f653e662f8502b1102733628797c49c984f17dc9da7a26d4a417fe7a","size":1036672,"data":"","first_seen":"2025-09-22T15:23:50.016858Z","last_seen":"2026-04-29T12:07:41.727223Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awuseb.advanced-web-analytics.com/30306/nuadke.html?e=https%3A%2F%2Fwww.bankofamerica.com\u0026es=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688419481474","fqdn":"awuseb.advanced-web-analytics.com","domain":"advanced-web-analytics.com","tld":"com"},"ip":{"addr":"3.167.2.120","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"32e59183a3161e3df0c18fb93026a2a7","sha1":"cbe4ccb88b61f360482bc8bb3fd2cd5485ee891e","sha256":"3678c8604a7958fc80c5590bb224ecc612a2a155b975d76b024de4626d2830fc","sha512":"373f6bac98689da4c3222bc842154d3c2440123088066fc115acd7b2676f111e14cf50e4585963fc6df2f19c647a2760991d75f5bd1a9d29edbd0b98fcaaa418","ssdeep":"1536:dMD/DyDW/IZkLePT3JfGrxZfj5j+AsAyOiaM9oFLx9X7Gs07lVrWrFfs00LRP4ZN:d0/DyDyYT31G9HkO9MiJx9XSXJg9sLnY","tlshash":"637318da33dbb43943e62cb056bf0507b6396c925c8dd098e154e4d439789a886bbf2c","size":79386,"data":"","first_seen":"2025-11-23T22:29:02.508415Z","last_seen":"2025-11-23T22:29:02.508415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8268fb44ae36ae19c522b0dc8b361e1","sha1":"a58813fa78218e6673ee6e5addb89e9a9d151fcd","sha256":"1bd73e039f37301f2f87992d670bb7660bcd2a8450764a961c0044d8d8a65c24","sha512":"cac07dc0ac9953fb15b144abb98c05de2ca27dae84625ca2373167fc9c76b48f006ba6d4fa3d196667408f781c4116e308cdf8db21c5c0aa51c95642ba99c0b4","ssdeep":"","tlshash":"9b2102b93a093b50037b7adb581c60475a71cdc8b89ec004a3179ec83d5162cb6f73ad","size":1229,"data":"","first_seen":"2025-09-11T03:39:38.41713Z","last_seen":"2025-12-27T18:14:53.855815Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"9473ab4ba0793334cf5bbc15355b62a4","sha1":"7c30535542ea0c1756177d107bc2674a1f84190a","sha256":"77a431d14ffc3db2dc9eb71f2cb481d0e25b3e43cd6ee39f1dd68a62c7a66686","sha512":"530ee3e2d02f117719610cfaaa4b762e77945b70e6f65b61d14a34b797673ea5f04e31b68555171672a5326835cb7a86d9d8b01f0e6921124c44ec96718d13f9","ssdeep":"","tlshash":"28a022c820a0b0808b8222c20e32cc8cc00000b0080c082008f8c0c02880838023000c","size":59,"data":"","first_seen":"2024-09-18T21:11:18Z","last_seen":"2026-04-29T12:07:41.93639Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glassbox-hlx-igw.bankofamerica.com/detector/conf/vtim/whitelist.js","fqdn":"glassbox-hlx-igw.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.161.100.253","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78228957ed988b985916f669569251c4","sha1":"64d04c3a06a36bbd5a4f35caccb30d6418a30548","sha256":"d4402af9c24351ae9e965dc6a09207f7c74d3b946c640d8de0d8fb15b7bbdbd3","sha512":"71a5fdc3c90f106024b07bb185da8e7fe05c3ab1365a4be5dae08bcdfd115ea85a6f11471d071a7e3aeef0be1779d09606497b82fd46927512c267925621557b","ssdeep":"","tlshash":"ddf0f9ab40f4c96302448970c0df62ecf61aa2af4439fcddb18c723c5f4186b94956d7","size":653,"data":"","first_seen":"2025-11-18T19:57:41.738173Z","last_seen":"2025-11-24T15:38:31.130608Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/loader/6.0.9/index.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb13f29eb63fe230e3f60c50208a9a68","sha1":"636ccaaf337dfbd6d1e11c33c76e98d880b202ca","sha256":"db87111abeef6f77b69e1a7aaec9932098f5911783a57c5546b3f6cbc166a41e","sha512":"2b6d1aeab4be0e18d9e97891a1719af6dc653aa06b496c0ae445b42fef80596eca8e5be0fc8d84b72f104c234e037c16d2aacc47efea4944720588bb6e1adff9","ssdeep":"384:OFQcOa71ZcxebM1my7L2soWRvJ0Sz3F6czT7zsyYYbR4C:gVZZcxebMsy7qsoWlz3F6czT7zb","tlshash":"d8a29788bbe5f07613a76135901f210bf336659ab41a4850e625e8e1bcb488fd237f7d","size":23234,"data":"","first_seen":"2025-10-06T15:18:01.341071Z","last_seen":"2026-05-01T18:56:54.971183Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/kurt.js","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96761e291299fa25e843e7ad1c1a47b6","sha1":"a5d4616b6523c0389bc52aa8d10b6c87d7a19662","sha256":"e1c8f579c875c308d9b90ddd94ec05134609267dfaa7f107aa04cd735aaf29df","sha512":"7325b31afaae8f78ecc9e58c9cf6b08f0f1c604d4b180f7ac573228b5f9582b8fed1c62aac26347082d4dfbaad37d10bafc2916651261b2ff56dac79ee0262e2","ssdeep":"3072:XHRGcT3uxipOV4749cYtYqnC9d5+1tL7rlP:XHRROe749zCszL9","tlshash":"57b308da37d7703983a228b463bf050bb27c6c531d8d9459e105e4d83a78aad827bf5c","size":117577,"data":"","first_seen":"2025-11-23T22:29:02.376939Z","last_seen":"2025-11-23T22:29:02.376939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/jcrs/global-en-social-social-jcr-dfee169e3d631fecd4f8.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ed886acd170f80541d0011b57ea9afb","sha1":"2cc72576a53c604f955c87a6c0b0716e78648fbe","sha256":"e0c0ff304719142186669641110f209fe81a54c6d3793799472e5499399db16c","sha512":"dac113bbb3f173252680724944d349f187d5438c85a46a0a7802bc66a4f5d18f329c6c555ad856a13f952dbf1085fa2b834e3220b22ea4138c329e9a0a5b8c41","ssdeep":"384:ahpaHJChW9qh5muc4Apsc4zapglop8mdGiz4ep+tmZhWrhldUpaEpIzipUA:ahNMYXl0dq3SWrhldDA","tlshash":"80a22af65350e6fae289c3e06a141a5d32a430fab5d18bfcc2da1c5178267ee403cdd6","size":22126,"data":"","first_seen":"2025-11-23T22:29:02.346599Z","last_seen":"2026-02-15T01:17:16.707191Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cadc16f8504f58e6bdbbae052ba1779a","sha1":"22f961456cbaedd3afcdfbb61add7aad4da2a3f3","sha256":"054afaad641a7f18a0714d54c8915754d06962a24e7876d092a94e7df6e79abf","sha512":"98aea915404db37bd211995d3292a3162f4e19b5183d283c8f5e2152ba376c3c639f513f0fad1ad507a6e9c9a8c804b7ceb8afc548bc81e01398e5ec864440be","ssdeep":"6144:CYmlQVRAJGjYL3+qYktlCGsRLMRtH25HQDZOICufj/uAc98fDu3filyNzXKEt5/Q:CNKE+dktlCGsRIH25HWL2AcZfVw","tlshash":"da055aca73d0b2f953d663f4102b1102733a387a7819d948f17dc9da792688a417fe7a","size":804189,"data":"","first_seen":"2025-11-23T22:29:02.333717Z","last_seen":"2026-02-15T01:17:16.71105Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a16fc5b0e86ac2d1309256f10f59491","sha1":"290cabef0e35adb329612be19f9f056fb602fd0d","sha256":"c298933c2292984a435faff34de2254d6ee019656066fda85ec3a1b1ee6132f6","sha512":"ce03d2a79c6cff648e748b011760296138598385a645627dc6fd7ce6c4236f6c1445777373eac8f41e7f7a9a951aacdd26c3a8f732e58c8644d24b6148976ee1","ssdeep":"6144:tvU9v7+UcJ1Pi4pFeTEYOh8ymRJCa/EXPpPhmXds+y/pXnFfpG1CnKks6L/:xURjY1aImRJCaMMsH/pXnO1C3s6L/","tlshash":"a7255bca33d0b2f653e662f8502b1102733628797c49c984f17dc9da7a26d4a417fe7a","size":1036672,"data":"","first_seen":"2025-09-22T15:23:50.016858Z","last_seen":"2026-04-29T12:07:41.727223Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2f91a16a4e33d9423b2ca5dd0841146","sha1":"cf9157182f1cb2c6823e8f7b5d96a3bc31b88bf7","sha256":"414bbc8cd4f349ecf949b34bcf0b99830ac50dd2e965103a60796fa317983e37","sha512":"20da47c2df283ccff5ff6bb6f74afd7b4cafd432aa5b2c613962f4ecf88566d2bb7fd32c2118ae49d0553eeb9e3818d518557c590278a416b976bcdcfed09a8e","ssdeep":"","tlshash":"bc11041993a9e8913e744caeb54b3733511b089cfede26e89d9a6160240fdc743315bb","size":1037,"data":"","first_seen":"2025-09-22T15:23:49.984388Z","last_seen":"2026-04-29T12:07:41.817718Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"3541180806fce4ecb4587985d31afa61","sha1":"17a3173a0b65349ae1197b99b6bf992d7ff80cdd","sha256":"1f35613bda9f7f6fedd04fe61f55b923342e667aa7c48e794f09571ab2b4d434","sha512":"bb715a36cc193bd874821e8193f6479e1ffeea3c50adf6d350ca23d278c3c79d5d2fbbcaa8bc88b2d94904c9532dc2549b81870f529b3039c1ef0c8255a1ed98","ssdeep":"768:s3FTKOQTaYuE4iIoMsgTKOQTaEuIow48/so:KTKOQTaYuE+TKOQTae4Yso","tlshash":"e7430a1507c55d1a0e72726cb48bb797d2a908a8e7c6cf5873ae840439e1f95123fef8","size":59753,"data":"","first_seen":"2025-11-23T22:29:02.514462Z","last_seen":"2025-11-24T15:38:31.245903Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/pages/homepage-dap-es6-page-9115d1d433bf93ca9e41.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d35d32247f873232799a727d231c5bf","sha1":"fca8756130015a2761a15fa3b300c7ee57f4e576","sha256":"87be3a7dc5c5c677d08441507decc486330d839705113bd0c0b40aa290cc719b","sha512":"2a58c58f395fb094da367f62f0402c989b08aaa05e03ac4616c5674103ae65050beb3befc5f6467028fed420c3efc46a98ee2cf730e80055fb00c88ee91c6cb9","ssdeep":"12288:qF4EkaRUMR6pTPf3a3jG8C3HXvhRq+Ix83bB4:qFzpLR653a3jG8C3HXvnC83bi","tlshash":"27057cc832d4b07a17eb29b5e02f5206b2746c55784ec440f49dedc93e6a90b92b3f78","size":826882,"data":"","first_seen":"2025-11-23T22:29:02.336375Z","last_seen":"2026-02-02T22:49:09.146143Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.102.js?utv=ut4.48.202511150118","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d8960a0cdb51d89dc43be0b903c55e","sha1":"319b56ff5c0901659d81c5fe7177133a9a592ead","sha256":"829fef4de3bac3656043f396ece5f41ddfd770e95477b9a55d050da987ebdb1f","sha512":"55759d80ee2afedb403d4f92de06238e3bfe8e3bbb3c0f9315db94c1956f5b6f316aa03bc0211e618f729331edb00913f2b03dbec7039a3cef68cebce741d590","ssdeep":"","tlshash":"3e81889e7fdc023e6e695786b95fef1c31e17133398258118298cd489b89acb8475e0e","size":3836,"data":"","first_seen":"2025-11-23T22:29:02.44374Z","last_seen":"2026-02-20T22:41:29.183809Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/authhub-controller/authhub-helper/1.0.0/js/authhub-helper.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13e80fd3861714ed2dbe681784c7a9af","sha1":"ff0fe84050163e394e517c282278078af62774e1","sha256":"ba007a904083bfdf2cd0a68b1b044ff20654d1f7a83303fe82edb6f0dd3714d4","sha512":"90d2658e3e43977dcd10d7dc2fafa8ed175c7b23c333753398a977e19d05bb63d9d31f57297de77b07f39240edb06067be204ae4ab6131c05ab002ea7dee324b","ssdeep":"","tlshash":"f621af557eb88a395f90924b1477ffca923234958f87e04468a9745b1b60f820b68efc","size":1364,"data":"","first_seen":"2023-06-02T13:50:52Z","last_seen":"2026-05-01T18:56:55.115733Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd877b7d35ef816c38b9da3c533b66c5","sha1":"9ef5fafe2567e240b57b13d141ca2394313bb9c9","sha256":"e2e6dd72748ff902931218094622c5290a426c467b9a916bd1145d16e42613df","sha512":"07d0a4dd6b5c4827a2ce6c7309c4fc04606357c605c6b8182b951a3bcfe6ef88e4ae2b0fcd6603b8019c89913584444d2147e570e3886fae042e4886ed8b1bfc","ssdeep":"","tlshash":"57e0229863c2c8072b4d1e536de19aad203300570b5233c75f0e398c81f8883c900969","size":422,"data":"","first_seen":"2025-09-11T03:39:38.420427Z","last_seen":"2025-12-31T20:46:21.468367Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a62ad984d999fdb370a82838e372b2b","sha1":"c48170e94ee21f7409f42d6d38137396c6c8c5a6","sha256":"441ab829bcf2a3c58d132b23acc26492ea1f8dccefa547854fcc89a7b40a469a","sha512":"89e894783f0501017eb2c1c772d87f0292728926e75bdcf51e5888112fc6a8cc3c364380284d77f7d9caca8ecabead0503750a90139cc93853d61ef5b62da68a","ssdeep":"","tlshash":"66c0c0d6f1dc172204f2343c52a400250c2300830c000443c83e9a41b424d1f887fed7","size":183,"data":"","first_seen":"2023-03-08T14:48:06Z","last_seen":"2026-05-08T07:29:23.237481Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/ugateway.html?si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197645369","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4243f9a146680c64784381689c4df904","sha1":"a59dbc3cb4a12d33cece6d517fd5a30332050738","sha256":"2a1e7118cff798e0c00157cfc817aad2df5cea8d8cc6cc0790cdba74c479feb4","sha512":"120851f22c6ea99463879eb0c523567bf13630a8e172c6e6810e39718f53cb898982ac43cfab2561d5c85bd50a2fd816f1e2fe0c3dbd7f28e5a1e952ebc07331","ssdeep":"1536:t5CucLDylCfwwtUTaT3UfWaz7avhUJAsA70OH4tdUW3L49eQ8aBnplWPyfvxid4M:t+LDyEEGT3CWMP1Omhb49eXaBpcPMvxW","tlshash":"cd832adb37dbb03843a22c7056bf160bb2796d465c8dd4d8e154e4c039789a986bbf2c","size":88497,"data":"","first_seen":"2025-11-23T22:29:02.519531Z","last_seen":"2025-11-23T22:29:02.519531Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9513b4335e38da17f65af8dbe6e9a446","sha1":"2f06cd5955f9f0c0ab8172b1b27af5471b54eca9","sha256":"0081e15c248ae84b01ad243c5ebb36585ca045f4f195efefc5247f2e34c57844","sha512":"3e160437690312888f6dcb113683c8bafa70db3ea371370ab107c28553837c88e5cd0ecf90a573ea74395b4aa02bbf59d0f86fc742f80126ac5f196d91a8de1b","ssdeep":"","tlshash":"1cd0a9ba2fc29c2a80e37ac909ee8012906009202790c5308bab212b6c00da276bc09a","size":218,"data":"","first_seen":"2024-12-03T21:16:27.745204Z","last_seen":"2026-04-20T16:09:49.985539Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-internal-scripts-ea61e11411ef.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"813e2ffdadff5bb86ed01970e02c8547","sha1":"b74549b7bddc0dfc3603a62a3e03a8b058bd0355","sha256":"c2c3d48e28ea011f0ab9a35652e96052510fb2a9bb9a1afa923ae52729f5f65f","sha512":"0b96d6d8e0edece4c718f457750ed1a6cdafd687e75a6cab6f7cde0a62db9c5fd60a82d10f0432d029a353598b4fcd1c10c2dcb8ae1e345efff96e3679018f03","ssdeep":"768:CyBzd86TKOQTa+e++8dv+Pdb8Kynzg6iS2dJ7TKOQTaS4+PqTNAjezg1s8:rTKOQTa+e+fd+b8doTKOQTatTNAj/s8","tlshash":"1a434b108282ad378f61629da09f7e97436c04edf6c4cf5cb6dd91042adaf85907e6f8","size":59659,"data":"","first_seen":"2025-11-23T22:29:02.407202Z","last_seen":"2025-11-24T15:38:31.075319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2f91a16a4e33d9423b2ca5dd0841146","sha1":"cf9157182f1cb2c6823e8f7b5d96a3bc31b88bf7","sha256":"414bbc8cd4f349ecf949b34bcf0b99830ac50dd2e965103a60796fa317983e37","sha512":"20da47c2df283ccff5ff6bb6f74afd7b4cafd432aa5b2c613962f4ecf88566d2bb7fd32c2118ae49d0553eeb9e3818d518557c590278a416b976bcdcfed09a8e","ssdeep":"","tlshash":"bc11041993a9e8913e744caeb54b3733511b089cfede26e89d9a6160240fdc743315bb","size":1037,"data":"","first_seen":"2025-09-22T15:23:49.984388Z","last_seen":"2026-04-29T12:07:41.817718Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6ddfd85f01eccbec8ec95b5e7d2966","sha1":"a43bc2156275bb2892894b75a9855687bf039fab","sha256":"aeca3322ba7a7ba44af5418ecfd5e0a673579250586bd7866dcbaa77cb0f6628","sha512":"20141763b6b83b1fe0a0f0190eae6a1aa4c13f2f6ef6be26122b5676648082f13c959fb1e5ce75b25629c1436781df29fc92d3c9a54f90890d69394e946f2458","ssdeep":"","tlshash":"2011ccec2e75f67667a023672e1730091194ec44fe229188c366de803d12a75463bf65","size":1064,"data":"","first_seen":"2025-09-11T03:39:38.442778Z","last_seen":"2025-12-27T18:14:53.860271Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcdd1732bcfd45b5962b0ef2affda8ac","sha1":"81f4a48b57bef1a2e414112554fff507b17dada4","sha256":"52411c4f7fa3b8aec1900885b07bb404e595c0d880e90d43d8c8b96619bdc6d3","sha512":"17776c4e3ea6df31e2b51e7d7f360f0072c6a45a7d90c1d11c3ac299583ee7b4d75fbd68c74614f029e7634719a9f67c9b578feb093d22b4e2b20031ebeeb43f","ssdeep":"","tlshash":"5111ed9d2c4822f8079268e3687720d4f624cc043086d184b3121de8fdb1973d0a7af8","size":978,"data":"","first_seen":"2025-09-11T03:39:38.443989Z","last_seen":"2025-12-27T18:14:53.860967Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/robots.txt?x=https://bancanetempresarial.citibanamex.com.mx\u0026y=https://www.bbva.mx/empresas.html\u0026z=https://enlace.santander.com.mx","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"35a8e81dad26113c39e0c2079427bef5","sha1":"daf091a0570fae0eaf705892a082fa9a0a4a3587","sha256":"092f19de330fbb88db7a3cdc2c5486d8ecda08e6c50790c3a5a827f313ceb08c","sha512":"2c8d14d9b8f5de6900771ca63084105d5f76a7298e9793fad6fb5c31df9bf1573a4ca3216c79cb1181114f3a7e6a0afd0ae1d369e373be74d7d6c32778ff4648","ssdeep":"","tlshash":"09c012bd15f4403d50ea3121472b35053b3f51e1d00d95530f615ba05e815578b5fd85","size":185,"data":"","first_seen":"2025-09-02T23:54:36.216635Z","last_seen":"2026-05-08T07:29:23.232894Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688551656648","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d350fbf9b4d49ddc0ad9f3d44e5469d4","sha1":"3058983ad74720779ca8150ca0d08a332a4a6695","sha256":"f0c1b8adeea2e331050bf0b127434547a32ed2815ccfe37b246631cb0a7c62c6","sha512":"d67a5d0461c72dcfc1f226ee808485892f77d2359ed235f0af7fe36223bc4a00a5101847e9f416f745d35adecbb4577521b5eb89e768a99b6025bcdc1e9cacdf","ssdeep":"768:VQHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIK:VgfoEAw/A4nlT3jfQmW6XFfhtK","tlshash":"82c2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","size":28253,"data":"","first_seen":"2025-11-23T22:29:02.473574Z","last_seen":"2025-11-23T22:29:02.473574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-13T15:33:05.074729Z","times_seen":308050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-internal-scripts-ed046dbf4eb2.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"15d9d15a2917d97a032486826bfb0e05","sha1":"eeb00254dabf210f9492d004fa679eb52a3c56b7","sha256":"2d534008e872e6621b2c0020dee2e85999573563c371a340c59a2f2eecedf274","sha512":"3f839359c506e4a6e221dac329304d915a4631ca6af846302c41520b51aea92b18aef20fe4b03f599923cadeb33780773cf96ca8c3f4dc68f13a510bc50a0167","ssdeep":"768:tkDdvMUTKOQTa+e++8dv+Pdb8Kyf/a6Mc6vfFTKOQTaS4+PqTNAJU/aj5sg:uTKOQTa+e+fd+b8TaTKOQTatTNAJXsg","tlshash":"6b434c208a81ad374f51529a604f7e97537804edf6c4cf9cb6dda1442acaf86907f2f8","size":59996,"data":"","first_seen":"2025-11-23T22:29:02.358785Z","last_seen":"2026-02-15T01:17:16.651623Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c4925c0d1129cf666e5d71b92332053","sha1":"9c5455ea601bb44ac81ccc99c21ff826ee71a2d0","sha256":"ae4fd6b1430c0122d6c1818a6e4cfdd81145444a6d8cacacc852815c43e04223","sha512":"fc49529b4bf5f36a73cc4ac0b716feb01f21650d0ceaa5fd41a90263d4b89c16bb06052919290e9c53b3422ffa3f1db03d6f39cb57188d52e1f7c461fdf98b25","ssdeep":"","tlshash":"cfb0122826d0515404c045fdf00e8a02c80c213a405cf0610d90fcc1997106b002b6c8","size":94,"data":"","first_seen":"2025-05-07T20:25:43.598312Z","last_seen":"2026-05-08T07:29:23.255289Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/common-chunks/common-es6-components-d5ca4d04e8646a4cfe63.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9dac4ecaf3e244032c58e9d8dad0def","sha1":"12a3121aa2cbc349d37ab4c134c238f34f169b00","sha256":"aa9d11bb3361068da90abd029549784e9f13a07706d604cd7bdcda04680134e6","sha512":"985742c9e8161e8011dbd0a672258b6db98401694af24ec4570494626f480076f5834295b14454231c3734cc82f35b2475546533c60a791a8bf23dc7a8d666e5","ssdeep":"12288:PjXGRHSQWAq1ow6PCKez8R6c5SwWOQSEERdtM1xToEGzEE+C:PjMJXwowqzj5tRR/oxbGb","tlshash":"faa55bc931e131ba63f626b5109b4246b330ed277c59c980f26cdbd5a7a2c0b9536f39","size":2211295,"data":"","first_seen":"2025-11-23T22:29:02.526397Z","last_seen":"2025-11-24T15:38:31.236881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb23aa405c5541d4ef5fb7d55d3fd0e7","sha1":"477f1abd59c54d35cb4fe022ac0948d2bbdc329f","sha256":"f360195fe3f79ede2d6daa4c7b93d1bbdb1446c698ef37cccb801e9ede8d9bae","sha512":"b78309f48b7d9a5b11717610ddf4c11af985f87193e11a1512bf59239c75892007ea63713267eb862c56d3b15b2042acf26169f85c5e4800a9f70c69d1cb0102","ssdeep":"768:2U9/xe2TKOQTa+e++8dv+Pdb84yd9M6gcyxBxTKOQTaS4+PqTNA7i9MfXss:NTKOQTa+e+fd+b83aTKOQTatTNA7Pss","tlshash":"98433a2046c9dd770f61a29e608f76d79268089dfbc4cf5cbaed900026c6f98527f6e4","size":58572,"data":"","first_seen":"2025-11-23T22:29:02.278992Z","last_seen":"2026-02-15T01:17:16.639866Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688175979946","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d350fbf9b4d49ddc0ad9f3d44e5469d4","sha1":"3058983ad74720779ca8150ca0d08a332a4a6695","sha256":"f0c1b8adeea2e331050bf0b127434547a32ed2815ccfe37b246631cb0a7c62c6","sha512":"d67a5d0461c72dcfc1f226ee808485892f77d2359ed235f0af7fe36223bc4a00a5101847e9f416f745d35adecbb4577521b5eb89e768a99b6025bcdc1e9cacdf","ssdeep":"768:VQHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIK:VgfoEAw/A4nlT3jfQmW6XFfhtK","tlshash":"82c2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","size":28253,"data":"","first_seen":"2025-11-23T22:29:02.473574Z","last_seen":"2025-11-23T22:29:02.473574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca1f2029199165816abd6a381014abab","sha1":"441905bb111e776a9f055f2113ed7f50968e8eee","sha256":"34d099f652fa7d2b2ca34bf3373646e0c9808cb26a7958c2f5401ac1cdec24ab","sha512":"bc7c4aa1a85a7f621cd9ed811e2894b37cb4c53a189371c35d5200d69f0349cf392b3c703d2d36eacad32b413ef78371386331a1b3ebfb787a9a5644973bd974","ssdeep":"","tlshash":"1821e0fc6eb968f5037127e27d17101a9390fd063a2e856d9013e4807da983d822bb65","size":1435,"data":"","first_seen":"2025-09-11T03:39:38.449004Z","last_seen":"2025-12-27T18:14:53.865666Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=d87fa48b0719da8a8bd1f42810f6de5e7fc753d992b9bbc78d63d0204e1056a2\u0026s=677\u0026ti=5.57\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=wtdxwqhigyykpinx\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/ouu?h=d87fa48b0719da8a8bd1f42810f6de5e7fc753d992b9bbc78d63d0204e1056a2\u0026s=677\u0026ti=5.57\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=wtdxwqhigyykpinx\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 70\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"a0eb1c4372c577e9a104a5d8f1cc0bb5","sha1":"1cfcea723d0f1c421c1054f47e2a1f95f388fef0","sha256":"520b3bd84187486ce044731bc9419912ca9bf645b91cf0d69874d546726335cf","sha512":"a32222ccaffbe460a6ad75d84455bc40b0008709a0ce0a3d3ed5aa9e1cddc7bc08a969ca7d3cb91c6108b7f6e6652958b5ba654e978e4a227358f661d89d3f21","ssdeep":"","tlshash":"62a0223f000f0220c00002820ebf082e0830cb2a0e8820c08a003c20f23a030022fc82","first_seen":"2025-11-23T22:29:02.221845Z","last_seen":"2025-11-23T22:29:02.221845Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/css/homepage-dap-page-fd76a2f41956950fe221.m.css","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/css/homepage-dap-page-fd76a2f41956950fe221.m.css HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:12:47 GMT\r\netag: \"1894b-6433411428a18\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:02 GMT\r\nx-boa-requestid: aR04yuMk-dRbvBhAPAQRlQAAAac\r\ncontent-length: 11804\r\ncontent-type: text/css\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22999)","md5":"2cab3e29bcc1e2da8d0edd3930252662","sha1":"2ac54325b1ceeef29cec3c3b609ca2f4184536c6","sha256":"2d3ec9c821e72dde1fd04f3bd04851aef38cfc81ca1dcc65f4cb79c409b2925c","sha512":"729a6fd783af696542989511c29b1bef81a67f051123aaf96a10ba66d196fd5c0e059a8dcf77f27d783a060e2ad793b4805a5d0c5460b1c84ca36cf157358986","ssdeep":"768:/ejy/3Ucy/94y/jUgy//y/ry/Xy/mUy/xy//y/Py/O9qB1+YcJUEGS1toCLdS4Ud:/eoU9UNF9Z3Ldbn0zCvIEMB","tlshash":"f7a334825f58207de07b025fe8016449bf59b8a6fb035deeeb0c9055edd798b32262dc","first_seen":"2025-11-23T22:29:02.224574Z","last_seen":"2026-02-02T22:49:09.315972Z","times_seen":6,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":187,"dns":156,"connect":2,"send":0,"wait":13,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/vendb/6.0.0/js/vendb.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/vendb/6.0.0/js/vendb.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:16:28 GMT\r\netag: \"135cb7-643341e6c51e6\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04zhf8a_lAUzeoTznv1AAAASc\r\ncontent-type: application/x-javascript\r\ncontent-length: 242143\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1268919,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"13df5d64e3dc5e16e948183520e14210","sha1":"f8fa49f3fa4a8f31d006977e7da9eca95d23c7e6","sha256":"ac4264c3cf1352585222257b033143be7f0047202def6f6530844b7192cac890","sha512":"23b61cdced6873d752d86ecafc8ad3c04b8eff53d70bdf62ceef76c65d55f3486a7c345f257def48247877c23677e8d97ba9a80756230a57cffee17b27552355","ssdeep":"6144:nD8UvxKQ2WRU2Z+oahFPpE1ancvzBdHygbsxZgBbbz8LtXYXp+ZGeezuF7o4AU1J:Xvxf8FOqg+QEREO7sAr3c0rxazu","tlshash":"e725088cb291f03147976266413f050bf2396865609a94d8f679c8e9befc8dd9233f39","first_seen":"2025-11-23T22:29:02.227197Z","last_seen":"2026-04-29T12:07:41.803542Z","times_seen":17,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":152,"dns":88,"connect":4,"send":0,"wait":45,"receive":8,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rail.bankofamerica.com/30306/hover.js?dt=login\u0026r=0.5547464570655793","fqdn":"rail.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.20.46.252","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rail.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:A4:58:C9:CB:45:82:FB:7D:A7:CA:12:BA:66:5C:47:E9:56:2E:C5","sha256":"DF:0E:7F:C5:28:60:7C:BD:CE:D7:06:42:AF:3B:25:C6:FB:26:E3:CF:B0:18:F6:15:58:7C:48:BC:0A:5B:2D:AA"}}},"request":{"raw":"GET /30306/hover.js?dt=login\u0026r=0.5547464570655793 HTTP/1.1\r\nHost: rail.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/x-javascript\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81062,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d0c20f0d3acb186cdbdf57709388a8e","sha1":"b2098f7ae780771fbfdc8d1700da31d8a365d71c","sha256":"fe85f32d39af9b73846fb295434733c56b23102af6b885d337cbb66b6c0dc8ad","sha512":"f6adf5931413bfaefcae2c4081ba4ad67641b1c8dfb81c11fc571fe9e0f81aaf91ac528770ad4177169bd6808af75b8e18f850fe22bfe325514ada60421ecb4c","ssdeep":"1536:4SCEd8xKucZt9OTT3ufmR0/fnEJArADONgiS8LQ9s77gkJzhAOqfaxX8wRGC8dhJ:4h4PMT3Ammn2ONpSuQ9sPTJzmaxXE5hJ","tlshash":"3e8319da33dbb03843e6287057ff050bb2796c525d8da499e154f4c43978aa8867bf2c","first_seen":"2025-11-23T22:29:02.22933Z","last_seen":"2025-11-23T22:29:02.22933Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":454,"dns":48,"connect":94,"send":0,"wait":102,"receive":0,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 20:44:08 GMT","end":"Mon, 29 Dec 2025 21:44:04 GMT"},"fingerprint":{"sha1":"8B:1F:BE:C3:41:B7:13:B4:FB:C2:88:AF:57:B5:54:E7:1D:EB:57:D3","sha256":"E0:2A:67:58:A8:54:95:48:0D:DC:50:DD:D2:DB:A0:19:5D:03:D3:89:A2:CD:41:C6:CB:7D:F3:4A:1C:B7:25:50"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9a3418d5193f35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-05-13T15:39:05.922522Z","times_seen":130403,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-b04d42b9adccb105c065.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-b04d42b9adccb105c065.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 01:59:33 GMT\r\netag: \"152afb-64333e1f01c6e\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04ngVmHhOP6N_9U7866wAAAew\r\ncontent-type: application/x-javascript\r\ncontent-length: 394909\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1387259,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"654514a98b52a88d305ba98cf2cccf80","sha1":"a9f921e7dd80a091485d16a909c739e5f1abcc40","sha256":"cdc678c0f48c9e06e0093db8074b2dab36ebf38742c60906491c58f15ff49877","sha512":"eaa55328f4a49894abf1c07d3db71b2857c1e27ed02d3290b89eb420d3ac2c091bb3e98a91827327f5c3e6baf9df5acd3126fa922fb60a46916813e2f2a8cb9a","ssdeep":"24576:VXmhtB262EhZ4CDfpitT8C/i94vW9DdCyyvjK9oPaRB+Zr/Zo:tmhtB262EhZ4CDfpitwC/i94vW9DdCyB","tlshash":"ed257cd973d072b657da07e0503b1102b33928b9b809d884f57dd9ca2d2698a41bff7e","first_seen":"2025-11-23T22:29:02.232629Z","last_seen":"2026-02-15T01:17:16.686986Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 06:08:24 GMT\r\netag: \"2d58-62660942486a9\"\r\naccept-ranges: bytes\r\ncontent-length: 11608\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044LtD9hF8bl9YDZqY2AAAAJQ\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11608, version 1.197","md5":"46b5329e8e4e5925129ab2c36b336d0f","sha1":"63cd5fbcbe5331e7d8059a4caee8d2510f834d68","sha256":"79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b","sha512":"6a0581147291985cdfa5ab87188e24c69c23c03c8803825364d4a2213e9c5e5a1f35c07461e3daf3e47856a23f005cf7714fc491a5388fd037a294803de85937","ssdeep":"192:ZB9RK+WMN2ruGOuYTBwsUSvS7S9UUaLiGp7SQ98g5LN:ZBDPWG3TOsULOi979Jv","tlshash":"3732c0f7f723e655e424733daa3c18872426f4415024c25858e795703da91ee7ca0fbe","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.641542Z","times_seen":438,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688551656648","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9 HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\nexpires: Sun, 23 Nov 2025 23:28:06 GMT\r\ncache-control: private, max-age=3600\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28361), with no line terminators","md5":"d880c1fe07e4f3c5d8efbff25306144e","sha1":"7b78bba791ec0290a116746dfb35a420acd2f4d6","sha256":"193a534463c1e16c0a66a65566f801c6516b2b4489ce709cc0687d17cb7ebb8b","sha512":"b064ed743ab06716dd900ac1371dc00b2630f1c1791b80d797a98c02265261fb73d1dbf767d126817c79eb53e9b898332ed72907ff9ca0a267936cc81c504b29","ssdeep":"768:/QHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIj:/gfoEAw/A4nlT3jfQmW6XFfhtj","tlshash":"e0d2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","first_seen":"2025-11-23T22:29:02.235457Z","last_seen":"2025-11-23T22:29:02.235457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=1892a4f8-bfcb-4af1-83b4-101dca4e8699","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:07.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=1892a4f8-bfcb-4af1-83b4-101dca4e8699 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1719\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1719,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.993+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.993Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"DEP-Checking-_-ProspectCampaign-_-DCB1QTCJ01_Highlights_NH_DEPCHA_2HDDA500_0825_EN_HL_CMS_DEFAULT_depcha2hdda500Enhl\"}]},\"list2\":{\"list\":[{\"value\":\"DCB1QTCJ\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 1892a4f8-bfcb-4af1-83b4-101dca4e8699-ffc763c8bd384a0f\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b430514f01e9716ac969600760d8c0e","sha1":"0707efaaee4cdb9ea2f2e1620537a750cf7ce1a7","sha256":"379485cdf6f6c987983a9b036c8fc83b29e7894a3b4fc5aba13a89103d15dc90","sha512":"6ec15750ae310e2d297cdef28237d3e936bc69f5b403e1087e084df2cd83402d1e68f2d001f8dc53cfa29020defa5bf4e93dc9f521b4a98436189ee23af365d5","ssdeep":"","tlshash":"95f055ca9a4abee408ef398161c7f67097963107d4cbc4041a90abb9c2ccac8300dd1b","first_seen":"2025-11-23T22:29:02.237227Z","last_seen":"2025-11-23T22:29:02.237227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-ent_edu_bac_7701865_608_en_gc_03-CSX30eb96bd.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-ent_edu_bac_7701865_608_en_gc_03-CSX30eb96bd.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 04 Apr 2025 00:53:12 GMT\r\netag: \"8635-631e94f8ce95b\"\r\naccept-ranges: bytes\r\ncontent-length: 34357\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:05 GMT\r\nx-boa-requestid: aR04zTVRGGprucsROmV55AAAAao\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x460, components 3","md5":"53f8ab3de7b9c1accd8938bfdca9d753","sha1":"ae5dc2f8bceb682a56f54fb3264f62d4aab19c29","sha256":"c7d879ddd79036bd07397b6bcc13f5d748ef499e223d65d6f1b1bf9bfec78c2f","sha512":"e518514fd946362c7413f4dffdb32d6a3cce10aa752cd1652244779ceadf6a9144507246dd7cddbaaa25358684911b1e666f99a7dc97f318500441a279c95e36","ssdeep":"768:/8ScWirIL6YfdVIBjaaR/lwzi99IYQb7o8/1sON+x:/8BWirY5S2aRyzYbCx/1sOsx","tlshash":"4ff20214ee0e629d84f3a118448b9db2e9003e5ad0fb0523fecd567565584b9f13d0fd","first_seen":"2025-11-08T07:08:40.755737Z","last_seen":"2026-04-29T12:07:41.882909Z","times_seen":59,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=b6228f28-2343-4446-9b0f-f479ef8a5d39","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=b6228f28-2343-4446-9b0f-f479ef8a5d39 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1679\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1679,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:01.587+00:00\"},\"timestamp\":\"2025-11-23T22:28:01.587Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"Cons-CC-_-Peros2025-_-CCA1HZKU01_Hero_NH_Card_Peros_Aug25_CMS_MH_product1Cta\"}]},\"list2\":{\"list\":[{\"value\":\"CCA1HZKU\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: b6228f28-2343-4446-9b0f-f479ef8a5d39-0e4e33ce9db04fc3\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bda6288c94c0d3714935d30de8804d3f","sha1":"25b67ab2f5da64b2294a5eb836c94c35b6aed2fa","sha256":"294a687ba4ba64759bc8c6d5b7302ef15e04c8ed2e0dd6050cbda0312563097d","sha512":"5c09a01afefe3cb54dd00b575880d0e13d0b52422b4f0785bbec4dcba9ecabb1768c4eb43ff313cb1fc4842a9568ef98235cf1ce8aa894b5bb5e5cb655d71e72","ssdeep":"","tlshash":"f3f05cd6895aa9d008db2d8151d3f6305b563103e8cbc0044a909fa2c2cdcc9310dd17","first_seen":"2025-11-23T22:29:02.239611Z","last_seen":"2025-11-23T22:29:02.239611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=869e7359-0d8e-452f-90e1-1f533f00e452","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=869e7359-0d8e-452f-90e1-1f533f00e452 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1671\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=VyuWXRIcujEEMieDcA7avD/72irmsLaSDskTlkdseFq03DDPxcTvQG3WH4tbaA52wcJFeF2Omc5pn9AP5OOvRQ==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1671,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:59.798+00:00\"},\"timestamp\":\"2025-11-23T22:27:59.798Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"MobileOmnibus-_-NotAssigned-_-MJY4LT2K01_YNIMobileGeneral2023_YNICta\"}]},\"list2\":{\"list\":[{\"value\":\"MJY4LT2K\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 869e7359-0d8e-452f-90e1-1f533f00e452-86cc1505db334406\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7428d1b4a22f20c5fb6f7cfd4389e54d","sha1":"43ac5fb2512d31e25ed20ec29b6203abe27e76e4","sha256":"f0552e4507e7f5c468b87a80b9871c9acaa1713de2a39b334d6daec8a9f144a0","sha512":"45938268d7e9286962b36286cf1b1c620ba43e2467f7341352deeeef71b1e446a8580b3df2becc7477bfbed2ad8c628b1bd4b0497a46439ff981cae56f33406f","ssdeep":"","tlshash":"c8f05cc64b59699108df3a8151c3f6745b563103d8d784441b60ab61c3cd9c43208d1b","first_seen":"2025-11-23T22:29:02.24097Z","last_seen":"2025-11-23T22:29:02.24097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=65acb405-367a-4c13-86b0-9cb6736565a6","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=65acb405-367a-4c13-86b0-9cb6736565a6 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1564\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1564,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"query\":{\"personalization\":{\"schemas\":[\"https://ns.adobe.com/personalization/default-content-item\",\"https://ns.adobe.com/personalization/html-content-item\",\"https://ns.adobe.com/personalization/json-content-item\",\"https://ns.adobe.com/personalization/redirect-item\",\"https://ns.adobe.com/personalization/ruleset-item\",\"https://ns.adobe.com/personalization/message/in-app\",\"https://ns.adobe.com/personalization/message/feed-item\",\"https://ns.adobe.com/personalization/dom-action\"],\"decisionScopes\":[\"BOA_HOME_SIGNON_BANNER\",\"__view__\"],\"surfaces\":[\"web://www.bankofamerica.com/\"]}},\"xdm\":{\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\"},\"webReferrer\":{\"URL\":\"\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:58.597+00:00\"},\"timestamp\":\"2025-11-23T22:27:58.597Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"eventType\":\"regionalmbox.request\"},\"data\":{\"__adobe\":{\"target\":{\"profile.BA_0021\":null,\"profile.BOA_0020\":null,\"profile.BOA_HPR\":null,\"profile.state\":null,\"profile.tc_lang\":\"en_US\",\"pageVersion\":\"DAP\"}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 65acb405-367a-4c13-86b0-9cb6736565a6-dd3c314935234de9\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938738; Max-Age=63244800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nmboxEdgeCluster=37; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nkndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nkndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; Max-Age=34128000; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3120,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8764308a3df1902f82431d914de35a61","sha1":"42217e8cd64dd78171d9e46604d01d984a824aff","sha256":"a0ebeeb1e76b257989089cfdecdc6d2d2e3209de6f2d4c6e60676774e442df92","sha512":"29d3f869d3d9c5f5aac3bba268913776adf463794c8ad6e6f100337d16d7e1ce1f18cb5726e117e305a2dcdc7d04503f2d55a2adc1634432f105aa17c85273cc","ssdeep":"","tlshash":"74515247d00d19ff8b5b795968c2ef4a91b82003f6c14a045dfcd7acc64ee87128a967","first_seen":"2025-11-23T22:29:02.242291Z","last_seen":"2025-11-23T22:29:02.242291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":51,"connect":31,"send":0,"wait":91,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-connect-with-us-icon-calendar-black-CSX14dc7e2f.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-connect-with-us-icon-calendar-black-CSX14dc7e2f.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:28 GMT\r\netag: \"1f3-635075b08959c\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04y9SJiUBSGlFskfU2XwAAAVs\r\ncontent-length: 317\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3c4be28c3229630f01c1406f68fd828","sha1":"6a64bb8ae03a7b0dfc2053986b4ae09ec47317dc","sha256":"c306d453a98ee3dac8128dd501c6dc4265b4cdf9a68b6a5546d7d1c40755a071","sha512":"21be278cfe9606db25ca548633cbe86fa6f0d4cbfc8df8f065fb7eeea3c27b8f57579b5641af497890e4a0bafcc98bb09d30731830216efa42fcb27a3dc397bb","ssdeep":"","tlshash":"91f09781860aaacfc20dcc70cb5ebd6662ac70c698c4037db8c0340880488f50ede2e5","first_seen":"2025-09-22T15:23:49.973262Z","last_seen":"2026-04-29T12:07:41.849267Z","times_seen":77,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_397_en_gc_01_-CSX4f4fc3b5.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_397_en_gc_01_-CSX4f4fc3b5.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:16 GMT\r\netag: \"38c5-642f6f85e4d97\"\r\naccept-ranges: bytes\r\ncontent-length: 14533\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04y5DGL-XmMnSytZsusgAAAN4\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 397x360, components 3","md5":"c52f0a98c8bd0d1920db39dcd765cb0d","sha1":"b833e79f282db15f4b5713281dae883fe101db0f","sha256":"40ce7fca6b13a4de76158d4a3f20c4044ec063a9cbd238a1732144619c49d8b7","sha512":"9ccc222ee7183e67f77d0566065de1d4e66d77cb9d897ab189606944a5855a472ba410ddae0dd48587f4bffd3307eb2ddca0d91715d120a39ff66e6b566bcea7","ssdeep":"384:qEJk/BPkDpfeZbxY/Ux9yG84v4zGxZ1JCnRWMSrw4+Hb2ZzI:qEJaBPkDp2xYc9P84yqCnp4+aZE","tlshash":"9f62d0fbb05a7a51f56f533251f0a7120b5b480e9930a22a4ce5a133e3ddac71bc35ad","first_seen":"2025-11-08T07:08:40.623884Z","last_seen":"2026-04-29T12:07:41.780799Z","times_seen":56,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_shl_dda_722_8080371_e.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_shl_dda_722_8080371_e.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 27 Aug 2025 00:46:44 GMT\r\netag: \"218-63d4e1f6fbec9\"\r\naccept-ranges: bytes\r\ncontent-length: 536\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:07 GMT\r\nx-boa-requestid: aR04zln1AZOOxPDIFlgMHgAAAiw\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 722x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf6f78035455b82870f5cdc3cf237a6a","sha1":"a87e528d869c89712e00f447b082252d2bbe1f10","sha256":"6092dbe42dad6d320584a66b80fd61113f6bdbfbcf4b9e27c7599b415fa51d5a","sha512":"bdb99445ba7b0e914102929078c99a82994c0d624f80c358d0543a659e000433e11d8cf35f5abc3664bec36a786dfbda1004758f8d455614a898c550a5fc0ebb","ssdeep":"","tlshash":"bdf0bd6f66c09c35c8052072a2df6e00facea22c16901ad9c7b10151866e4a5df2e80c","first_seen":"2025-08-28T20:53:11.564455Z","last_seen":"2026-04-29T12:07:41.809064Z","times_seen":91,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=102c70ad-75a9-4773-a981-4b36393a5fe9","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=102c70ad-75a9-4773-a981-4b36393a5fe9 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1679\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1679,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:02.667+00:00\"},\"timestamp\":\"2025-11-23T22:28:02.668Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"Cons-CC-_-Peros2025-_-CCA1HZKU02_Hero_NH_Card_Peros_Aug25_CMS_MH_product2Cta\"}]},\"list2\":{\"list\":[{\"value\":\"CCA1HZKU\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 102c70ad-75a9-4773-a981-4b36393a5fe9-342baf8136f742e0\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c6381a5671d8e8710f25e04575bef6de","sha1":"fa356f8165df8affcc894312b5dd9f6f4ae185a5","sha256":"a19d5ede3590afd9a0a77f535003011787f41a55851c2a75d86da3eedfe331d7","sha512":"b4136682800146efad357e0d1b7fcb380b9aad0db83ef5a67ff983cbd46f2c3f722e7f0321faef8dce194d865eedd5672041e1a124ea80b41532ecd758a471b9","ssdeep":"","tlshash":"98f0a3c64e057ad008df358151c7f5705b673107e4c7c0085b90af61c2cc4c4710de2b","first_seen":"2025-11-23T22:29:02.246969Z","last_seen":"2025-11-23T22:29:02.246969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:27:56.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:B0:7C:AD:57:41:5B:63:46:6F:A4:DB:CB:94:A0:C8:34:22:27:B9","sha256":"10:3E:18:50:9F:5B:97:BA:92:B1:7A:5F:05:38:23:6D:F0:75:C3:36:8C:94:00:70:A9:9D:D0:5C:A4:2C:96:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 18 Nov 2025 16:34:34 GMT\r\nETag: \"4978e-643e109f6ee2b\"\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:27:48 GMT\r\nX-BOA-RequestID: aSOKY5LNIkZKaT_3PfX41gAAAR4\r\nContent-Length: 48620\r\nContent-Type: text/html\r\nX-BOA-AFFINITY_COOKIE: WPID=C1S1; Domain=.bankofamerica.com; Path=/\r\nX-Serviced-By: /sparta/homepage/dap/--BDNionnBlZCYdOCbIuf1WA==--KcLyR3QJwAjzit6P9rtKgQ==\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.merrilledge.com;\r\nDate: Sun, 23 Nov 2025 22:27:57 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; expires=Mon, 28-Dec-2026 22:27:57 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax\nFPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; expires=Mon, 28-Dec-2026 22:27:57 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax\nWPID=C1S1; Domain=.bankofamerica.com; Path=/\r\nAkamai-Request-BC: [a=23.36.77.167,b=58217557,c=g,n=NO__OSLO,o=20940],[c=c,n=GB_EN_LONDON,o=20940]\r\nX-BAC-AKM-C: ON\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":300942,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36385)","md5":"c5dc856d0e3001bc858dc1fa8ca7211d","sha1":"5cef85676b755134f7c474286fde42611a8dd218","sha256":"bbc5ead1831b38f5fb5bd8d5ef2f08e11760f779632db8a4740fb60a089197df","sha512":"a93184b3c3b190c19f96ad639111f191f2581ff5cdb7777e59fda0f4d1dac32401eee72c50b10a7ec39ca9867209b022afae22991182e63431203532c7c944dd","ssdeep":"3072:PVNTXNGLB9ANXNsbwdX+FzNPD5eryTKOQTaDE+TKOQTal:PpG99qXNsneryTKOQTaDE+TKOQTal","tlshash":"3f540921c2b209770b6e3799b0067b85a6d7974fc3c18ffd55bd80582ed1c8a1d27aac","first_seen":"2025-11-23T22:29:02.248716Z","last_seen":"2025-11-24T15:38:31.102283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":494,"dns":482,"connect":4,"send":0,"wait":39,"receive":5,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_7701865_icon_gc_c-CSX55809c59.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_7701865_icon_gc_c-CSX55809c59.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 04 Apr 2025 00:53:12 GMT\r\netag: \"48a-631e94f8f69b0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 20 May 2026 10:02:50 GMT\r\nx-boa-requestid: aCxTSlHEJs0yCzR1__-FwQAAARM\r\ncontent-length: 603\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d90af29b14f1d5fbecde45e6d7bb472a","sha1":"7c5548b954bf216f785ad575f98d4294a877ad73","sha256":"5f40f62a9c9bc133e01d79637ca39d00da69e5aa9ad6f0aa2186d692d078aac1","sha512":"0aee3633d51c490e21dd2c92f53801cfdac6067864ff6a35ce5c215b89cbcea78391125c370bcadd17cb3bfe8f61b84f655bb3d69e75ac2b00c25881faef2228","ssdeep":"","tlshash":"47213d585b5e7049b0248afaf34ca4b83503bdca7211d4d2c39eae33d46103e0d01ee7","first_seen":"2025-04-15T15:02:16.314416Z","last_seen":"2026-04-29T12:07:41.876348Z","times_seen":111,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/whHMAUV7U9pm8LKFFwxf","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/whHMAUV7U9pm8LKFFwxf HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 9253\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9253,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":\"MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=\",\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"login-home\",\"requestId\":4,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4pxKQb1LMH2UiQO6oAuP-cDGQvxiYsQw2dz-BT6GNzERvfiLW8URMq_7mPb7YO82Yjjto1YBjlPfMhVbAlRuxVHFJyYFaJWASQjAGOHi9vDPRtpYDcz-PWcbbrTL9pPfss089FILW0NTmB97NYbrlh8TpMJGdgzDDZck_b4mL0Hg9wfE21cZfa00hX1G1d8UQh5bo0FZxT1DTorF1E23qZQzR9vEEpiamAgiefC2Lnp201rK7Y1ZFHRDshdu0jda2c2Si7wZ3xv1_kiwwDdRMLjnHGH7G_2WEjpj8FwmU7RsY7YbRqRiq-fQy4hSfPy3AmOK6hMN5MS-B9M9Yoy9uOj2AuSA9lqBRy_b5nwSgsO0kgFfKaNOMvXKcksoZ4dNmJ6tpFKRRTDhkdbyw628h-lUmPUuay4LGm1Gdat4uPkhqU=\",\"std\":\"gAAAAABpI4pxIwKQVvlVHvMVooXFsbTB74bqDoSN-iYZ-EwHZ57rmvi3Q-UnaDF8JYyaNbp2ck4AaHYj6Zd3WQZTvOJI-KxNJm6LNy31afXsgCla-yuq-YlAjj-PHDhjXIz-4IzJqeUL2-EAXBAgWl_RtoPMZgN4BZDXxRzMVUxW2OopvnTTKnCkHBhjGX6NEzK7BJki4Zvg667c0GIOx7jeMey-TzfTdw==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 709\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 650b23c6-41fc-44bb-bf7b-cd7f61da1c43\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f66a92d0dae6a1d36dc59a7e2e5bd1cc","sha1":"7495fcff02311d8a6f9f42cdd53a5cd71d3c2575","sha256":"a5477f2140d50a86ff9b66e344cd0e0a8cbebba651d8ec32cdb69cf82c7494f3","sha512":"332f3b9fad39719f71e3357f1b4d682c50ca714f9d9d238b2a99fceb90ce31815e5b2c9e1d0a90ab2745442720685b8f7945c7aeef6c58b820859fb00d9d00b6","ssdeep":"","tlshash":"c501992287178ced84a9a2f842ca15cc3fba0337934570c89d7ca8a5002006d9e39611","first_seen":"2025-11-23T22:29:02.255173Z","last_seen":"2025-11-23T22:29:02.255173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_397_en_gc_02-CSX2544dcb3.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_397_en_gc_02-CSX2544dcb3.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:23 GMT\r\netag: \"4114-642f6f8c334f3\"\r\naccept-ranges: bytes\r\ncontent-length: 16660\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04yzVRGGprucsROmV52wAAAZg\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 397x360, components 3","md5":"c016c9d884d503a8cc3e7c433603c0a8","sha1":"eeda36df0b8f00c0bdac3689b28ab688a989ff17","sha256":"a860aa010fe86cacc065c3b21339eee4f0cbfffa67c780157ea50863ad2b428b","sha512":"13d7eace506952f53fe92220fb680d9eb0b17a6c942927609a0a1b83c84b09428d731fd5cbae8c22fc6dda2dd72f3005160ff0d86ce7eb75f82a03596119116c","ssdeep":"384:qEMky7giqEb2ea3ibKtzgTCogMpliy4o1q26P2Mt:qEMlgil2rhPoXpcoVM2Mt","tlshash":"1b72d0ce5d6d4e06f1feba7630ee0f8ef66930d5b9a720b1948665a79b334213407b04","first_seen":"2025-11-08T07:08:40.697273Z","last_seen":"2026-04-29T12:07:41.794296Z","times_seen":56,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/otSDKStub.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-ray: 9a3418d39b8e56c9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60440\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DE23E7AF107FAA\r\nexpires: Mon, 24 Nov 2025 22:27:58 GMT\r\nlast-modified: Sat, 15 Nov 2025 01:38:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: DhWB+3uz8Gif24YzF01qow==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 204756a0-001e-00e2-4bd0-5577f8000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"2ec62ac4c63f61529793d41a4330158e","sha1":"80a1a1a671d15bbc34ffe8ab4c6f42d90f02bdf3","sha256":"681eaae69a02951f252cfd2c48507470218c13fbb4da68778d7584cad767ea00","sha512":"40f7adc1786f415a7d76e751002d1fff8ededcaf853e97f027e5ebe1e86d99af171dbd5b53bf2a09b63cd582494a52edaddca22c7616b9be9116ff9c3d7cd81c","ssdeep":"384:+hMpV6BJ/0vCaKI1d35gKuSVQhXjgZgun1nQU+m1sXH1z2yZd0m2o2nyfHLMsJ7h:+cQ993BSVQhTgZgu1nJ+mqXb8nyfH97h","tlshash":"f0e22c8ab141bd3443c2a1ac993f8717b23bb42d74c4c168b884e8f15da9c4f1577bb9","first_seen":"2025-11-18T19:57:41.708595Z","last_seen":"2026-02-20T22:41:29.186999Z","times_seen":23,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/GIS/ap/1.0.0/js/ap.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /client/helper/spa-assets/components/utilities/client-helper/GIS/ap/1.0.0/js/ap.js HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1; TS017f5af8=01b133515421a5cd75e1debc9b2cb21d1c5077e457f74bbfee32dcbaaed84dfe1f16dfda26ea9fa8bda5db15bb72a6c6689800b556\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 11 Dec 2023 06:52:19 GMT\r\nETag: \"1354-60c3660139d28\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=26920000, public\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKbwbS7JCY4tNPz7_nJAAAAIw\r\nContent-Length: 1702\r\nKeep-Alive: timeout=40, max=488\r\nConnection: Keep-Alive\r\nContent-Type: application/x-javascript\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nX-Serviced-By: ynMxr0WlI1enE8xHeszrkQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4915)","md5":"2b266983fa37435392d8e31f416e192b","sha1":"d9f83edc10ebfd455f908f2fad7379a5515d6018","sha256":"e06e57628e6b61532762d58a957b7ef153526a3b4859361e9584713a72d67358","sha512":"abf598cc55db2b112d043b5fd262766b3e2de5e7600a676647b6a7c5c0b16c8447ef8d8f23e438a3ca058693b98d6750f04d168ddf403a2529215618fe3571f0","ssdeep":"96:q8m5l7Dz0T4spSrdRSy9na+xzGd0ey0k+lSUMlIeohAmi5mX19onE:q8m5Vz0TJSBRSQna+xzLetk+oPDmlCE","tlshash":"c5a1fe5523200c5d237b9ba0be366dc6b8f16eb13c178013e91389d9fca8ba65f45b70","first_seen":"2023-12-14T14:57:11Z","last_seen":"2026-05-01T18:56:55.065798Z","times_seen":290,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/creanza.js","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boss.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:EE:F9:47:4A:F8:C3:44:74:76:64:86:4E:C4:D5:D6:DA:E6:6A:99","sha256":"7A:46:5C:B9:78:92:2D:62:C3:25:CF:A7:5F:CE:5D:BE:9D:A8:9B:A5:87:7A:C0:B9:A7:29:49:FF:E6:A5:41:D9"}}},"request":{"raw":"GET /30306/creanza.js HTTP/1.1\r\nHost: boss.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\ncontent-type: application/x-javascript\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79992,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cab9e582c10cf420488eaca4e1a6e49e","sha1":"1237e673b17ad23d7be2a24b967a94e1c085ec20","sha256":"b02fbd9430b64ba92d1a0b307bb474ea63571519afee93cd58407d367f65ea17","sha512":"b2dc4fcb9f4270e12a6ae29476d26d98afb268355cefae1b23474c9832ddbc618b3a081e6c817b6504ffecd018fe85875fdaea2583327b498f59079e5944b44d","ssdeep":"1536:Dz7+KETSv/c2aKiUT31fdrSIYaDA4AeOxy2X4LB9gO8VLqmRfmHlXgryCYxm7Nw:D/+KETSfBT3ZdGMOxTXqB9gbFrmHzyw","tlshash":"1b7308ca33dbb07943e63c7096ef0507b6396c925c8dd495e144e4c43978aa986bbf2c","first_seen":"2025-11-23T22:29:02.261806Z","last_seen":"2025-11-23T22:29:02.261806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1157,"timings":{"blocked":481,"dns":93,"connect":92,"send":0,"wait":187,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:17 GMT\r\netag: \"2ed0-63c0c43f9fae6\"\r\naccept-ranges: bytes\r\ncontent-length: 11984\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04nmftYkbdpiD03qqXQQAAAUc\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11984, version 1.197","md5":"50d39f33c7179280df5acb6a5bb2716b","sha1":"eb19d2940c727bb4e7f66e1e5c89ecff30725875","sha256":"a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3","sha512":"1bdb49e8017cb517cdeb9bfe217302bff0b4be62f6a7f7b4c7fb2cac262721f8643f2dbaefde8963f37da193335d48d772bb4a52c844b7cdc17e39b6ec99b222","ssdeep":"192:/JlWpOvK6qHAY/RI23aPI9T55Dsomu0eWAbkmmc6Xo6kN8SegX9oz8:/JlWYCvgIK23aPA55Qomu0eOmmbz8","tlshash":"4632bf9d5c72ebb0d9028cd91c9c1c63b2df4be6ec9163b264883e2f5281735c552353","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-04-29T12:07:41.720839Z","times_seen":333,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/globals/prod/utag.1.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/globals/prod/utag.1.js?utv=ut4.48.202511210113 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Nov 2025 02:53:57 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5UBy3Y7ZNWCgFjYYnWtHp_SyWEuzWxS7\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:25:19 GMT\r\netag: W/\"55d1be9c64b93b427ebf028950514841\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: lE_g2L0BPLJ4vRsb6iDYCSRR5qtuMD2sjIpsnoeE_FZXUhYp2P5cGw==\r\nage: 268\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":509962,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65428), with CRLF line terminators","md5":"55d1be9c64b93b427ebf028950514841","sha1":"5a8f5a541a06f86bb50d042dca17791cbb67c0fc","sha256":"e7863d94f68e3323f5bfdd361de8a27017cf69c776df7b933fdbb897b5771e34","sha512":"d5252cf8560d2499b4cfd3fc84532a2ac6b95abb17eea829473fba19e068e474b35d4a3987b92a446da62b15e6c941ca920fced817100ef9e7c29ea5b3877761","ssdeep":"6144:/p1qBvVbWzNYSYJFlBpvcVC1nsiTKI5QCmP1q2WCC6fQvhq:/uv9lBpv6ybqPo2yq","tlshash":"38b46dee364634770adb107690bf120962361a995c0d8090f529daea2c7dfca437bf7d","first_seen":"2025-11-18T19:57:41.628258Z","last_seen":"2026-02-20T15:16:03.957439Z","times_seen":13,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/hpsX7eirfKE","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/hpsX7eirfKE HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1004\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1004,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":null,\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"cd_auto\",\"requestId\":1,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4pvZ74inryE5BijmzU4jy_haci8mRRrc5ZnQt5vdfpbh2IhyNCnKfJUiqNGa15CjRFX_YX-W55DubvXvoBmoNS4BWKazuLAqdtR0HEo5QRNVt9-SHcgmUbpE3ciicN2tytEOzY1CajzZ1Llf8jPZLDzWFz79QiT45_FUVk3a9-4Szx0wEEIi-8QFd0A77VJiFA_YszgX9qKrtxs-6ZgMNToZlqq6cgogjrrsm231VMGpIQ=\",\"std\":\"gAAAAABpI4pvufUBZK45bCdA7lg2inyY2VsnPCFGuz6zzKpAReZY4AEjmESxJpRajBuT5uBAyfF2iamfiJMpuBtxQUuYfTi8OZnr1j7t7aDEHB2WDlpiL6H7o6FWTC4tGqU0ld8Kb51sMPQpwFJqgKfKacGFjQkSPp1zYM7DkZhNuU5DTR-54d6xzaqyMsFNisP2VQMjOG8uwxlKeEgKy_235Xf73emcBw==\",\"d\":[\"a1lbXJJYkpkcn5aZmpNSPGnSktzSzJSbRobmZsaWxmYW5pYGZia6pmaGJm5ubka6pkbmpromRpZuupaujk66lo4WBk5mbhaO5qZGk1YWpRaWphaXeKYwrspOrYxPLUvNKymesCY3v7Q4FcZbm5yfV5JaUeKckZiXnjpx2jm/y1OS92WUlBQUW+nrl5eX6yUl5mXnpyXmphZlJifqJefn6i9PTolPLC3JP+1UuVrXR1aBYQETAA==\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 625\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 60caaf57-1891-4dbb-bc40-a24c86268444\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"85a5ad884c4774fe777777c6014df743","sha1":"c4e7b02a393bb58253d69abb100624b8cfb93789","sha256":"acfb0020c527bf69a73ea028de8e9c7130d41f228b2044a539789b9e8a6fe927","sha512":"caf6cdbb7ac33ca9d949eda5f863793d30307a414741b69bff7f97e2a8e0498b4d3a90ebeac1665eb676e962b9a897ba01efe29aed4a3e81d9fd2eb29f2c0efa","ssdeep":"","tlshash":"18f062327fe8ce6160bdb00b380185752b3071a3410f0945ebef406c3917410ce6c975","first_seen":"2025-11-23T22:29:02.266475Z","last_seen":"2025-11-23T22:29:02.266475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"3d78-6184f9834df47\"\r\naccept-ranges: bytes\r\ncontent-length: 15736\r\ncache-control: max-age=26920000, public\r\nexpires: Sun, 09 Feb 2025 14:10:25 GMT\r\nx-boa-requestid: Z6i3UA2sBTCw1PEOOU82kAAAAAk\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15736,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T14:38:27.882006Z","times_seen":7531,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/globals/prod/utag.12.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/globals/prod/utag.12.js?utv=ut4.48.202511210113 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Nov 2025 02:53:57 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hSbDYaG3bjr2Ihg7DM9F_lt_nSQbrJ1y\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:25:19 GMT\r\netag: W/\"c592947dbcb48aa52b63c60de5e3178a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: s5qaKP4-yBjqCQJpUF3rClfmjnXN5psB0Qx1yJUwj8nnoFhs6BEsFA==\r\nage: 180\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":8158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c592947dbcb48aa52b63c60de5e3178a","sha1":"3c520ff2c2bf96eceed1a99367f3bf1a5eb1bae9","sha256":"73fb1cf78f95c4990bc7ba6e264f29fa49c298cf1575604da7f3bd83cef1ba9d","sha512":"800fda04a62a4da3fb23c6f89b87aea1db112e5a01f297dfa4c5dab647f12a2f47593fea70cebaa40874f99569a0573153d54929d070e3196c962bf307fcbe16","ssdeep":"192:TrHUkDIolkA9IUVI5BVgOtR4C2Vq0Q/LJKIogiCev3wFib:HPDjkoIsI5BuOtqOJKGiW8b","tlshash":"7ef1777c2fe9503b483a12665b6f510bf739e323a245e18539acd7200fb1a948cd6dde","first_seen":"2025-11-18T19:57:41.642177Z","last_seen":"2026-02-20T22:41:29.208699Z","times_seen":22,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:19 GMT\r\netag: \"2e18-63c0c4409d677\"\r\naccept-ranges: bytes\r\ncontent-length: 11800\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04ntg2danY63fZvpOIwwAAAQo\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11800,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.197","md5":"79e7bc718644146e98b5d55f19c8ed4a","sha1":"9d0c5c674b242443a055a654e1ef0fa0e31642e2","sha256":"d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7","sha512":"af5f4d73f30a061ae87a2b63a308010b96280183d80a94881bd55e5294b53a6c554df75d729a654287c25e130652b03cde18fe438436efcc034168a975218fa8","ssdeep":"192:EwbB9M9mm2OVIXmy2dA4Si9dTVJQh3AT6Ci/dA/KRNI2/7OTj2bKKagXFVH6Vr1P:EwbB9+uOVIg9X95nN6rzs2/7EybySb67","tlshash":"0d32bfaa074dd6b943c0d9f811eebbd670e6013f5d653fb4ddd864ca0222e068be84e0","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.699201Z","times_seen":254,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"2d6c-63c2eb9ab4704\"\r\naccept-ranges: bytes\r\ncontent-length: 11628\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:54 GMT\r\nx-boa-requestid: aR04_baO6gZbNji7H2vn3gAAAO4\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11628, version 1.197","md5":"01ed6e7ce19d38ecdeb6aefaa5b09de9","sha1":"74e17e5c8d95b15f82b51066cd65790c6e991967","sha256":"e7a245881b6946f6a5ce4bb8f6d47c7369274451a6b8cebf0d148834a1c87d5c","sha512":"ae86d8c7cc6e9559204a7cfe5ac0659dbb55b8c5db2ac556d9ff084cf475915ef85185dca64c09be3457d55d1c9fd430a35fb1d80020d4905587906defc76d35","ssdeep":"192:g/vmDwHexFlxTk+l3AHPmz9vH2hTxXhX8BaYgV2dMNvkaE1K/J1to/Vzp:gHmhxTt3AvoAhTBhMgh2dYvjEE/Qzp","tlshash":"f832b0f5a6f0a916e500db3650bb73b4b77e45b0ddd0a034fc2be00b864b6854647e7a","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.687283Z","times_seen":327,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-es6-page-4a7ab1cfa01b24f8f73a.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-es6-page-4a7ab1cfa01b24f8f73a.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 01:59:29 GMT\r\netag: \"57f07-64333e1b8ffda\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04n2oVVv_qP3H2oM265gAAAMk\r\ncontent-type: application/x-javascript\r\ncontent-length: 92348\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360199,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"271b190941ca892243fdf4dcfcd95738","sha1":"07d6d27d5f300cd6778e07289809ea35e44a1fcd","sha256":"95fd0b1c2b38e836561f77785f085cee2e9222d3721f8ecd8b829ef16a6dd0cb","sha512":"337840d9330c3b25f257d3c7cb81949733f462e41110eeecd7492c657ee8a37a5ca0503ce60bf81e749d21cc11e8cecfa200aaef4014c3f50e831eff1a36c1ca","ssdeep":"6144:W6kxks1/1jhskVSYPIkUA7z3xcWIgoUP0K:W6kxn1/1jhskbxcWLP0K","tlshash":"117418cd72d8f6695bcb6438e02f6207b2797c50a44dc014d8aaecc47c79a1e9273f99","first_seen":"2025-11-23T22:29:02.272476Z","last_seen":"2026-02-15T01:17:16.732852Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688175979946","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9 HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\nexpires: Sun, 23 Nov 2025 23:28:04 GMT\r\ncache-control: private, max-age=3600\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28361), with no line terminators","md5":"d880c1fe07e4f3c5d8efbff25306144e","sha1":"7b78bba791ec0290a116746dfb35a420acd2f4d6","sha256":"193a534463c1e16c0a66a65566f801c6516b2b4489ce709cc0687d17cb7ebb8b","sha512":"b064ed743ab06716dd900ac1371dc00b2630f1c1791b80d797a98c02265261fb73d1dbf767d126817c79eb53e9b898332ed72907ff9ca0a267936cc81c504b29","ssdeep":"768:/QHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIj:/gfoEAw/A4nlT3jfQmW6XFfhtj","tlshash":"e0d2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","first_seen":"2025-11-23T22:29:02.235457Z","last_seen":"2025-11-23T22:29:02.235457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/vendors/vue-bb2d465d2bebb533b21d.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/js/vendors/vue-bb2d465d2bebb533b21d.m.js HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:31 GMT\r\netag: \"20dd2-635075b30376d\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04zcXaJrfxW-V8Sq9HUQAAAX0\r\ncontent-length: 50883\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134610,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c9b09e894a3ae8d51fed9ea8173931d","sha1":"c2a51fa77cbff970ec1c4980eaf07e2b0cc156c3","sha256":"4b2b7150b63d04a5377b0a6b204069ffe173442cf2236f122fbde4d8b87874a6","sha512":"401624d90153b2c608b3db8a0c66dddfcd92b719654eaee2e9f9ab9c491166fb656e16a80edbb74b027a153be332b7d28d7f957df5f4932d30590be5e2931c80","ssdeep":"1536:/lrzT8iVr8wCbPdxDSpWlOPQAmX6i2rdsCsMfBZNFAmzbPQbazSY09KU:dr8iVr8wCbPdxC2OPYKiQdsCfFzDQw8","tlshash":"7bd329a87582b07223ea14e210bb1016f33e18697c0d94e4f229fddb3d7651951e7fae","first_seen":"2025-05-25T20:05:30.742551Z","last_seen":"2026-02-02T22:49:09.281586Z","times_seen":80,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-deposits-en-icon_cash.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-deposits-en-icon_cash.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 27 Aug 2025 00:46:46 GMT\r\netag: \"44a-63d4e1f881d9e\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 27 Aug 2026 00:47:09 GMT\r\nx-boa-requestid: aK5VjQV2IU3oKC2HbuoRrQAAAP4\r\ncontent-length: 594\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1098,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d3c6ae3512d501d70ce653d5dfb942c","sha1":"a9cefbc94005497ec4d5797b8a08c4235f0b9843","sha256":"6be3a236d163634b8bc3231850351e1bd7c4809ff97e0f413da24f436efc2113","sha512":"622e4d5a33439ea5c95055f21e9f2912a8a0612a669daef5221d8cddec66642c276f6ab34f35d6c3c4ccc0657f035acce416ce9f5847a7fedeeaac69e890dca7","ssdeep":"","tlshash":"e711ef4a8374ca7d4d94462caa4cd84ef1e0e413d228e290beaf2035cf0d9d45b1575f","first_seen":"2025-08-28T20:53:11.51606Z","last_seen":"2026-04-29T12:07:41.715227Z","times_seen":92,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa-content/v1/content?key=en.global-tenants.gt-unauth-footer-bofa","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa-content/v1/content?key=en.global-tenants.gt-unauth-footer-bofa HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-max-age: 1728000\r\ncontent-length: 3667\r\nx-boa-requestid: aSOKXm-uhnmjcj_0Z6Hd_wAAAfw\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=30\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9831,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0075b58dad3cd42e9ab08687dc3f1557","sha1":"08e8cb9a0d1c7c79c4f69954d82b98a8eff58ec4","sha256":"529c51df923baffc935e60f4eb60b5c4d61718c78510474a314ff2307249ae66","sha512":"67fd3bd0ba3e8294e175cdba43ecebb2db02705563c5fb03ee23194470d31e64b6354c89ad06068e942c1e9f2d55aee5f179ce280094c91869b975e3f76d8acc","ssdeep":"192:Htshtp2lesf8pkvQqomiCbbzu1cp+4efClS/zK5BC2r7/ZkYA11cE4nHqIYkyT32:NYpDZkvhT+p3zKXCG/ZUEyT3SibY83QH","tlshash":"4d12d9bab79841344bce4781afa7bbc4f2e760d5826e1c68d09d411c02c7b9cab71b58","first_seen":"2025-11-23T22:29:02.276519Z","last_seen":"2025-11-24T15:38:31.152599Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/on-demand/global-global-social-module-styles-afb8a96bcd0d93782d5d.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/on-demand/global-global-social-module-styles-afb8a96bcd0d93782d5d.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:40 GMT\r\netag: \"18c-63c0c4554846f\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04oJRTLX-MoCy4A6VZHAAAAOI\r\ncontent-length: 238\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (396), with no line terminators","md5":"03b5abd82b01b4062700d6e04b687f1b","sha1":"846959296988357d339691d5f8953e6017129222","sha256":"69d145b681ae09f8ecb1fb5faba46b5b6cedd9f11f252305ca716ece0fd35d8d","sha512":"333930ac3adf5a71de4c2d479f710b44f718158789e8ff1944d5636d3e40394fe632d7c155cae8bfd4ce993e935eb7853337f318ad7a176bc3a52536e02c5f82","ssdeep":"","tlshash":"ace068112cf2316a347d60fef0b765a40b5901f6f12d6ec07c3c74c4108aa6a02f20ac","first_seen":"2025-09-22T15:23:50.069839Z","last_seen":"2026-04-29T12:07:41.793536Z","times_seen":62,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:08:15 GMT\r\netag: \"e4ce-6433401122d0f\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aRrapJz3dXorg7toQfYQnAAAASQ\r\ncontent-length: 11229\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58574,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53044), with CRLF, LF line terminators","md5":"eb23aa405c5541d4ef5fb7d55d3fd0e7","sha1":"477f1abd59c54d35cb4fe022ac0948d2bbdc329f","sha256":"f360195fe3f79ede2d6daa4c7b93d1bbdb1446c698ef37cccb801e9ede8d9bae","sha512":"b78309f48b7d9a5b11717610ddf4c11af985f87193e11a1512bf59239c75892007ea63713267eb862c56d3b15b2042acf26169f85c5e4800a9f70c69d1cb0102","ssdeep":"768:2U9/xe2TKOQTa+e++8dv+Pdb84yd9M6gcyxBxTKOQTaS4+PqTNA7i9MfXss:NTKOQTa+e+fd+b83aTKOQTatTNA7Pss","tlshash":"98433a2046c9dd770f61a29e608f76d79268089dfbc4cf5cbaed900026c6f98527f6e4","first_seen":"2025-11-23T22:29:02.278992Z","last_seen":"2026-02-15T01:17:16.639866Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"2e18-634eb5b3efc13\"\r\naccept-ranges: bytes\r\ncontent-length: 11800\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044J6-8ekWgzmIzsC8kwAAANg\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11800,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.197","md5":"79e7bc718644146e98b5d55f19c8ed4a","sha1":"9d0c5c674b242443a055a654e1ef0fa0e31642e2","sha256":"d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7","sha512":"af5f4d73f30a061ae87a2b63a308010b96280183d80a94881bd55e5294b53a6c554df75d729a654287c25e130652b03cde18fe438436efcc034168a975218fa8","ssdeep":"192:EwbB9M9mm2OVIXmy2dA4Si9dTVJQh3AT6Ci/dA/KRNI2/7OTj2bKKagXFVH6Vr1P:EwbB9+uOVIg9X95nN6rzs2/7EybySb67","tlshash":"0d32bfaa074dd6b943c0d9f811eebbd670e6013f5d653fb4ddd864ca0222e068be84e0","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.699201Z","times_seen":254,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 07:27:43 GMT\r\netag: \"2d6c-62661afd30e0a\"\r\naccept-ranges: bytes\r\ncontent-length: 11628\r\ncache-control: max-age=26920000, public\r\nexpires: Sun, 16 Nov 2025 14:09:11 GMT\r\nx-boa-requestid: aRnbBphgMZz4fqgoVAdjogAAAgA\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11628, version 1.197","md5":"01ed6e7ce19d38ecdeb6aefaa5b09de9","sha1":"74e17e5c8d95b15f82b51066cd65790c6e991967","sha256":"e7a245881b6946f6a5ce4bb8f6d47c7369274451a6b8cebf0d148834a1c87d5c","sha512":"ae86d8c7cc6e9559204a7cfe5ac0659dbb55b8c5db2ac556d9ff084cf475915ef85185dca64c09be3457d55d1c9fd430a35fb1d80020d4905587906defc76d35","ssdeep":"192:g/vmDwHexFlxTk+l3AHPmz9vH2hTxXhX8BaYgV2dMNvkaE1K/J1to/Vzp:gHmhxTt3AvoAhTBhMgh2dYvjEE/Qzp","tlshash":"f832b0f5a6f0a916e500db3650bb73b4b77e45b0ddd0a034fc2be00b864b6854647e7a","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.687283Z","times_seen":327,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"3e00-634eb5b416536\"\r\naccept-ranges: bytes\r\ncontent-length: 15872\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044EHvkpfp1n_r_ocfiAAAAFQ\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15872,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-13T13:16:02.965059Z","times_seen":3785,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"2d6c-6184f98306e84\"\r\naccept-ranges: bytes\r\ncontent-length: 11628\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 09 Jan 2025 14:23:19 GMT\r\nx-boa-requestid: Z3_b1uK2jYw6yaNOnWRqCwAAAXg\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11628, version 1.197","md5":"01ed6e7ce19d38ecdeb6aefaa5b09de9","sha1":"74e17e5c8d95b15f82b51066cd65790c6e991967","sha256":"e7a245881b6946f6a5ce4bb8f6d47c7369274451a6b8cebf0d148834a1c87d5c","sha512":"ae86d8c7cc6e9559204a7cfe5ac0659dbb55b8c5db2ac556d9ff084cf475915ef85185dca64c09be3457d55d1c9fd430a35fb1d80020d4905587906defc76d35","ssdeep":"192:g/vmDwHexFlxTk+l3AHPmz9vH2hTxXhX8BaYgV2dMNvkaE1K/J1to/Vzp:gHmhxTt3AvoAhTBhMgh2dYvjEE/Qzp","tlshash":"f832b0f5a6f0a916e500db3650bb73b4b77e45b0ddd0a034fc2be00b864b6854647e7a","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.687283Z","times_seen":327,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"3e00-6184f9834b827\"\r\naccept-ranges: bytes\r\ncontent-length: 15872\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:32:31 GMT\r\nx-boa-requestid: Zz7wHvb2FvjBZiwgzaku2AAAAYI\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15872,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-13T13:16:02.965059Z","times_seen":3785,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/vendors/vue-router-95c3ec4fbf970b9fff0a.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/js/vendors/vue-router-95c3ec4fbf970b9fff0a.m.js HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:28 GMT\r\netag: \"9a5a-635075b0daa5e\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04zbVNVZy0NTttx8QepQAAAIM\r\ncontent-length: 14040\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39514,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (38229)","md5":"2d473ba498e57633c5071ff337c92797","sha1":"0d2ca1ed114a94ad45bee16ecb6de2ea4a837b09","sha256":"003b5694daf5fc870037e78b4fb6a2eb8daa2db322cabf37211420615d482d7e","sha512":"b41fefbd1db00853a7f2602589755b97e35b64a3147d484ca2c0a968e0ca54d1e8a9b3a46fc13f1c665c36868e83555790870a8a9dc7d7381209d74d7db982ee","ssdeep":"768:Jw1zoGYhvCK0WDk2ufj0irvHwg0WnBJviKb3Xs7Ek3qH9WMGawhO5lTDUiBD073O:ARgAH55k8p1O914t","tlshash":"5e03f8fa32c2703597e61be2417f2115f23648d6384d85d1f05cb9973c3399ac2abe5a","first_seen":"2025-05-25T20:05:30.821286Z","last_seen":"2026-02-02T22:49:09.322491Z","times_seen":80,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=f125c96a-e4fe-4ba5-9d0e-6f564c1dc4c7","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=f125c96a-e4fe-4ba5-9d0e-6f564c1dc4c7 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1345\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=002FF5ECDD0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938738; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1345,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\"},\"webReferrer\":{\"URL\":\"\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:59.113+00:00\"},\"timestamp\":\"2025-11-23T22:27:59.113Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"eventType\":\"decisioning.propositionDisplay\",\"_experience\":{\"decisioning\":{\"propositions\":[{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_BANNER\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}}],\"propositionEventType\":{\"display\":1}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: f125c96a-e4fe-4ba5-9d0e-6f564c1dc4c7-be755e74f32c4b28\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ceb5d4ff80f019cfa3f1d569e81da39a","sha1":"b441a3b2281b36c61094a2f8edef5107e58fe06d","sha256":"099f5190d9e55a7e64d3fafe6245ab12bd29bf9bbfba2034988e6892357d781b","sha512":"e5791e11c59ee70c57451ffd0e99cc18eda057627c7552c9427286ebffbb1818056ab48552c4cd3236aabe8d9275fb1f02940145bbc34bcf1d29fab1177865d5","ssdeep":"","tlshash":"cdf059ca8a19ba950cdf664511d3f52497a6314be8d784040ae19b65c2cd9c87208e1b","first_seen":"2025-11-23T22:29:02.282099Z","last_seen":"2025-11-23T22:29:02.282099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":2,"dns":0,"connect":0,"send":1,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"37fa-63c2eb9a95305\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04n1XEf3nAbTIO3xc3HgAAAQc\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"2d58-634eb5b40829e\"\r\naccept-ranges: bytes\r\ncontent-length: 11608\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044BQIgZxpCXuVDKDQdgAAAOc\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11608, version 1.197","md5":"46b5329e8e4e5925129ab2c36b336d0f","sha1":"63cd5fbcbe5331e7d8059a4caee8d2510f834d68","sha256":"79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b","sha512":"6a0581147291985cdfa5ab87188e24c69c23c03c8803825364d4a2213e9c5e5a1f35c07461e3daf3e47856a23f005cf7714fc491a5388fd037a294803de85937","ssdeep":"192:ZB9RK+WMN2ruGOuYTBwsUSvS7S9UUaLiGp7SQ98g5LN:ZBDPWG3TOsULOi979Jv","tlshash":"3732c0f7f723e655e424733daa3c18872426f4415024c25858e795703da91ee7ca0fbe","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.641542Z","times_seen":438,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:02 GMT\r\netag: \"fd180-63c0c4a35aa77\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044GftYkbdpiD03qqYQwAAAQ4\r\ncontent-type: application/x-javascript\r\ncontent-length: 298215\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1036672,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a16fc5b0e86ac2d1309256f10f59491","sha1":"290cabef0e35adb329612be19f9f056fb602fd0d","sha256":"c298933c2292984a435faff34de2254d6ee019656066fda85ec3a1b1ee6132f6","sha512":"ce03d2a79c6cff648e748b011760296138598385a645627dc6fd7ce6c4236f6c1445777373eac8f41e7f7a9a951aacdd26c3a8f732e58c8644d24b6148976ee1","ssdeep":"6144:tvU9v7+UcJ1Pi4pFeTEYOh8ymRJCa/EXPpPhmXds+y/pXnFfpG1CnKks6L/:xURjY1aImRJCaMMsH/pXnO1C3s6L/","tlshash":"a7255bca33d0b2f653e662f8502b1102733628797c49c984f17dc9da7a26d4a417fe7a","first_seen":"2025-09-22T15:23:50.016858Z","last_seen":"2026-04-29T12:07:41.727223Z","times_seen":58,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"37fa-626631fd92b2c\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: Z7VWZoQQYEFrA7MjOW1AoQAAAZw\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_3782311_icon_gc_a-CSXe06a7caa.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_3782311_icon_gc_a-CSXe06a7caa.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 10 Dec 2024 01:19:53 GMT\r\netag: \"fcd-628e0473b1c3d\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Sun, 15 Nov 2026 07:42:40 GMT\r\nx-boa-requestid: aRgu8AaCkkkpf2tqrT4SUgAAASM\r\ncontent-length: 1785\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4f9efa2f76d2a6b32821a97ea549aa3","sha1":"7d7bd551a8096c3adf35d56f86c9a479aa13a307","sha256":"b63612213eeb53cba043b7cb16913b8a9062454c44f012bba8dbf9d737f8480f","sha512":"7f687203c3c780d0b8e133c4d4990d68594a3581b0182288cdc296481e48d0224ec42aa64193b22eb9b585078ad8458f13a48a14b6c396e2e2c1e982cfb09186","ssdeep":"","tlshash":"7081968862bb86a2ff7d83bb03e05439733620503a405454bacead58df7295c492e8d7","first_seen":"2024-12-14T20:35:42.76316Z","last_seen":"2026-04-29T12:07:41.856887Z","times_seen":67,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-connect-with-us-icon-location-black-CSX4d415ed5.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-connect-with-us-icon-location-black-CSX4d415ed5.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:31 GMT\r\netag: \"31e-635075b2d68af\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04y4LyqdwtLmxu1FdeRQAAAVM\r\ncontent-length: 466\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":798,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32e0ef6c61213307f073d4f6dd6fb03f","sha1":"4394b396349ec4b94f19c0f57b804a65a53d7db6","sha256":"0b9b6c46940edba0738f01de840df0449b83c6c70d3dc9927acd7dfc6fbd4538","sha512":"4c4dbce278cb4927230a8655ae9892375c14587b30dcf2da7ba491b4390cb0361df7911d6d87935af597a71e99eeae83d311112d19dd03b773218ceedce94a17","ssdeep":"","tlshash":"ee016de0a338b06de6594e39ff7c7991618bf1f52dc44e84e5e1fc3410929ea2589415","first_seen":"2025-09-22T15:23:49.990519Z","last_seen":"2026-04-29T12:07:41.769646Z","times_seen":80,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/dle/bofa/main/prod-_-homepage-content-personal-homepage_personal.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /dle/bofa/main/prod-_-homepage-content-personal-homepage_personal.js HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 3\r\nlast-modified: Thu, 02 Mar 2023 22:20:41 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: nLbQyMlglyGoXodCndLd0t6DmRceuaJH\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 21:43:24 GMT\r\netag: \"b519d08ef66fd54910edbedba6181ec2\"\r\nvary: accept-encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: SdTXqsUGD1uI1JlIfvCEhYwBeupcf-_BiEWLVrPk-9oYnmypqY7_MQ==\r\nage: 2682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b519d08ef66fd54910edbedba6181ec2","sha1":"8d06436c33a3086259f2f1ccaf03425707eeff17","sha256":"101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860","sha512":"f7195d19d40b60aa9f992c5830f88dcbed7348521eeeb426a2544a18f9e13efbe4acfbf03d9a3961ae8174572e5aba28d9013ab6b4849a18ef35508b1e011c14","ssdeep":"","tlshash":"c72000000000000030000000000c00c000000000000000000000000000000000000000","first_seen":"2023-03-07T12:04:38Z","last_seen":"2026-05-13T14:42:09.288442Z","times_seen":6400,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/72e99fdc-3ef1-452a-9b02-e35228fa4504.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/72e99fdc-3ef1-452a-9b02-e35228fa4504.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9a3418d45c3b56c9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 56744\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DE23E7AEEFAEF9\r\nexpires: Mon, 24 Nov 2025 22:27:58 GMT\r\nlast-modified: Sat, 15 Nov 2025 01:38:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: 2wYLRwXn9HkQT7HHn4ryOw==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 14362b94-d01e-00af-67d0-55b11a000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5042,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e42ec7f05bd3b667bd6f5cbd8b6c7066","sha1":"155ec9e4f1bdd223a22de35b82fd71ed4a2c0cf3","sha256":"539d99df4bfd2b15830cb121168cb7d90d9fe7f30f01f809062c5c3c4b1bde29","sha512":"025788f20202c35268e8c3fa3c07bf8f89f654af0314fd7fb94a01f65857064d26f827aca9acac56dc4b2e3da9e003e9a2efa0c4f8c104068e450f7011197c0d","ssdeep":"96:npyIS440w1LxC95GKGa6AyEJLjejF3jEjqZPPYJyiz8Qm:FcpxC9L6vEJ/KFT0FErQm","tlshash":"77a15519b60c913ec79b83c4d42dfe098bed293311c5bc18d84f9c281a67fb7295a567","first_seen":"2025-11-18T19:57:41.647954Z","last_seen":"2026-01-02T23:14:16.801533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.48.0M.js","fqdn":"storage.glancecdn.net","domain":"glancecdn.net","tld":"net"},"ip":{"addr":"3.167.2.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.glancecdn.net","organization":"GLANCE NETWORKS, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:FD:3E:AD:64:4D:44:5B:1D:9E:96:54:66:E3:FC:93:12:95:4C:52","sha256":"A7:B1:DC:C1:4B:F4:43:4C:8F:FA:C8:81:0A:DE:51:54:2C:44:53:C8:97:27:2B:22:E0:85:C9:A5:E6:0A:CB:CA"}}},"request":{"raw":"GET /cobrowse/js/GlanceCobrowseLoader_6.48.0M.js HTTP/1.1\r\nHost: storage.glancecdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 30 May 2025 15:44:39 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 22 May 2025 16:15:03 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\nx-amz-version-id: FLNnqs_tpe7F_P1yX.yE5Y61XT5cooOb\r\ncontent-encoding: br\r\netag: W/\"1aa423d45977cc4a11e8b7df5906772e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: U2uyTiYTTu3NK6EvTUfRiubutExJiJrAi8ipAJ_yCtdlI3bFy97H6A==\r\nage: 15317000\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (931)","md5":"1aa423d45977cc4a11e8b7df5906772e","sha1":"95baf9c2b04548fa65660452e9baf80cbbd5827b","sha256":"b0ebf5cab8723817b93c6cb10e30fd4f875cd6272aa3bc6d2c07e8455b941540","sha512":"0679124ead7536c3412d81c3702b9c985576db762bcd0b28a27af4ab8e63b5b44fdd3a375e2bf839650ef9c2775ff273088e9e98292336113dd545ea9cd39404","ssdeep":"192:y4PpgnFuYt3Ytx+G1uGVj1BV5VNGt35D/st2sfatu74P+BY/Zp0Ul1xao631KwT4:ySpgFu45kuEpBHfGt3V/xuatu74PIY/D","tlshash":"b542e6be7751b831056660b3126f230ab53b69d7b889a404b189ccd03ca5e5b8377fed","first_seen":"2025-06-07T00:36:34.320293Z","last_seen":"2026-03-30T22:57:30.786379Z","times_seen":137,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":94,"dns":61,"connect":1,"send":0,"wait":3,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"3d78-63c2eb9acdd44\"\r\naccept-ranges: bytes\r\ncontent-length: 15736\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:54 GMT\r\nx-boa-requestid: aR04_f60GEm93jGA3XjxKQAAAeE\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15736,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T14:38:27.882006Z","times_seen":7531,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"2ed0-63c2eb9ab8d58\"\r\naccept-ranges: bytes\r\ncontent-length: 11984\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:55 GMT\r\nx-boa-requestid: aR04_njy0ZbSHitv_YjoxQAAAR4\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11984, version 1.197","md5":"50d39f33c7179280df5acb6a5bb2716b","sha1":"eb19d2940c727bb4e7f66e1e5c89ecff30725875","sha256":"a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3","sha512":"1bdb49e8017cb517cdeb9bfe217302bff0b4be62f6a7f7b4c7fb2cac262721f8643f2dbaefde8963f37da193335d48d772bb4a52c844b7cdc17e39b6ec99b222","ssdeep":"192:/JlWpOvK6qHAY/RI23aPI9T55Dsomu0eWAbkmmc6Xo6kN8SegX9oz8:/JlWYCvgIK23aPA55Qomu0eOmmbz8","tlshash":"4632bf9d5c72ebb0d9028cd91c9c1c63b2df4be6ec9163b264883e2f5281735c552353","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-04-29T12:07:41.720839Z","times_seen":333,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 06:08:24 GMT\r\netag: \"2e18-626609422cd3c\"\r\naccept-ranges: bytes\r\ncontent-length: 11800\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044LtD9hF8bl9YDZqY1wAAAII\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11800,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.197","md5":"79e7bc718644146e98b5d55f19c8ed4a","sha1":"9d0c5c674b242443a055a654e1ef0fa0e31642e2","sha256":"d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7","sha512":"af5f4d73f30a061ae87a2b63a308010b96280183d80a94881bd55e5294b53a6c554df75d729a654287c25e130652b03cde18fe438436efcc034168a975218fa8","ssdeep":"192:EwbB9M9mm2OVIXmy2dA4Si9dTVJQh3AT6Ci/dA/KRNI2/7OTj2bKKagXFVH6Vr1P:EwbB9+uOVIg9X95nN6rzs2/7EybySb67","tlshash":"0d32bfaa074dd6b943c0d9f811eebbd670e6013f5d653fb4ddd864ca0222e068be84e0","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.699201Z","times_seen":254,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_5449395_icon_gc_b-CSXa048e148.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_5449395_icon_gc_b-CSXa048e148.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 17 Nov 2023 18:25:32 GMT\r\netag: \"835-60a5d42fba3cd\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 20 Feb 2026 02:29:00 GMT\r\nx-boa-requestid: Z7aTbLvj9m9KQXT2TQrwlQAAAS4\r\ncontent-length: 850\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2101,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ff4c2d50c5e1de978803c9b5ae88edd","sha1":"2d14f274331dbde89d0e7b72509fd2541b73bb4d","sha256":"b7360fd9fc84beac6fa94df8eb06cdcf52cbae2654c1ff790f70b64f95047512","sha512":"724d40adc61c18174c55a91b9b11859bd55bcb6d0cb6c1c2220fd4026c46a8bab76534cfcbf514ded56343dfee1cf994040f04c2f5d583c2cc0556e61af65f24","ssdeep":"","tlshash":"c041fd5ce1378a74eb5896662bf03c2f723307916b928474fc8e555adba0c880d10ddb","first_seen":"2023-05-10T15:55:53Z","last_seen":"2026-04-29T12:07:41.761978Z","times_seen":172,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.108.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/main/prod/utag.108.js?utv=ut4.48.202511210113 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 01:13:23 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: gQiYqO1kCFIMhFr_e7_WaOUobNMb5cSB\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:25:18 GMT\r\netag: W/\"c5e70247692aa3480f8b3eb67226ced8\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: vfXlLZkOkyJ8BHN1ob9mpM8q1sTJcK2LHGuIFGGaHcMwZjT_pJYrGw==\r\nage: 181\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"c5e70247692aa3480f8b3eb67226ced8","sha1":"6a1aa75aabf1968f0346ebae8c6870cfeb9b93d7","sha256":"151c1f5bc0237e9d5bc2c9dcc60a860c10d6185c799d4bf501171955a13edee8","sha512":"66588b8aa58d38fb301b43aa1c6f87d4777ef54fa2c874f5b72c523ee64936f81738d9011d52723a15dca799863148a899d4b5c638b7ef0177a0a39989d27e4d","ssdeep":"","tlshash":"e54193253aa5613f99a0b1a1ad7fdf087272b1370e82442291d5cc8c9bc4ddd84baf0e","first_seen":"2025-11-23T22:29:02.292353Z","last_seen":"2026-02-20T22:41:29.18481Z","times_seen":16,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"2ed0-6184f98315ccb\"\r\naccept-ranges: bytes\r\ncontent-length: 11984\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:32:31 GMT\r\nx-boa-requestid: Zz7wHiFaLNczxZiRCglf-QAAAQY\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11984, version 1.197","md5":"50d39f33c7179280df5acb6a5bb2716b","sha1":"eb19d2940c727bb4e7f66e1e5c89ecff30725875","sha256":"a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3","sha512":"1bdb49e8017cb517cdeb9bfe217302bff0b4be62f6a7f7b4c7fb2cac262721f8643f2dbaefde8963f37da193335d48d772bb4a52c844b7cdc17e39b6ec99b222","ssdeep":"192:/JlWpOvK6qHAY/RI23aPI9T55Dsomu0eWAbkmmc6Xo6kN8SegX9oz8:/JlWYCvgIK23aPA55Qomu0eOmmbz8","tlshash":"4632bf9d5c72ebb0d9028cd91c9c1c63b2df4be6ec9163b264883e2f5281735c552353","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-04-29T12:07:41.720839Z","times_seen":333,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=170d320c-f95a-4d8f-9020-324b81f051f6","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=170d320c-f95a-4d8f-9020-324b81f051f6 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 4061\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=002FF5ECDD0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4061,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\"},\"webReferrer\":{\"URL\":\"\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:59.313+00:00\"},\"timestamp\":\"2025-11-23T22:27:59.313Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"eventType\":\"decisioning.propositionDisplay\",\"_experience\":{\"decisioning\":{\"propositions\":[{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_REGHIGHLIGHT_03\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_REGHIGHLIGHT_04\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_ENGAGEMENTBANNER\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"displayToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\",\"clickToken\":\"IoabmCVDJhziHTKmH3kaRA==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_REGHIGHLIGHT_01\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_REGHIGHLIGHT_02\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_SUPHIGHLIGHT_02\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}},{\"id\":\"AT:eyJhY3Rpdml0eUlkIjoiMTA4NzE0IiwiZXhwZXJpZW5jZUlkIjoiMCJ9\",\"scope\":\"BOA_HOME_SIGNON_SUPHIGHLIGHT_01\",\"scopeDetails\":{\"decisionProvider\":\"TGT\",\"activity\":{\"id\":\"108714\"},\"experience\":{\"id\":\"0\"},\"strategies\":[{\"step\":\"entry\",\"trafficType\":\"0\"},{\"step\":\"display\",\"trafficType\":\"0\"}],\"characteristics\":{\"eventToken\":\"o4FN6RvHuuxHtsVuiNIXfp3BNhkKdJh9FdggP2851yduUYXc7Uioa+oWIpLrUF0//aczykolnb4dUCw19kHL+w==\"},\"correlationID\":\"108714:0:0\"}}],\"propositionEventType\":{\"display\":1}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 170d320c-f95a-4d8f-9020-324b81f051f6-352718b617b74083\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"924813c4a96b8e236fe743c605f84efc","sha1":"456a43120b3ef9fb936a8b5651090af3fb2724ac","sha256":"58ac225d9c6db28c84b81ee0b3dc8bc9550e486fa42011c51f49165275a1b89e","sha512":"51cfb7d8fec09ffdd5356ac5cdf43db44d1b6f2d9afcf18d1ea63c8307e236f3f6d613aa27637bbe05bd578522c00e8a8eeeac63f20751417751303b600d84eb","ssdeep":"","tlshash":"b4f095ca8d19fd950cdf368056d3f42057a33107f4d780040690af75c2cc9c87508e1b","first_seen":"2025-11-23T22:29:02.294262Z","last_seen":"2025-11-23T22:29:02.294262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:18 GMT\r\netag: \"2d58-63c0c43fa4903\"\r\naccept-ranges: bytes\r\ncontent-length: 11608\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04nuHT1RBvahYVealSSwAAAHU\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11608, version 1.197","md5":"46b5329e8e4e5925129ab2c36b336d0f","sha1":"63cd5fbcbe5331e7d8059a4caee8d2510f834d68","sha256":"79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b","sha512":"6a0581147291985cdfa5ab87188e24c69c23c03c8803825364d4a2213e9c5e5a1f35c07461e3daf3e47856a23f005cf7714fc491a5388fd037a294803de85937","ssdeep":"192:ZB9RK+WMN2ruGOuYTBwsUSvS7S9UUaLiGp7SQ98g5LN:ZBDPWG3TOsULOi979Jv","tlshash":"3732c0f7f723e655e424733daa3c18872426f4415024c25858e795703da91ee7ca0fbe","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.641542Z","times_seen":438,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"3e00-63c2eb9acc5d8\"\r\naccept-ranges: bytes\r\ncontent-length: 15872\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:55 GMT\r\nx-boa-requestid: aR04_nWdqa-RvpqCP3xYogAAAXM\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15872,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-13T13:16:02.965059Z","times_seen":3785,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"2ed0-634eb5b4028d5\"\r\naccept-ranges: bytes\r\ncontent-length: 11984\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044P60GEm93jGA3Xjw1wAAAeM\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11984, version 1.197","md5":"50d39f33c7179280df5acb6a5bb2716b","sha1":"eb19d2940c727bb4e7f66e1e5c89ecff30725875","sha256":"a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3","sha512":"1bdb49e8017cb517cdeb9bfe217302bff0b4be62f6a7f7b4c7fb2cac262721f8643f2dbaefde8963f37da193335d48d772bb4a52c844b7cdc17e39b6ec99b222","ssdeep":"192:/JlWpOvK6qHAY/RI23aPI9T55Dsomu0eWAbkmmc6Xo6kN8SegX9oz8:/JlWYCvgIK23aPA55Qomu0eOmmbz8","tlshash":"4632bf9d5c72ebb0d9028cd91c9c1c63b2df4be6ec9163b264883e2f5281735c552353","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-04-29T12:07:41.720839Z","times_seen":333,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=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%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nt_gmwguappffxpm\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aero.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:50:33:9B:A0:50:10:C7:20:6F:08:F8:F1:5E:83:FD:B6:25:42:0F","sha256":"43:8C:AD:00:14:00:B7:A6:7A:EA:70:58:FE:C2:9F:8E:79:35:1E:1A:62:F5:F4:AC:E6:13:89:B0:8A:BA:72:F9"}}},"request":{"raw":"GET /30306/C5ib?d=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%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nt_gmwguappffxpm\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: aero.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 156\r\nserver: haile\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"ee4c518918fb22f0eba2a0fade2e34a5","sha1":"f5d921eaa31f13c207abcbecf31e6624a5aedf17","sha256":"38bcf9f5aa0eca86d7fbf4f4274830c68a9d1888f6c127547328479caafdb337","sha512":"47e0ea65397a266e4e56c7784c4b769c2f4b79c178e7ae8b2f8097b23b7a728c2b80b085bcc3044a30616cc3515da6443482831ec4f27d3b9f38ef7f40686306","ssdeep":"","tlshash":"74c08c5e5c188208968091cd0c2a9b69d8a7a11b8f1c48ce696a0d34aa328f4a906a66","first_seen":"2025-11-23T22:29:02.296535Z","last_seen":"2025-11-23T22:29:02.296535Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=bofa/main/202511210113\u0026cb=1763936878837","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/tiqapp/utag.v.js?a=bofa/main/202511210113\u0026cb=1763936878837 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 2\r\nlast-modified: Sat, 11 Mar 2023 06:57:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:18:20 GMT\r\netag: \"7bc0ee636b3b83484fc3b9348863bd22\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: y8BosECrC_oaLgiNTKVj_CbwMb1-K7fuk5aoerGFliGE0m0uOiNI9g==\r\nage: 579\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-13T14:39:55.169862Z","times_seen":30433,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-deposits-en-icon_cash-CSXce66388d.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-deposits-en-icon_cash-CSXce66388d.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 27 Aug 2025 00:46:46 GMT\r\netag: \"44a-63d4e1f8815c3\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 27 Aug 2026 00:47:09 GMT\r\nx-boa-requestid: aK5Vjb0snjPYXKF0rswMawAAABA\r\ncontent-length: 594\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1098,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d3c6ae3512d501d70ce653d5dfb942c","sha1":"a9cefbc94005497ec4d5797b8a08c4235f0b9843","sha256":"6be3a236d163634b8bc3231850351e1bd7c4809ff97e0f413da24f436efc2113","sha512":"622e4d5a33439ea5c95055f21e9f2912a8a0612a669daef5221d8cddec66642c276f6ab34f35d6c3c4ccc0657f035acce416ce9f5847a7fedeeaac69e890dca7","ssdeep":"","tlshash":"e711ef4a8374ca7d4d94462caa4cd84ef1e0e413d228e290beaf2035cf0d9d45b1575f","first_seen":"2025-08-28T20:53:11.51606Z","last_seen":"2026-04-29T12:07:41.715227Z","times_seen":92,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=4d446f5f-1659-465a-b1d9-a92c02e1f5ef","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=4d446f5f-1659-465a-b1d9-a92c02e1f5ef HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1672\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1672,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:59.453+00:00\"},\"timestamp\":\"2025-11-23T22:27:59.453Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"MobileSecurity-_-NotAssigned-_-M1T0LT7101_YNISecurityMeter2023_YNICta\"}]},\"list2\":{\"list\":[{\"value\":\"M1T0LT71\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 4d446f5f-1659-465a-b1d9-a92c02e1f5ef-2811d6f4dec249b6\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c118bf40fb8c0e2a29c9b63056952ab7","sha1":"b1ab38df1bd81f0e1bbaaeafbae879c8bb94c3e0","sha256":"fb560000207d94cdd820d5073438e155e39b86d81ae1f9637c4fe31aa8a43a80","sha512":"bd2d4c399a5a88d842052c49028657f93fa1dfbb4ca6ad78d390bd890976d50bd2b45d09a438634200012ad17b69b6ac5eab22b606fa5f70600da516f8b7d9f9","ssdeep":"","tlshash":"aef055ca8e59aa984cdf798495c3f968676a3107e8d780080ba0dba2c2cc8c4710de1b","first_seen":"2025-11-23T22:29:02.299658Z","last_seen":"2025-11-23T22:29:02.299658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/css/styles-53c6a281cd98b0bbf34b.m.css","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/css/styles-53c6a281cd98b0bbf34b.m.css HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:00:55 GMT\r\netag: \"10f9d7-64333e6d916fc\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:23:07 GMT\r\nx-boa-requestid: aR04G0HRiAdZcVx2LwYqgwAAAVk\r\ncontent-type: text/css\r\ncontent-length: 72445\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1112535,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c26bcde909c40936a4c54cd6b52aa8e0","sha1":"cd5632411454a64715ffbfb20f5c7cd54a973053","sha256":"a671943f0315aa1ebccab30b699ea6033bbf3f4493de58b3c2aeec17d16d9cad","sha512":"9a2c24b562e3b0f0f704dcbddd240821585b8924296f0667a73addfbfe84e172250d361f50b6fabbd9913d39c3c4242b17f767dbd6154f0d00890cd6ee19605d","ssdeep":"12288:9eH/KQRkz5mzL9e1hEnCfsUZCBkHXiBsx6yvcpKhCUBXsym55qq8mIOgQadSFth9:mBh","tlshash":"e4258b11be84b035e0768d1b739d78912b06a496fc428eddfc0871d8ddaf88f52299f9","first_seen":"2025-11-23T22:29:02.301687Z","last_seen":"2026-02-15T01:17:16.593334Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"2d6c-634eb5b3fde95\"\r\naccept-ranges: bytes\r\ncontent-length: 11628\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044LtD9hF8bl9YDZqY2wAAAPk\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11628, version 1.197","md5":"01ed6e7ce19d38ecdeb6aefaa5b09de9","sha1":"74e17e5c8d95b15f82b51066cd65790c6e991967","sha256":"e7a245881b6946f6a5ce4bb8f6d47c7369274451a6b8cebf0d148834a1c87d5c","sha512":"ae86d8c7cc6e9559204a7cfe5ac0659dbb55b8c5db2ac556d9ff084cf475915ef85185dca64c09be3457d55d1c9fd430a35fb1d80020d4905587906defc76d35","ssdeep":"192:g/vmDwHexFlxTk+l3AHPmz9vH2hTxXhX8BaYgV2dMNvkaE1K/J1to/Vzp:gHmhxTt3AvoAhTBhMgh2dYvjEE/Qzp","tlshash":"f832b0f5a6f0a916e500db3650bb73b4b77e45b0ddd0a034fc2be00b864b6854647e7a","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.687283Z","times_seen":327,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/fGBor0Q3MHCZRng","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:07.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/fGBor0Q3MHCZRng HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5865\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5865,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":\"MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=\",\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"login-home\",\"requestId\":6,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4p2-Yb-Ox6vPT19bpnoDyNnTfWjRdcdIeiv68NQIz7rW23C8udGG9N_ceDscjIHqWz1r0AlsIpH2MZw_ur4nyi0SCcExBCtURPspAEAy60KbNFc-xwYoRKo7mJABjO-SM2aW7KmA0m8M9pIoMGX5A1Z7JZfBddBSR7hFit81xtiHuyxvQ3uc9HHjFRp6i6duZetXCdeXoJapU9yzXfVHC2qGGpPwuv63tCtjo8IwQqGDx9qa83KA0w2z7OqiGwrIzxDlo1W9Hn4OWRAeq1OBdc8LQugX_VlcApopWoUFzx8YDuOToTwEgtHkwV_Sbp0xRC9pTPvEIoFXjmEWs9oExJvQafCae5TDeKy97OYSkZ4XtCDU_GvsPfjCBRnxm5SM5CHWJ-WLtBiPZxhBCNcO_BqWC8TEoD_ojOHsc4IEJuxVaI=\",\"std\":\"gAAAAABpI4p28XCVQVRvWPVSrQvmbx8RA4pqodeZFpIHTRCTTRRyS5Hy95kGxFHUJw-Ml_9cAjvPtE4eWCZmIctorNtUQLmwkrvvW6hdkKo5yFwzvdaKfv0GtYUMIUubeUkbCF9KYQUo77h1AkfQ14Y8l_8dQNtqTx0DjXk7KS4wCAWNQLpbKpM8A015PzF1Z-QS_OkW8Qa8xS8mO7J7Bb_mJQ4u2UjiDQ==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 709\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 4b19ca29-66f8-48fc-8b93-297b76bac47d\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7e112860c21989f8b3dbc9c3cb873852","sha1":"dbdf04bbcb3c297c5c0cf077675c662d9af5039a","sha256":"5f2e68bd56dea906c597ac8b109ee4e788d68c47aefbe860fda531b42173f505","sha512":"b95b44268188378ec8ce73c1ec00f8cdb820e0288b38b08d2e2d3756e5bc40156cc2b14590604d8cf1460b9ac15e3be2441b78fb24435cdd09374dc74152cd57","ssdeep":"","tlshash":"a501943a09261c5082f4bac7ec00e123aef04a3b83bd3bc06e9981401170b434c5bd76","first_seen":"2025-11-23T22:29:02.303687Z","last_seen":"2025-11-23T22:29:02.303687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"171.159.116.100/","fqdn":"171.159.116.100","domain":"171.159.116.100","tld":""},"ip":{"addr":"171.159.116.100","port":80,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:27:56.671Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 171.159.116.100\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 301 Moved Permanently\r\nLocation: https://www.bankofamerica.com/\r\nServer: BigIP\r\nConnection: Keep-Alive\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"F5 BigIP","description":"F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.","website":"https://www.f5.com/products/big-ip-services","common_platform_enumeration":"cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*","icon":"F5.png","categories":["Reverse proxies"]}],"data":{"size":300942,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":117,"dns":0,"connect":121,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-connect-with-us-icon-help-black-CSX12141305.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-connect-with-us-icon-help-black-CSX12141305.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:28 GMT\r\netag: \"76b-635075b08d804\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04y9B2VFqnHj8g35-tQgAAADs\r\ncontent-length: 888\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1899,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a6b685fd3838fd5a97c84f48819cca8","sha1":"bfdc4414ff9a272b89872a018afef338742aa3d9","sha256":"42b9bb37c867bcf69eedb0fa01f1957397f31b18c1d0d6f6d07461f330ee798e","sha512":"fa71fe701359c8f57d58be60586f211d7fc88fce417967baa7708039b3f2c1ae45268dfcfa77bff8841fe1a8fb26e5fc62c16fd5540808f6fd94bd1e8c085b0a","ssdeep":"","tlshash":"3041f3d037b950ecf184c716c3b031516a6f346776d08448faec6a88ef26cb9029e78a","first_seen":"2025-09-22T15:23:50.000586Z","last_seen":"2026-04-29T12:07:41.841734Z","times_seen":77,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/assets/v2/otPcTab.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202509.1.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 13910\r\ncf-ray: 9a3418d948ec56c9-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: hBJ/mZBbrRfY4Rl31TNPXA==\r\nlast-modified: Tue, 30 Sep 2025 02:10:08 GMT\r\netag: 0x8DDFFC67AB726C8\r\nx-ms-request-id: 50704487-a01e-006c-7139-523859000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nage: 56743\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68605,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"928a85670dda386903e44dca09a98b1c","sha1":"c828d721d476bde934f4e73f39e51c6e8d287f1c","sha256":"c3857b1ab751725690519410e64e0692e9dbd6af954f1ba74fca9b1b10b06705","sha512":"86cecb4a06cf9a43a54222637cdc61f94addccbf293dcb49f26381662874f146270b2e43d0292616d1bfae5dfee64ce846cbab7f5e02cef2b1dbc44f58b57afe","ssdeep":"768:7ox3MaO7Hu3uZSWGhsXpZXx2q3fOdcPOT85xv:W+HiwVt3mdJT8Hv","tlshash":"e463da9b7ea1530afee38b19eb926dd97120c81fbc335deef1024678868d3e18d51509","first_seen":"2025-09-26T10:39:51.915162Z","last_seen":"2026-05-13T11:41:19.675201Z","times_seen":758,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:52:25 GMT\r\netag: \"1c96-63c2eb3f9cf30\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:23:07 GMT\r\nx-boa-requestid: aR04G1aCj5o8d6hAkJvMVQAAAXs\r\ncontent-length: 2916\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40db11c8ecf6a87ed4c2e1c22c80c44f","sha1":"0aa261a4b0254f8374e11a34077067e6148505f2","sha256":"3f1ea5c409c0d00088df9790fa7698929b4b8d242ec4372ab83fa8c3b969c692","sha512":"4e22ebd0f0f31a97fd91737b78de4ef8509ed2c096f442d344bfd01ef7746dd33091e175b92fdbfe57b6c19431e27b1469d38a5e843c4e11eae5c3c6e6330759","ssdeep":"96:IBseL9TiKmOV9zpzP0WvcabQKBzlAJd1T2kzqTDJ679/vntY2HNe3aIc/vnKVD9S:IfvvckrBzmJdx2k2/J67p17teMySKs","tlshash":"00e175fbab3892dc19db5d4fef369aa8230eb4b9796784c1954eca755083dc4e603c00","first_seen":"2023-05-08T12:40:33Z","last_seen":"2026-04-29T12:07:41.819922Z","times_seen":291,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:19 GMT\r\netag: \"3d78-63c0c440c2c23\"\r\naccept-ranges: bytes\r\ncontent-length: 15736\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04ngVmHhOP6N_9U7867AAAAb4\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15736,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T14:38:27.882006Z","times_seen":7531,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=67dcdca7ff28396e53878a587166b8e8eee98c38e403768b8415c649d1852ee5\u0026s=458\u0026ti=0.362\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nfadvmtlmhdevliq\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/ouu?h=67dcdca7ff28396e53878a587166b8e8eee98c38e403768b8415c649d1852ee5\u0026s=458\u0026ti=0.362\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=nfadvmtlmhdevliq\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 70\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"143b624ad989f7d699d1af5d770a4d8a","sha1":"f66c90d71251f6eb5e79d7ee0af6b8346300b645","sha256":"29cd851b45dedbbd034715e674ac22f5d545dba909fa0c1a112c0bf9c0970ace","sha512":"6a5f8404f173cd4d3b0090f37c51ac8f5b1c8fb893bf9e42f701ef1ec186aea758912b5f0bdd829ab6ad57f9781b56f7e2dbb2674cfb096be2716ad26de6cb92","ssdeep":"","tlshash":"5ca0223e20080320e20000808ebf383a8033c33ccf8802c00c203c808e32030a00bcc2","first_seen":"2025-11-23T22:29:02.309605Z","last_seen":"2025-11-23T22:29:02.309605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/ouu?h=c2d30e706a23f0133c2ed6da4bd70515166520d28571991d3907665a22665f65\u0026s=567\u0026ti=3.559\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=vgzceeqfrk_qszqp\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/ouu?h=c2d30e706a23f0133c2ed6da4bd70515166520d28571991d3907665a22665f65\u0026s=567\u0026ti=3.559\u0026si=1\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=vgzceeqfrk_qszqp\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 70\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"c18644ac903727978108aacf05397dc5","sha1":"cdbc0cc61fc6751b11d15d894c1c7f23f69640fc","sha256":"bb3007af5cfb953c5d13050cf09e0866ae5c5f867f2b11bfd8de79f94928c3dd","sha512":"8545eb88cfef4256f001cb09bb3697256d1c9b27f2de7695d70f62aac784e1ec0614c5054bd4e8bf8c18ffbec16692ee7332ca3ea9bdc50e2da7cf467295c4d3","ssdeep":"","tlshash":"61a0223e8e000330c22003880c3f28280030cb280ec820c008a03c228032030008fc83","first_seen":"2025-11-23T22:29:02.311374Z","last_seen":"2025-11-23T22:29:02.311374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=57c34c43-8a32-41b8-8e51-7b2ec79af480","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=57c34c43-8a32-41b8-8e51-7b2ec79af480 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1726\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1726,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:05.918+00:00\"},\"timestamp\":\"2025-11-23T22:28:05.918Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"DEP-Checking-_-ProspectCampaign-_-DCB1HXCL01_Engagement_Banner_DEPCHA_2HDDA500_0825_EN_EB_CMS_DEFAULT_depcha2hdda500EnEbCta\"}]},\"list2\":{\"list\":[{\"value\":\"DCB1HXCL\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 57c34c43-8a32-41b8-8e51-7b2ec79af480-e0e0364e08af4aa6\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6c2891c19c7e210f2fe6d9487bbc38e","sha1":"626bc5e17b9164e3e5b613713a27843531c967f8","sha256":"b1446318a1762233f54ccd9faad3daf70ff68e66bd55e01384c85504ba0e8ec2","sha512":"879b24badfdbec15da3cf6875e382211c1aec0f69d3460f1f9f72bf6fa171ebf6105fbe6d978035540861aff1ab7469f7ca2b6fdc9dc94d99695e76a06fadf05","ssdeep":"","tlshash":"baf0a3c65b457ad008df359151c7f5715796324bd8dbc4040fa0ab72c2cc9c4700cd1b","first_seen":"2025-11-23T22:29:02.313351Z","last_seen":"2025-11-23T22:29:02.313351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/css/styles-9dd6f5bef7a2d3222d96.m.css","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/css/styles-9dd6f5bef7a2d3222d96.m.css HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:12:51 GMT\r\netag: \"fdfab-643341189b3ee\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:02 GMT\r\nx-boa-requestid: aR04yka4Gc25Of11LWlANAAAAH8\r\ncontent-type: text/css\r\ncontent-length: 93955\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1040299,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"0c7953eabc58bf89bd051ba0272918ce","sha1":"c5480832393587a585c045d1627b74c74c35ab50","sha256":"5de9f3f7ea3dfa26e7494040ccc68524f620229ce95fb2219edde5d299fdc457","sha512":"6c1f54568e90aa48ea0b05ce0636d14bf2794d0cbbe329802e8bcf2d554cd4d8a2fb0dcf7fba807cd5e4111c533b1a5e4e98ae1c9cd3e7d8bda2283babdca1e1","ssdeep":"12288:skjcf/j1gz43MLsw42NK/5IPUQyGkX5Hkz5mz1pZCaXEd4jd4jcBqSP8lgLlgLh1:6q1","tlshash":"28259850be987035e1bf4a2d678eb1821e0ab542dd631edeb9088444d9e7c8f6316dfc","first_seen":"2025-11-23T22:29:02.315441Z","last_seen":"2026-02-02T22:49:09.232293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":189,"dns":158,"connect":1,"send":0,"wait":15,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 18 May 2018 14:59:45 GMT\r\netag: \"1381-56c7c33d69a40\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 21 Nov 2025 08:32:28 GMT\r\nx-boa-requestid: Zz7wHLTb20mFIAWKVHMyfQAAAlc\r\ncontent-length: 1841\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d44334d84df12f4539734b402b40cc34","sha1":"c46223399876b228fb4d6b57b8b7c63566bf2b31","sha256":"1fb7690d7f2b1b600dbea5fbfce96198cae49ad0009fee412d96bc462a27eea9","sha512":"ca93b45566f89d7043b8794104ede03bfa69565c05983a5142d99e4ff915ccc313a8b38961ac247320361b2fd4f0fc0b80e140768df7bc290bbdac2a147e77c1","ssdeep":"96:5hGfj88ukTP2In2IWudi8li/ZIfO7fab25kh2FTXDssq37+fNbz8claDp:52n2q2pudzMZ+Mfab25khATqL+V38T","tlshash":"66a13e3dc714d6fedd5bcabcdf529064418e22cad0e18315a3b8c73961e51cfa80da94","first_seen":"2023-04-28T00:18:52Z","last_seen":"2026-04-29T12:07:41.765314Z","times_seen":290,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/login/rest/sas/sparta/ls/entry/v1/initContainer","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"POST /login/rest/sas/sparta/ls/entry/v1/initContainer HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAPP-NAME: CONSUMER\r\nContent-Length: 205\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":205,"data":"{\"partnerId\":\"7AB3CF1341CA460A84D1167C04F8F5E4\",\"filterRules\":[{\"value\":\"CONSUMER\",\"name\":\"PLATFORM\"},{\"value\":\"BOA\",\"name\":\"BRAND\"},{\"value\":\"WEB\",\"name\":\"CHANNEL\"},{\"value\":\"SignInIdPwd\",\"name\":\"FLOW\"}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nCache-Control: no-cache,no-store,must-revalidate,max-age=0\r\nPragma: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Language: en-US\r\nX-BOA-Trace-ID: aSOKb2-uhnmjcj_0Z6HfkwAAAe4\r\nX-BOA-SESSION-ID: mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA\r\nX-BOA-RequestID: aSOKb2-uhnmjcj_0Z6HfkwAAAe4\r\nKeep-Alive: timeout=40, max=493\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\nContent-Language: en-US\r\nSet-Cookie: JS_VIPAA=00006qD5ZVIFsSgvCqn-EzE13RW:1e2gi78sc; Path=/; Secure; HttpOnly\nJS_VIPAA=0000NAaXHXUsJ5jMXQdzbxUEacP:1e2gi78sc; Path=/; Secure; HttpOnly\nGSID=\"\"; Expires=Thu, 01-Dec-94 16:00:00 GMT; Path=/; Domain=bankofamerica.com; Secure; HttpOnly\nGSID=\"\"; Expires=Thu, 01-Dec-94 16:00:00 GMT; Path=/; Domain=bankofamerica.com; Secure; HttpOnly\nGSID=\"\"; Expires=Thu, 01-Dec-94 16:00:00 GMT; Path=/; Domain=bankofamerica.com; Secure; HttpOnly\nGSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; Path=/; Domain=.bankofamerica.com; Secure; HttpOnly\nSPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=0014A3DCD60069238A6F; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\nTS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; path=/; domain=bankofamerica.com; HttpOnly; Secure\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: vRjRlmRh1GTl20m2QmEGnQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nTransfer-Encoding: chunked\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":618,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"702627fb67b54eca84a5f94de47b9442","sha1":"b8b9200fd4d7c42b74a0e84783673488e16aaa63","sha256":"b79ca1fdaa8fc032a9a9018bfc48db6fefe69c4edd60e2a0bb3aae8d01ee9bc4","sha512":"3a73a4f344c6b8ca699da23688e3bcc20a24488f8c3170ddec8fcbf8ac623ece37834261b9148f42c0a88529a64b514fc55282f1211d17f7d160354c393adf36","ssdeep":"","tlshash":"f5f06cf4ae4485f801e202396b3ac313093c08b5a3a0ee2c6068d8080ce3b0d8809cfa","first_seen":"2025-09-20T23:56:59.356939Z","last_seen":"2026-02-06T16:29:01.142481Z","times_seen":56,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/index.html","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/index.html HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 10 Nov 2025 01:59:25 GMT\r\nETag: \"172bf-64333e17f4f32\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKb-lDxo9yn7T77WY-bwAAAgw\r\nContent-Length: 15709\r\nKeep-Alive: timeout=40, max=411\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\nSet-Cookie: SPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=0016EF90C70069238A6F; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b13351544bc21a62b66bcc5274aa9486f4d2b58b51b835e932fb2599edc79b4c4b68eaeff3dd8113ccd64281988fe8a59c653fe8; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: 6eu/Y22ECbOCKtU95tG29A==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":94911,"size_decoded":0,"mime_type":"text/html","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"91429ca157bcb64ec3d0f84297eab39b","sha1":"5e1222eec74f3cc96f5625abfe2eae02f764d5df","sha256":"02d9b566c908048c5ffe2d461846aa38754273d91edc2d645b4c2c6b3273aeb3","sha512":"63a16edad4e84a62da11598e6a372f9ab09df515ab6b1de54f4f6a1252dee1605e2bc65d5c7ecaf70342dd8ff09d29e8668bf435d3f0290e83817d8694e9e353","ssdeep":"1536:rGHKN3BsMtnEGkV2sclEGkVfL+ms4dZnsog3+kmzDqK64KdgwAlS1jI0ySgem:qKScfes5K9KGjGLm","tlshash":"d693d8630a559a7a0bd223db70d6be45e117319fa6c05eccc4ad4d1c06d8ec8b728ebd","first_seen":"2025-11-23T22:29:02.319433Z","last_seen":"2025-11-24T15:38:31.054955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/css/styles-59d89e3603f1f4bcb0e7.m.css","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/css/styles-59d89e3603f1f4bcb0e7.m.css HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 01:59:29 GMT\r\netag: \"12c52e-64333e1b53b05\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:23:07 GMT\r\nx-boa-requestid: aR04G_4w0TuzGU4t4x37igAAAW4\r\ncontent-type: text/css\r\ncontent-length: 88049\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1230126,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c7729b8d8da3b62ea8c7e8b238b89fb7","sha1":"c73559c3e9f48d8993bf23db3115bda1f57b8167","sha256":"01708e31223b8a2003122f7f237b6486bd7c7041ba29234930fa92abfb28284c","sha512":"8af5c46877340459248ba879068dfd2d4a3e7d8786b9894e78ca6ac8c9cb08e43daee864430dd52e6914351ad9ee9b553b3fd47a8cb0208166ac6a930780e19c","ssdeep":"12288:NeIBqwzkz5mzTDgL7ulYlGez4XiBNITWrw4FmRK7YeXNW48vXo2YG0sC2YDYnbdN:7FT","tlshash":"17255b01b686b431d07a8d1fa3ad78915b0a7497fc428ecdfc406198ddee88f5229df9","first_seen":"2025-11-23T22:29:02.321732Z","last_seen":"2026-02-15T01:17:16.591482Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"2d58-63c2eb9abe348\"\r\naccept-ranges: bytes\r\ncontent-length: 11608\r\ncache-control: max-age=26920000, public\r\nexpires: Mon, 10 Nov 2025 10:55:46 GMT\r\nx-boa-requestid: aRHEsRe2APSVre4ofhaiawAAAZ8\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11608, version 1.197","md5":"46b5329e8e4e5925129ab2c36b336d0f","sha1":"63cd5fbcbe5331e7d8059a4caee8d2510f834d68","sha256":"79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b","sha512":"6a0581147291985cdfa5ab87188e24c69c23c03c8803825364d4a2213e9c5e5a1f35c07461e3daf3e47856a23f005cf7714fc491a5388fd037a294803de85937","ssdeep":"192:ZB9RK+WMN2ruGOuYTBwsUSvS7S9UUaLiGp7SQ98g5LN:ZBDPWG3TOsULOi979Jv","tlshash":"3732c0f7f723e655e424733daa3c18872426f4415024c25858e795703da91ee7ca0fbe","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.641542Z","times_seen":438,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=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%3D%3D\u0026cid=15%2C8\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=lyynvdoueiotyqlt\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aero.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:50:33:9B:A0:50:10:C7:20:6F:08:F8:F1:5E:83:FD:B6:25:42:0F","sha256":"43:8C:AD:00:14:00:B7:A6:7A:EA:70:58:FE:C2:9F:8E:79:35:1E:1A:62:F5:F4:AC:E6:13:89:B0:8A:BA:72:F9"}}},"request":{"raw":"GET /30306/C5ib?d=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%3D%3D\u0026cid=15%2C8\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=lyynvdoueiotyqlt\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: aero.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 165\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"89f86353da80cf6a9837826b0bd831f3","sha1":"cfbffba82359b67149c57d7c601f37e77a44f6cd","sha256":"9ae8162343e26c85a76105f2921bbb58b2151be491d4583309483ef15eb6df1b","sha512":"e5a9a64a6068004473a50a5a1ea8682b305a04b302421f584c5bfabbeac5e825883f1c11c70db971a636283fb5e3c2666517e2de48dca8d13a663d62dc2115ec","ssdeep":"","tlshash":"40c08c6f8c208120c78051cd1d696fb5d4abd56b8f6c58ca252d6c202c328b8e60aa63","first_seen":"2025-11-23T22:29:02.323994Z","last_seen":"2025-11-23T22:29:02.323994Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-bold.c18ee39fb002ad58b6dc.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-bold.c18ee39fb002ad58b6dc.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"3dc8-634eb5b40e06e\"\r\naccept-ranges: bytes\r\ncontent-length: 15816\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044E31STd9hg-kYQDn9AAAATU\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15816,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15816, version 1.0","md5":"2735a3a69b509faf3577afd25bdf552e","sha1":"8621aff863b67040010ccc183da5b9079ce6fd1d","sha256":"b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae","sha512":"299bc6bc782c38b4a63d080f8f41a16267c4cb44bc5327855591f833a6c5bbae19fe3eb2a66a24de28744be0c356b70f3ddc23730ddebbb62e8b71190efa4165","ssdeep":"384:OaGm6lgHMI6PWaRm9qoangeK6n3mV5QPl4vzOfmTtHv5yMe6hyFB:XGm6qrCgF6nWXQ9uTtv5yMroFB","tlshash":"7d62bf24c9bbe760c25842ff8f6422772a0b0c5968c691ee5bd79123f4e13477b22660","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T15:21:34.888823Z","times_seen":4675,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-get-app-modal-Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917-CSXd8fd3663.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 18 May 2018 14:59:45 GMT\r\netag: \"1c96-56c7c33d69a40\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 21 Nov 2025 08:32:28 GMT\r\nx-boa-requestid: Zz7wHOAD5TZ7zU4SdEgYWgAAACY\r\ncontent-length: 2916\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40db11c8ecf6a87ed4c2e1c22c80c44f","sha1":"0aa261a4b0254f8374e11a34077067e6148505f2","sha256":"3f1ea5c409c0d00088df9790fa7698929b4b8d242ec4372ab83fa8c3b969c692","sha512":"4e22ebd0f0f31a97fd91737b78de4ef8509ed2c096f442d344bfd01ef7746dd33091e175b92fdbfe57b6c19431e27b1469d38a5e843c4e11eae5c3c6e6330759","ssdeep":"96:IBseL9TiKmOV9zpzP0WvcabQKBzlAJd1T2kzqTDJ679/vntY2HNe3aIc/vnKVD9S:IfvvckrBzmJdx2k2/J67p17teMySKs","tlshash":"00e175fbab3892dc19db5d4fef369aa8230eb4b9796784c1954eca755083dc4e603c00","first_seen":"2023-05-08T12:40:33Z","last_seen":"2026-04-29T12:07:41.819922Z","times_seen":291,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.85.js?utv=ut4.48.202511210113","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/main/prod/utag.85.js?utv=ut4.48.202511210113 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 01:13:22 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tQwacqX5VUF.G_v1JI32bWYTPSaGytot\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:25:18 GMT\r\netag: W/\"9678b39fba79071c17a887edd5156dac\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: y6JCB0gCpLSlsZnByDE16r6t1D6Jbp3_v3HTs_FT6a2xzTLeSCExEQ==\r\nage: 200\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":10081,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4997)","md5":"9678b39fba79071c17a887edd5156dac","sha1":"90854d7c93a3d4fb51230f1d59d3aa683159e632","sha256":"8bd808b1a9fc79cd93a5c2996b534b25ee3dc4907e94f810c492d33269d0f24d","sha512":"8a4f5418794cf5fefdbb94205b45d96360667faf39314b9be238dd237470e0578f06c3457a9e046aa4e6201f4d902ce923bce3f1eb6ad036578710a5604d2e68","ssdeep":"192:3174Ojuk63EEiuDS2ic8Izve4AWe4dhI3Ju8dspzKg5UeptZoiGnfwWnDBwjIXOf:3Z4Ouk2EEiuDS2icFzwzupzKg5Uepb0g","tlshash":"8822a7cfec051e7b0e75eda9e0eaeb201214aa57f401c486d59e486f21cf5d690f0a8f","first_seen":"2025-11-23T22:29:02.326744Z","last_seen":"2026-02-02T22:49:09.243815Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/porte.js","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/porte.js HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/x-javascript\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228509,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"604fbc5d3edc98f6acdd5a5bfb48b959","sha1":"c88f9cf6fea8f7697fde72f542973fcdb9807d63","sha256":"3e82b90b117a5dcd0501177181683d89fc2d1147cd5b5d980574f3077f7f1e30","sha512":"d678a762c6690d4708ed88a46cc7c33fb8ab404129d078365897fdd75f3ae39ecfec8eb7764479ccc337758e416ac5a3a83cbeccdcf2279ad851a9f7259ccc1b","ssdeep":"3072:bWDDBT3qj37uO8mJ59Z/E3gLTpECJbBfNJZ1edhGKgM2IlTxZl4ErxFtyy3+77A8:bWDdObJ59GC7Z16hGR2fltmE08tCtVx","tlshash":"8924cfca37db703943e628b066af1547b2796c524c8de099e145f0d03d7caa985bbf2c","first_seen":"2025-11-23T22:29:02.328597Z","last_seen":"2025-11-23T22:29:02.328597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":351,"dns":45,"connect":93,"send":0,"wait":100,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/sparta/client/helper/client-assets/?m=QmVoQmlvIFNESyBpcyBsb2FkZWQgd2l0aCBjc2lkIGFuZCBwYWdlQ29udGV4dA==:MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=:login-home\u0026r=aHR0cHM6Ly93d3cuYmFua29mYW1lcmljYS5jb20v","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /sparta/client/helper/client-assets/?m=QmVoQmlvIFNESyBpcyBsb2FkZWQgd2l0aCBjc2lkIGFuZCBwYWdlQ29udGV4dA==:MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=:login-home\u0026r=aHR0cHM6Ly93d3cuYmFua29mYW1lcmljYS5jb20v HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\ncache-control: no-cache\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:28:01 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 10 Nov 2025 02:16:25 GMT\r\nETag: \"1877ab-643341e4c529c\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:28:02 GMT\r\nX-BOA-RequestID: aSOKcaeOKY32XIg83q7QcQAAAOA\r\nKeep-Alive: timeout=40, max=500\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\nSet-Cookie: SPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=001BE3A4100069238A71; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b13351549ff18dad41ceffeca11fc541f4f5efb7cfe75700a867017eb51fe791cd9360865276c1772c60f351d4caefb406ea9765; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: Dzp76aWVKPVfKGhDMhpRqQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nTransfer-Encoding: chunked\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1603499,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"a8d46665bccd13ad2568859b60adc267","sha1":"07e314d1acade3c5fa48e1ff55647e926e1cfe64","sha256":"08ab7a515d15c20b331c66586e9ebd52292a2675b153bfe64bb830e1b816f48e","sha512":"ca02905c09346ffb4b3f3e53afea13904585a216b8668ac9d0068bae6423680e9441f437fd424300a39c2a781aeb4494ac1f802c1b61b228544dda91ec3a4ee4","ssdeep":"6144:K17uBlD3uFWqsp+1sIPFIIJwp+UyxCk1iRiEALHZ+XSm48u6HzsaPccJOReXglBl:/G","tlshash":"532591a95f49a17ca3b7811e291572869e06f083cd834edf751e5024def7c8f22b16e8","first_seen":"2025-11-23T22:29:02.330356Z","last_seen":"2026-02-15T01:17:16.72864Z","times_seen":8,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:43 GMT\r\netag: \"e3c9-63c0c4ca380fd\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aK0ETaF5r5tJaM6xPFcopwAAALo\r\ncontent-length: 10915\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58313,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52714), with CRLF, LF line terminators","md5":"ee007517982034e740cdd6a5d5637bbb","sha1":"b39c17faa4c71704e18df0abae4dcd207419ca15","sha256":"dd6bb99eca452ae8e326fcfeced7167ad127f3a58546a9efd01b896ec8e89c48","sha512":"f0f8bdea949c9417de36ce80e1419c097226b17c71c891b611151af3ba15cf1d94c3faf8e7bce7a635afaaabd8b9a98ea7944deb96c2f9f6a807620ea750910d","ssdeep":"768:foCj12CTKOQTadRB76+vd1p+PRbfM9o6kIi1FtTKOQTaSc+PqTKW9o7sI:dTKOQTadRp6SdCbAGTKOQTahTKbsI","tlshash":"82432b214686dd370f71a69d608f7ba3526c049cfec88f68f6ed900026d7f98527b6b4","first_seen":"2025-09-22T15:23:49.960503Z","last_seen":"2026-04-29T12:07:41.736191Z","times_seen":15,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:08:20 GMT\r\netag: \"c455d-64334015ee8c8\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04IzQDF1gAmVC62R8igQAAAA8\r\ncontent-type: application/x-javascript\r\ncontent-length: 246899\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804189,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cadc16f8504f58e6bdbbae052ba1779a","sha1":"22f961456cbaedd3afcdfbb61add7aad4da2a3f3","sha256":"054afaad641a7f18a0714d54c8915754d06962a24e7876d092a94e7df6e79abf","sha512":"98aea915404db37bd211995d3292a3162f4e19b5183d283c8f5e2152ba376c3c639f513f0fad1ad507a6e9c9a8c804b7ceb8afc548bc81e01398e5ec864440be","ssdeep":"6144:CYmlQVRAJGjYL3+qYktlCGsRLMRtH25HQDZOICufj/uAc98fDu3filyNzXKEt5/Q:CNKE+dktlCGsRIH25HWL2AcZfVw","tlshash":"da055aca73d0b2f953d663f4102b1102733a387a7819d948f17dc9da792688a417fe7a","first_seen":"2025-11-23T22:29:02.333717Z","last_seen":"2026-02-15T01:17:16.71105Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:12 GMT\r\netag: \"37fa-634eb5b3d9c72\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044Zz3dXorg7toQfa9YwAAAQ4\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688692288799","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:07.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9 HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:07 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nexpires: Sun, 23 Nov 2025 23:28:07 GMT\r\ncache-control: private, max-age=3600\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28361), with no line terminators","md5":"d880c1fe07e4f3c5d8efbff25306144e","sha1":"7b78bba791ec0290a116746dfb35a420acd2f4d6","sha256":"193a534463c1e16c0a66a65566f801c6516b2b4489ce709cc0687d17cb7ebb8b","sha512":"b064ed743ab06716dd900ac1371dc00b2630f1c1791b80d797a98c02265261fb73d1dbf767d126817c79eb53e9b898332ed72907ff9ca0a267936cc81c504b29","ssdeep":"768:/QHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIj:/gfoEAw/A4nlT3jfQmW6XFfhtj","tlshash":"e0d2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","first_seen":"2025-11-23T22:29:02.235457Z","last_seen":"2025-11-23T22:29:02.235457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_4953168_icon_gc_d-CSX7684a6de.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-icons-ent_edu_bac_4953168_icon_gc_d-CSX7684a6de.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:17 GMT\r\netag: \"c21-642f6f86638f1\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:02 GMT\r\nx-boa-requestid: aR04yhQ9zczxte3Fkvj9PQAAAK4\r\ncontent-length: 1386\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e424e99637454ab6995e1193f8a410d","sha1":"90f5a86ed1d0296d84cdf455e9e0eeca281cedbd","sha256":"885e35ddc0dd817e8aa4116399ecc382c6e8a726215ad92ddf72c93463cd52aa","sha512":"0256eebc5980d71c79d3b227036e3f299e2190b7de79dfa4e34c9a84d8090f83a4eb6439293921637825ee29308472d880d68d6b4e4951e929b58be3f64e6113","ssdeep":"","tlshash":"2651b8c861bb81f0f35c87f6c196b2d93576add4350154d5b6cc1940bb62ce0493accb","first_seen":"2025-11-08T07:08:40.689319Z","last_seen":"2026-04-29T12:07:41.908916Z","times_seen":59,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/pages/homepage-dap-es6-page-9115d1d433bf93ca9e41.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/js/pages/homepage-dap-es6-page-9115d1d433bf93ca9e41.m.js HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sat, 15 Nov 2025 03:33:41 GMT\r\netag: \"c9e02-64399c7c99dff\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04y9B2VFqnHj8g35-tQwAAADQ\r\ncontent-type: application/x-javascript\r\ncontent-length: 215383\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":826882,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5d35d32247f873232799a727d231c5bf","sha1":"fca8756130015a2761a15fa3b300c7ee57f4e576","sha256":"87be3a7dc5c5c677d08441507decc486330d839705113bd0c0b40aa290cc719b","sha512":"2a58c58f395fb094da367f62f0402c989b08aaa05e03ac4616c5674103ae65050beb3befc5f6467028fed420c3efc46a98ee2cf730e80055fb00c88ee91c6cb9","ssdeep":"12288:qF4EkaRUMR6pTPf3a3jG8C3HXvhRq+Ix83bB4:qFzpLR653a3jG8C3HXvnC83bi","tlshash":"27057cc832d4b07a17eb29b5e02f5206b2746c55784ec440f49dedc93e6a90b92b3f78","first_seen":"2025-11-23T22:29:02.336375Z","last_seen":"2026-02-02T22:49:09.146143Z","times_seen":6,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":163,"dns":139,"connect":3,"send":0,"wait":10,"receive":7,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Fri, 21 Nov 2025 06:40:47 GMT\r\nx-ms-request-id: 7adaa894-301e-002d-2221-5b104a000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 53768\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9a3418d9c96856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-05-13T15:39:05.923217Z","times_seen":138710,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.glancecdn.net/cobrowse/js/GlancePresenceVisitor_6.48.0M.js","fqdn":"storage.glancecdn.net","domain":"glancecdn.net","tld":"net"},"ip":{"addr":"3.167.2.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.glancecdn.net","organization":"GLANCE NETWORKS, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:FD:3E:AD:64:4D:44:5B:1D:9E:96:54:66:E3:FC:93:12:95:4C:52","sha256":"A7:B1:DC:C1:4B:F4:43:4C:8F:FA:C8:81:0A:DE:51:54:2C:44:53:C8:97:27:2B:22:E0:85:C9:A5:E6:0A:CB:CA"}}},"request":{"raw":"GET /cobrowse/js/GlancePresenceVisitor_6.48.0M.js HTTP/1.1\r\nHost: storage.glancecdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 30 May 2025 15:44:40 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 22 May 2025 16:15:03 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\nx-amz-version-id: ns17mAvtd2Zr2LXq8lbWTv0ytbU.23D1\r\ncontent-encoding: br\r\netag: W/\"d7f5ab53985949dd5efa3098f28298e8\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 9RqtJwwRyIHY1EiGL83w1vTp30LrNa94-YmpX64zlDpiVsPLHwAvdg==\r\nage: 15317001\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"d7f5ab53985949dd5efa3098f28298e8","sha1":"d4d29149e025ebcbc6e7f0f371a779a64db87a57","sha256":"dd54f783cf0523257265670ab05f29c7376f17f1fcae44e1d772f157d2a1f013","sha512":"8365e56a92410e1a0ee26b6afe78672fa7279b13d4d547d45135b572d0bc34d270b5be8f1d7f57972136aa602b454e539fe0c5546668cdb5e8feffcff5196d8d","ssdeep":"384:tgnxLQ+P5h47Itz0TIPYOWj+LGLcaGTudvqHEhdZUavfxdoyZ+k5zEsEtw/j0g:tV2zA2WaLGIktnrJIWH","tlshash":"4c82f9687961303a076ba0f2541f210a7137e1ada64940aeb1c8e5f13c74b9b5377fbb","first_seen":"2025-07-23T13:02:41.796475Z","last_seen":"2026-02-20T22:41:29.209215Z","times_seen":109,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/sparta/client/helper/client-assets/?m=QmVoQmlvIFNESyBpcyBsb2FkZWQgd2l0aCBjc2lkIGFuZCBwYWdlQ29udGV4dA==:MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=:login-home\u0026r=aHR0cHM6Ly93d3cuYmFua29mYW1lcmljYS5jb20v","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"OPTIONS /sparta/client/helper/client-assets/?m=QmVoQmlvIFNESyBpcyBsb2FkZWQgd2l0aCBjc2lkIGFuZCBwYWdlQ29udGV4dA==:MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=:login-home\u0026r=aHR0cHM6Ly93d3cuYmFua29mYW1lcmljYS5jb20v HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control,content-type\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.0 200 OK\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, UPDATE\r\nAccess-Control-Allow-Headers: Content-Type, X-Requested-With, Cache-Control, cawcsrf, clientait, __pageidheader, bdc-csrftoken, x-boa-access-token, x-boa-flowname, cpcv, csrf, app-name, Csrftoken, app-header, search-context, pragma\r\nConnection: Keep-Alive\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nServer: Oops\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: JET3YUxWIWjaeamF/8c0uQ==--BHw2bEyspSNmC4B9tcqEFQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=17639368865573872","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9 HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nexpires: Sun, 23 Nov 2025 23:28:06 GMT\r\ncache-control: private, max-age=3600\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28361), with no line terminators","md5":"d880c1fe07e4f3c5d8efbff25306144e","sha1":"7b78bba791ec0290a116746dfb35a420acd2f4d6","sha256":"193a534463c1e16c0a66a65566f801c6516b2b4489ce709cc0687d17cb7ebb8b","sha512":"b064ed743ab06716dd900ac1371dc00b2630f1c1791b80d797a98c02265261fb73d1dbf767d126817c79eb53e9b898332ed72907ff9ca0a267936cc81c504b29","ssdeep":"768:/QHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIj:/gfoEAw/A4nlT3jfQmW6XFfhtj","tlshash":"e0d2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","first_seen":"2025-11-23T22:29:02.235457Z","last_seen":"2025-11-23T22:29:02.235457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=050aab6e-dfbb-4cc1-b74a-3ea13328b668","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=050aab6e-dfbb-4cc1-b74a-3ea13328b668 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1753\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1753,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.814+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.814Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"EBZ-Corp_SocialResponsibility-_-CorporateSocialResponsibility-_-EIT6SX7K01_SuperHighlights_defaultspecialolympics2024shl_bmhchampions2023OctoberShlCta\"}]},\"list2\":{\"list\":[{\"value\":\"EIT6SX7K\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 050aab6e-dfbb-4cc1-b74a-3ea13328b668-cbddeae774654a93\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dbf603640e0a9b0211420ae62d079363","sha1":"e4769be330ebc75f9a614f191eeeb39b00789b5e","sha256":"6593979201af25cd41daa6936389b384eb020675c6aba88e98da1232fc1b9545","sha512":"e825d5b81874d16066af160684d6f8b4dbc3b5ce9657bd09162fd5d9037be4b21cf3bb374d553f49a9c670e8c63490c7d707dfdcca1dca59fe8c9249761f3a18","ssdeep":"","tlshash":"01f05cda8b0daad10cdb3a5115c3f57497963247d8cbc0145a509fa5c3cc8c4b50ce1b","first_seen":"2025-11-23T22:29:02.340544Z","last_seen":"2025-11-23T22:29:02.340544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-mobile-banking-bofa_icon_reminder-1.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-mobile-banking-bofa_icon_reminder-1.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 28 Apr 2023 00:07:36 GMT\r\netag: \"375-5fa5a42ae5635\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 21 Nov 2025 08:36:13 GMT\r\nx-boa-requestid: Zz7w_d3U8KyPTBQbe6mrYAAAAKo\r\ncontent-length: 577\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":885,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c449fd2cf641f56450073e262e43a52","sha1":"46bacf823ca03c07ba0d7bf68402703247b1e55d","sha256":"04488b45fee15574c938a17623e9e9f759f4548a4ccb8d36f7be239ea767b4d6","sha512":"05b67fe7b9e4729485e54938993671ee1c076a1c90881f70b238fa3b07c8abbe6e508bdcd1500bbdbb4c39223b1604b5ad75dfc7c6274e2cb4ebc1bb4c917e23","ssdeep":"","tlshash":"b811402c8264e2acf611076cabac91d537f2388ac2344d8ca6a36075ea0c4c8024daec","first_seen":"2023-08-21T01:15:45Z","last_seen":"2026-04-29T12:07:41.890607Z","times_seen":221,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-login-common-Blue-CSX8c4cd8e5.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-login-common-Blue-CSX8c4cd8e5.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:42:46 GMT\r\netag: \"a0-63c0c33ce2718\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:07 GMT\r\nx-boa-requestid: aR04z2HqRD-ZUZ-zWdeajgAAAFU\r\ncontent-length: 156\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c925779f628a2c723df6bab50d0648b4","sha1":"2d4ab446ad8aa43c687bada6c1a65bd6520261e6","sha256":"1bbeb10bd93cf7fb0cfd99601aeac751cfa6a91d07c8d5c668c594bc40a850fd","sha512":"1972068b6826322cb4749cc9ea4dca5807294a39f3310f1c0b77de78eb6a65401b6cc4c408f4a6c333af92c52005f01f734528fbb6d5414cfdda32c499c87ed4","ssdeep":"","tlshash":"0bc08cfa90acaa20d518c220b2ac78ba68b3d0c2424801add5813535f8d2ec37d24ebc","first_seen":"2025-09-22T15:23:49.958522Z","last_seen":"2026-05-01T18:56:55.048994Z","times_seen":97,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/gt-search-public-widget/1.0.0/index.html","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:03.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/index.html HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:28:03 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 11 Aug 2025 00:49:02 GMT\r\nETag: \"a517-63c0c4a344ae7\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:28:04 GMT\r\nX-BOA-RequestID: aSOKc-33JxNISjyKsErwvAAAAHA\r\nContent-Length: 3940\r\nKeep-Alive: timeout=40, max=480\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\nSet-Cookie: SPID=Q1S2; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=000618BA570069238A73; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b13351548494501522e69f3f2aac755776f3f59040a1b638657af220ae6b4a01dd336d58778b85017ed2f70fd44c1285e50831ad; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: WOeCDyUyLt5YslrdrALAAw==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42263,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with very long lines (42263), with no line terminators","md5":"7f1fc65f74684f6ceae1024d91fbc8aa","sha1":"1e22a682efdf19bea827b9e0b3a18ee55236448e","sha256":"81cd8f8088751e8eab37e0b1bf21c1f6699701888a652848218c2483adc6e10a","sha512":"9a2d9d85e6d81050aaa45b54638942ef2e68ee5c36a805979e1d0118bb87919bf1716b7c9c456e4d7c7c144386025d1f8870b84face235994618f36809fa37c3","ssdeep":"768:FRnzWSsKm1e6ILy6GZZJWCS8HSsKm1e6ILy6GZZJWCS8hSsKm1e6ILy6GZZJWCSD:FRnCSsoLESwSsoLESOSsoLESD","tlshash":"751360175a214ebf9bb5539cf1d83e0ba4a82012d74c5959cdcce97801cefed322e61a","first_seen":"2025-09-22T15:23:50.032935Z","last_seen":"2026-04-29T12:07:41.86739Z","times_seen":15,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/jcrs/global-en-social-social-jcr-dfee169e3d631fecd4f8.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:03.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/jcrs/global-en-social-social-jcr-dfee169e3d631fecd4f8.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 01:59:28 GMT\r\netag: \"566e-64333e1a21581\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR0437tD9hF8bl9YDZqY1QAAAPs\r\ncontent-length: 7214\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22126,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (22126), with no line terminators","md5":"6ed886acd170f80541d0011b57ea9afb","sha1":"2cc72576a53c604f955c87a6c0b0716e78648fbe","sha256":"e0c0ff304719142186669641110f209fe81a54c6d3793799472e5499399db16c","sha512":"dac113bbb3f173252680724944d349f187d5438c85a46a0a7802bc66a4f5d18f329c6c555ad856a13f952dbf1085fa2b834e3220b22ea4138c329e9a0a5b8c41","ssdeep":"384:ahpaHJChW9qh5muc4Apsc4zapglop8mdGiz4ep+tmZhWrhldUpaEpIzipUA:ahNMYXl0dq3SWrhldDA","tlshash":"80a22af65350e6fae289c3e06a141a5d32a430fab5d18bfcc2da1c5178267ee403cdd6","first_seen":"2025-11-23T22:29:02.346599Z","last_seen":"2026-02-15T01:17:16.707191Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/images/assets-images-global-fdic-fdic-wealth-banner-smalldevice-en-CSX7f123629.svg","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/images/assets-images-global-fdic-fdic-wealth-banner-smalldevice-en-CSX7f123629.svg HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"d36b-626631fde6ece\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 22 May 2026 03:14:13 GMT\r\nx-boa-requestid: aC6WhXmogDLFJLy_CekUjwAAADo\r\ncontent-length: 34335\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cef6a1ad77bbcd9fb3c95515f106e50a","sha1":"b859df1acf858f1221990eeed4754241db01c03c","sha256":"d86281df595195bba988ba51e56550c068e52322519def63ff2aa69b3e69418a","sha512":"0043255c16bc31d9913f3aba88e912fb94382892a7209850526af9e059cffb554d042bcccc24221bee1598e12c3451c4c91ae9a039cc507f813e768f4e554941","ssdeep":"768:j48bkEG51PHtD5rqw/C3PmOePyJGDGOWvo12Y1meoUDC4MKmcHTpNB9rDlt1gbP4:j48bkEQFHxtq/Jyy+GFwEYT4Kmc71Wgb","tlshash":"b0331555b426ffaedba50c70f14eaca1bce2dc9fc0c34346aa1501155be62d49fb1ea0","first_seen":"2024-12-03T21:16:27.655393Z","last_seen":"2026-05-03T13:37:09.550239Z","times_seen":131,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=b4465601-afcf-46f5-ab98-172080b43a52","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=b4465601-afcf-46f5-ab98-172080b43a52 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1694\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1694,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.900+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.900Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"Cons-CC-_-Peros2025-_-CCA1QSLD01_Highlights_NH_Card_Peros_Aug25_CMS_CCR_HL_ca0525PerosCcrHl\"}]},\"list2\":{\"list\":[{\"value\":\"CCA1QSLD\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: b4465601-afcf-46f5-ab98-172080b43a52-8f7d8af23b464f58\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d5fb9c60e141a2fa232c06f013f8062d","sha1":"9dd3b0f3ea8832b58554a0a2400a7f549c1c14d3","sha256":"c200ca98d5fb262bf87cb008a71a3c5920d10eb8e8bf221c4cd8ff84fc6b16bd","sha512":"24a0c3f8c9c1fe4f5eea20eb280b6b4ecfcac7dedec9ec6fdf4c332584adff84ed69d0fa04c7b8dd629dc937e71169a62d4b9348c14ba765cac98e8ef3be6c82","ssdeep":"","tlshash":"62f05cc98f4969d00def3a9166c7f5345b963106d4d780041ba0ab61c2cc9c4710cd1b","first_seen":"2025-11-23T22:29:02.35Z","last_seen":"2025-11-23T22:29:02.35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/main/prod/utag.js HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 01:13:24 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 57SLszIzhrPYpp0wy1K10ApVly7NETsG\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\netag: W/\"b141e191770866dc1bbe62ddab6a0db3\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 7OiLXIgNeLku9lcpvQzINwtch5NEkg5fZKESjrBSiNw5doA1QF8ohw==\r\nage: 17\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":500073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41747)","md5":"b141e191770866dc1bbe62ddab6a0db3","sha1":"f5f6666700c71e9fc2982dd5377317efa9e5c743","sha256":"903a520150f39948efd1186cb3766e92e3df92421fca35773d947b13d4ffb412","sha512":"942f2e386c28079e60f453149767ccbbe0a3b27d9e4155de0052a6659f1ba2c5b1e164e5c1d053d18b951ee5b9488280d392426af4ce1b545048a7dea3ff5b5e","ssdeep":"6144:A5xoQ7gmIlKWI9b5AaLOGoiLyCZLdBn65WUeCjXVXnNJWlD:AiKD5bLOG3yCRa5WUeCjFXnNJi","tlshash":"8db44c9776a6743a43d720a0106f65039036f86b66d4c0bcf358ecd8e9d8e49527bb3e","first_seen":"2025-11-23T22:29:02.35198Z","last_seen":"2026-02-20T22:41:29.192187Z","times_seen":16,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":47,"dns":36,"connect":1,"send":0,"wait":27,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/login/rest/sas/sparta/v2/iac?dfp=true\u0026_=1763936878274","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"OPTIONS /login/rest/sas/sparta/v2/iac?dfp=true\u0026_=1763936878274 HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control,content-type\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.0 200 OK\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, UPDATE\r\nAccess-Control-Allow-Headers: Content-Type, X-Requested-With, Cache-Control, cawcsrf, clientait, __pageidheader, bdc-csrftoken, x-boa-access-token, x-boa-flowname, cpcv, csrf, app-name, Csrftoken, app-header, search-context, pragma\r\nConnection: Keep-Alive\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nServer: Oops\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: JET3YUxWIWjaeamF/8c0uQ==--BHw2bEyspSNmC4B9tcqEFQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":146,"connect":108,"send":0,"wait":116,"receive":0,"ssl":428},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/TRhHE6HFFY","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/TRhHE6HFFY HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 229\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":229,"data":"{\"ds\":\"js\",\"cdsnum\":null,\"csid\":null,\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"cd_auto\",\"requestId\":0,\"agent_type\":\"primary\",\"agent_id\":null,\"c\":\"js\",\"sts\":null,\"std\":null,\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2213\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: e7cc6bfb-d03f-48b6-bafc-d8c676e72421\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2213,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5dd0eaa777e0cc184d28eee8a05607b9","sha1":"d0eabfa3a808ba5c9b5c31782d80a37ed3716763","sha256":"79f5858957626573bbb9e71c5c7346c1a9e137e0f5737888e96a6133e10d7144","sha512":"1785a7a07af28c16c3789f661aff3755333c058ce0f641c76c1a2466f702ff5ce4837b08e54e1367119b56edb9359d51ef70145bf1d02b58b3ba7c6d1945215d","ssdeep":"","tlshash":"364121f2e8514ce133df532a34836e33a26bb5877c9f509d9b8b915c08dd1782e16515","first_seen":"2025-11-23T22:29:02.354447Z","last_seen":"2025-11-23T22:29:02.354447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":486,"dns":76,"connect":96,"send":0,"wait":130,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/dis4.js","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boss.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:EE:F9:47:4A:F8:C3:44:74:76:64:86:4E:C4:D5:D6:DA:E6:6A:99","sha256":"7A:46:5C:B9:78:92:2D:62:C3:25:CF:A7:5F:CE:5D:BE:9D:A8:9B:A5:87:7A:C0:B9:A7:29:49:FF:E6:A5:41:D9"}}},"request":{"raw":"GET /30306/dis4.js HTTP/1.1\r\nHost: boss.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\ncontent-type: application/x-javascript\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77734,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b0fc72e78478fd7ad48258a5107d560","sha1":"081361692b3ba355330c297b474d109006fc256a","sha256":"cdffc0f0a7c1bfee50c10496b2eb44356b7a6b804087296544956aae477944c7","sha512":"7667d982332f9e91b96f3c7736937bb6f84efcb2393b79308e3841ea5a63fa97903544e5cabbf2523b34c70abd6e812afbf3d6be93398ffd28601e0cc46bc317","ssdeep":"1536:bSfPVDyUjSwtQ7PT3mfQE6pWIEiASA3OHHqALl96oXFZndCf2sqIV1zp2wI:b+VDyUObT3IQjgOHKSl96w7aPqH","tlshash":"7d7319ca37d7b03843e6287056af050bb2796c525c8de499e150f4c43d78aad86bbf2c","first_seen":"2025-11-23T22:29:02.356619Z","last_seen":"2025-11-23T22:29:02.356619Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1254,"timings":{"blocked":480,"dns":91,"connect":96,"send":0,"wait":286,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-internal-scripts-ed046dbf4eb2.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-internal-scripts-ed046dbf4eb2.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:01:01 GMT\r\netag: \"ea5e-64333e732beae\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04G0THScp3SBJVN86vOwAAAJ4\r\ncontent-length: 11289\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59998,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54080), with CRLF, LF line terminators","md5":"15d9d15a2917d97a032486826bfb0e05","sha1":"eeb00254dabf210f9492d004fa679eb52a3c56b7","sha256":"2d534008e872e6621b2c0020dee2e85999573563c371a340c59a2f2eecedf274","sha512":"3f839359c506e4a6e221dac329304d915a4631ca6af846302c41520b51aea92b18aef20fe4b03f599923cadeb33780773cf96ca8c3f4dc68f13a510bc50a0167","ssdeep":"768:tkDdvMUTKOQTa+e++8dv+Pdb8Kyf/a6Mc6vfFTKOQTaS4+PqTNAJU/aj5sg:uTKOQTa+e+fd+b8TaTKOQTatTNAJXsg","tlshash":"6b434c208a81ad374f51529a604f7e97537804edf6c4cf9cb6dda1442acaf86907f2f8","first_seen":"2025-11-23T22:29:02.358785Z","last_seen":"2026-02-15T01:17:16.651623Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/pHAQ?d=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%3D%3D\u0026cid=15%2C28\u0026si=2\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=dyhmlgvhfrwmdgik\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boss.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:EE:F9:47:4A:F8:C3:44:74:76:64:86:4E:C4:D5:D6:DA:E6:6A:99","sha256":"7A:46:5C:B9:78:92:2D:62:C3:25:CF:A7:5F:CE:5D:BE:9D:A8:9B:A5:87:7A:C0:B9:A7:29:49:FF:E6:A5:41:D9"}}},"request":{"raw":"GET /30306/pHAQ?d=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%3D%3D\u0026cid=15%2C28\u0026si=2\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=dyhmlgvhfrwmdgik\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: boss.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 166\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"96ddfdac1585abd9dabba220e55ac338","sha1":"0f82e716890942934bc1bc6685410aa18ffe5099","sha256":"cdaa1d459d6283d87442aa4881fe39035d14f6f2979c3a89b6e5af944beff97c","sha512":"6aea719459ea2447983ba5f55a1f585e524407b3bc2e2c5279151f5b71de6c066f756799e1cd933d8b978221f2e8da166cb62b398af1a078a3be6069bae39bc9","ssdeep":"","tlshash":"f5c0801e4d58d110c54050cc0d595f68c457e91b4f0c44c9555d1c1455354f4d64a473","first_seen":"2025-11-23T22:29:02.361046Z","last_seen":"2025-11-23T22:29:02.361046Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/on-demand/global-global-social-module-styles-4f856f29ff9506d00a8e.m.css","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/on-demand/global-global-social-module-styles-4f856f29ff9506d00a8e.m.css HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:40 GMT\r\netag: \"37b5-63c0c455474da\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 09 Sep 2026 17:29:24 GMT\r\nx-boa-requestid: aMBj9L96jilp2SPNzPdImAAAAEg\r\ncontent-length: 1430\r\ncontent-type: text/css\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14260)","md5":"28c91bddaeae50701f119b5e1c212fdf","sha1":"a8d2310a0db1f23ce1bb731bec8a00806c8e2bfd","sha256":"7ddcd2014a17087989248a5cb9b2b6f2517f27ee7af8fb6df01623e606a48245","sha512":"29f4f3366ef15250a2c325838e33e2f4b6255ec937336cf8d1f9ea2ace42594b3a569ce76341acc1c8f821a90449d1ce8aaa092cecd15aa0073009f7856fbf6f","ssdeep":"96:TzRTcBMixS4J71R3u3CuTEL1rLcX4EaU5+jZph0:sMoS4J71/jZph0","tlshash":"5a5293552bbf200be91f0abcf75ad720dba891ea205e5de1590cc9a49dc63b230f74d4","first_seen":"2025-05-01T20:16:06.038511Z","last_seen":"2026-05-01T18:56:55.080069Z","times_seen":95,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/images/assets-images-global-fdic-fdic-digital-sign-CSX37f66a3e.svg","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/images/assets-images-global-fdic-fdic-digital-sign-CSX37f66a3e.svg HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"35d3-626631fde4f9e\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 22 May 2026 03:14:13 GMT\r\nx-boa-requestid: aC6WhbZRH8W13Jf0cTNrJQAAAHM\r\ncontent-length: 3309\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13779,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a970c27f258e86826e2d926efb4123","sha1":"46318538a0d7b8eec95c5b113ff295826ff3e825","sha256":"39de2c2c9b835d28be47dc93977b61b2608bce93f3753d2b49f90c4ca6c4dc0f","sha512":"fd4bdaac8bfc3be1a3c0e1e073edab9281ed916fab12cd6361a34c11d868867c3b2632fd88b3d714299b96075b1b9092b7f7f5fe64d7eb0b3205742b5b1ca879","ssdeep":"192:opJ3mIdqb6icMMJUO67ILpdkoId05ttq7oIdWLuD4oIdTjettrDWj2Mu58ecx:5oJ7EIr5tY7ao4njet9Dn58F","tlshash":"5d5201ab7604c79a8ed3d10ade2726c1325558c3e1eab0ddeee3aa06500faf7d134525","first_seen":"2024-12-03T21:16:27.654248Z","last_seen":"2026-05-13T10:36:29.602833Z","times_seen":243,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/homepage/spa-assets/images/assets-images-global-favicon-favicon-16x16-CSXaaa5ca4e.png","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.171","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:B0:7C:AD:57:41:5B:63:46:6F:A4:DB:CB:94:A0:C8:34:22:27:B9","sha256":"10:3E:18:50:9F:5B:97:BA:92:B1:7A:5F:05:38:23:6D:F0:75:C3:36:8C:94:00:70:A9:9D:D0:5C:A4:2C:96:1F"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-favicon-favicon-16x16-CSXaaa5ca4e.png HTTP/1.1\r\nHost: www.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 15 Mar 2019 14:29:29 GMT\r\nETag: \"39d3-58422ddd48440\"\r\nAccept-Ranges: bytes\r\nContent-Length: 14803\r\nX-BOA-RequestID: aSOKbiXYYT8YzeswrsnYKwAAASY\r\nContent-Type: image/png\r\nX-Serviced-By: /sparta/homepage/spa-assets/images/assets-images-global-favicon-favicon-16x16-CSXaaa5ca4e.png--5Qz9yn+khvmjYRLE1ZioWg==--d048VkeMsz4zxst++ybMBg==\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.merrilledge.com;\r\nExpires: Sun, 23 Nov 2025 22:27:58 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 23 Nov 2025 22:27:58 GMT\r\nConnection: keep-alive\r\nSet-Cookie: SID=000359FCC40069238A6E; Path=/; Domain=.bankofamerica.com\nTS0126dbc2=016295bd5e7c154ac15aa37419ab3452d88435006a0b68849c2aa03e32d57c653fb6eb7db556c084bbc3a20742a8d185776791a282; Path=/; Domain=.www.bankofamerica.com; Secure; HttpOnly\r\nAkamai-Request-BC: [a=23.36.77.199,b=129569666,c=g,n=NO__OSLO,o=20940],[c=c,n=US_TX_DALLAS,o=20940],[a=104,c=o]\r\nX-BAC-AKM-C: ON\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"cb64c30b1249dbac9691a3a2cc418631","sha1":"2c36d5247a84049dea63ced5ad35666d6589413e","sha256":"9a092ddd265dc1651c83cdbd0e7d5d523dc51c3cacfc9b4ec98a6ddb58ee364e","sha512":"13ae16f8b7dfd4274af8bd3e82e2e906c3ea825c9066d354336ca64d88ea6948c25571fb219c83b1912d854886c54105db940c9fcc57007191631dec6c15de21","ssdeep":"48:b/6zSN+k29W8sEvsxN+Y9AWBCHisc5IY7wk90rD:bSOskEWRdxNX7sc5lwP","tlshash":"81629220bdb031a1a4d6d4310ce424498c370987eac1ac84b7dd1c176f01bea4caf583","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-03T13:37:09.548091Z","times_seen":357,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":300,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/css/styles-ac44bb6cff76c5727c2f.m.css","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/css/styles-ac44bb6cff76c5727c2f.m.css HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:02 GMT\r\netag: \"b79ad-63c0c4a34c017\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:23 GMT\r\nx-boa-requestid: aR043_JboK25d1ROJGtRFAAAATc\r\ncontent-length: 60302\r\ncontent-type: text/css\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752045,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"04ab9c0d07fd130c64b9493dbcee7101","sha1":"03ce7f84b96b986a05d91c46a71a43b7c72f8bd6","sha256":"97d9286983014c56dadfcaa01886944c6745cb14580000f56449d6eda091005b","sha512":"b917f26b8e7c0359ebc56222eaae5b4ff64196aa9f28e6ba3e4400d32b78ed0a7c592b70bb4329d2746438dd47132be79938d6b241a0d3c2f25624b63c6b841e","ssdeep":"12288:raIV4mMkz5mzTdsvP6ZqEPRTTIMioagmcgl2ZVBqlHbnJefy8idxu:Uk+idxu","tlshash":"76f4fc636795f020e47a891f620e35137a0fa842ec5a1edeeddc9014c9ebd9f13246bd","first_seen":"2025-09-22T15:23:49.980446Z","last_seen":"2026-04-29T12:07:41.893892Z","times_seen":15,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-7f15ec9475457e4528b2.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:08:20 GMT\r\netag: \"c455d-64334015ee8c8\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04IzQDF1gAmVC62R8igQAAAA8\r\ncontent-type: application/x-javascript\r\ncontent-length: 246899\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804189,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cadc16f8504f58e6bdbbae052ba1779a","sha1":"22f961456cbaedd3afcdfbb61add7aad4da2a3f3","sha256":"054afaad641a7f18a0714d54c8915754d06962a24e7876d092a94e7df6e79abf","sha512":"98aea915404db37bd211995d3292a3162f4e19b5183d283c8f5e2152ba376c3c639f513f0fad1ad507a6e9c9a8c804b7ceb8afc548bc81e01398e5ec864440be","ssdeep":"6144:CYmlQVRAJGjYL3+qYktlCGsRLMRtH25HQDZOICufj/uAc98fDu3filyNzXKEt5/Q:CNKE+dktlCGsRIH25HWL2AcZfVw","tlshash":"da055aca73d0b2f953d663f4102b1102733a387a7819d948f17dc9da792688a417fe7a","first_seen":"2025-11-23T22:29:02.333717Z","last_seen":"2026-02-15T01:17:16.71105Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boss.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:EE:F9:47:4A:F8:C3:44:74:76:64:86:4E:C4:D5:D6:DA:E6:6A:99","sha256":"7A:46:5C:B9:78:92:2D:62:C3:25:CF:A7:5F:CE:5D:BE:9D:A8:9B:A5:87:7A:C0:B9:A7:29:49:FF:E6:A5:41:D9"}}},"request":{"raw":"GET /30306/uipaddress.html/https://bancanetempresarial.citibanamex.com.mx//web-app/administracion/spanishdir/if.htm/web-app/inicio/web-app/login/scripts//https://www.bbva.mx/empresas.html/tp_pymesC2.jsp/proceso=posicion_global_pr\u0026operacion=posicion_global_op\u0026accion=menuPosicion/https://enlace.santander.com.mx//configuraEntornoBET.do/bandejaEntradaDetalle/https://banking.westpac.com.au/wbc/banking/handler?TAM_OP=login\u0026segment=personal\u0026logout=false/discovercard.com/dfs/accounthome/summary/www.schwab.com/secure.accurint.com/unfcu2.org//login1/wachovia.com/MyAccounts.aspx/investing.schwab.com/secure/schwab////EBC_EBC1151/js/Remoteloginload/EBC_EBC1151/js/jquery?v=123/EBC_EBC1151/js/RemoteLogon/EBC_EBC1151/js/remoteLoginPost/EBC_FNB/js/Remoteloginload/EBC_FNB/js/jquery?v=22/EBC_FNB/js/remoteLoginPost/httpsabph.pl/pi/do/Authorization/alfabank.ru/swedbank/pf.bgz.pl/httponline.eurobank.pl/https://snsbank.nl/mijnsns/secure/login/?cid=5\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197249439 HTTP/1.1\r\nHost: boss.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91213,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"297304fcd86fb68ca58d057207e60b9f","sha1":"cc6f0345c4ab56cdaa25ea7ab7255cb8f65cc751","sha256":"955cdc34bdcd1f5a04d6d37db01fbba2988b50e036d07b3160d24ada48fa73e6","sha512":"0b52c5942791b65707e5a28fe4ba7f05ab0cbe04d52003f4d593382384c0477322b20c2e1b98c4dbed679ea07d3878063bf4bbbbe75b39b147f6c6da7323ab93","ssdeep":"1536:eQH729pKSGWiAMiT3UflrAwEDKMAzA7VK4t02qlG6vLXnSHT+glfVaQsuN+nVIfo:eQa9pKSOiT3ClEwtOVKTvLXnS9LapOqV","tlshash":"67933bda33e7b03983b624b055bf140bb239ac526c4de455e100f4d53e74aa986bbf2c","first_seen":"2025-11-23T22:29:02.36872Z","last_seen":"2025-11-23T22:29:02.36872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=21d2f739-fbc9-4b19-8628-55f3e408a367","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=21d2f739-fbc9-4b19-8628-55f3e408a367 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1679\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1679,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:04.808+00:00\"},\"timestamp\":\"2025-11-23T22:28:04.808Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"Cons-CC-_-Peros2025-_-CCA1HZKU04_Hero_NH_Card_Peros_Aug25_CMS_MH_product4Cta\"}]},\"list2\":{\"list\":[{\"value\":\"CCA1HZKU\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 21d2f739-fbc9-4b19-8628-55f3e408a367-cb6caa5701ad4064\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f6bb4f877e1136532acf72725afcf0b","sha1":"02390eacfd8f2b6e2cf1271f317e7a13a7e0f926","sha256":"534ededa297b76c1d0604e5e7288c6f21628c4085da9cfbd5bf02fa32a835ec0","sha512":"60a97c1535d0cf9ed5f3aa79b39b7082101a545a555aba874f0778ffadb07cd786979201c0f58b8fb8bc056e189b5d1b39366c82e90aff1080e9de1e57ca0285","ssdeep":"","tlshash":"b8f055ca8a4aaad508ef3a8265c7f53897623206d4cbc0444a94aba1c28d9c4710ce1b","first_seen":"2025-11-23T22:29:02.371074Z","last_seen":"2025-11-23T22:29:02.371074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:02 GMT\r\netag: \"40d-63c0c4a35be06\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044XWdqa-RvpqCP3xYWAAAAQo\r\ncontent-length: 379\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1037), with no line terminators","md5":"b2f91a16a4e33d9423b2ca5dd0841146","sha1":"cf9157182f1cb2c6823e8f7b5d96a3bc31b88bf7","sha256":"414bbc8cd4f349ecf949b34bcf0b99830ac50dd2e965103a60796fa317983e37","sha512":"20da47c2df283ccff5ff6bb6f74afd7b4cafd432aa5b2c613962f4ecf88566d2bb7fd32c2118ae49d0553eeb9e3818d518557c590278a416b976bcdcfed09a8e","ssdeep":"","tlshash":"bc11041993a9e8913e744caeb54b3733511b089cfede26e89d9a6160240fdc743315bb","first_seen":"2025-09-22T15:23:49.984388Z","last_seen":"2026-04-29T12:07:41.817718Z","times_seen":57,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/pages/gt-search-public-widget-1.0.0-es6-page-c2226013574eb7d365bb.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:02 GMT\r\netag: \"40d-63c0c4a35be06\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044XWdqa-RvpqCP3xYWAAAAQo\r\ncontent-length: 379\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1037), with no line terminators","md5":"b2f91a16a4e33d9423b2ca5dd0841146","sha1":"cf9157182f1cb2c6823e8f7b5d96a3bc31b88bf7","sha256":"414bbc8cd4f349ecf949b34bcf0b99830ac50dd2e965103a60796fa317983e37","sha512":"20da47c2df283ccff5ff6bb6f74afd7b4cafd432aa5b2c613962f4ecf88566d2bb7fd32c2118ae49d0553eeb9e3818d518557c590278a416b976bcdcfed09a8e","ssdeep":"","tlshash":"bc11041993a9e8913e744caeb54b3733511b089cfede26e89d9a6160240fdc743315bb","first_seen":"2025-09-22T15:23:49.984388Z","last_seen":"2026-04-29T12:07:41.817718Z","times_seen":57,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_lo1_rgb.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-merrill-en-merrill_lo1_rgb.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Jun 2024 00:07:56 GMT\r\netag: \"1e02-61a41977b9215\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 21 Nov 2025 08:36:13 GMT\r\nx-boa-requestid: Zz7w_Wiug8cdQS0uwiOOOQAAAQU\r\ncontent-length: 3201\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8acf4174242a8366b57ee9738ac37a40","sha1":"e5bf4d52d6abe87aefebca1fca1577d644275428","sha256":"4a0553ccd697b3064819d5f22cca6fb0614c87c426449162ae504445b3f2ad13","sha512":"25208d69c5d20ec375e97d48818bbf1e78753e6a83d398201d884a4679fb92f69380504c488c7d6850a0a0c5e9a1139b6865b7b1939b4396321125e249d83f01","ssdeep":"192:g66snUHPINvcsB+LMvLHhhhs29lAnNjNNOphBv30lqs6Jpq6tKD:gdTaTFzbKAlAn0x0lqs6JZKD","tlshash":"99f1011243589bfabde8497cd665289435e9edaba070f1c8bbbb0443e54c4c0d19c6ef","first_seen":"2024-01-13T15:47:56Z","last_seen":"2026-04-29T12:07:41.773097Z","times_seen":165,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-cards-en-bofa_icon_card1_186.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-highlights-consumer-cards-en-bofa_icon_card1_186.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 08 Aug 2023 00:13:09 GMT\r\netag: \"47c-6025e3a5fbb1f\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 21 Nov 2025 08:36:13 GMT\r\nx-boa-requestid: Zz7w_Wiug8cdQS0uwiOOOAAAASw\r\ncontent-length: 612\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0a8cef8b2cb518c6181220583eb2747","sha1":"42e612d55f19c077304745d002a346e050c36dc6","sha256":"76b5b3891bfe07fb1330f2f4d13754dcce11dbd2a545b8e1621c2531b1ff20c2","sha512":"153e977f164ab6e7e57433daaac14ea38f9550e82e686078342951bcf2b944d81c08bcb2d623bf5ad7b478438198a7a455d92c38e748c668cb21400f1bfcb84e","ssdeep":"","tlshash":"3221ee2aa305a6bec5514744931419da72b0e047c16486d4dfeb3c2feaad8c4d9297bc","first_seen":"2024-01-13T15:47:55Z","last_seen":"2026-04-29T12:07:41.870045Z","times_seen":162,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/kurt.js","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aero.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:50:33:9B:A0:50:10:C7:20:6F:08:F8:F1:5E:83:FD:B6:25:42:0F","sha256":"43:8C:AD:00:14:00:B7:A6:7A:EA:70:58:FE:C2:9F:8E:79:35:1E:1A:62:F5:F4:AC:E6:13:89:B0:8A:BA:72:F9"}}},"request":{"raw":"GET /30306/kurt.js HTTP/1.1\r\nHost: aero.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/x-javascript\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96761e291299fa25e843e7ad1c1a47b6","sha1":"a5d4616b6523c0389bc52aa8d10b6c87d7a19662","sha256":"e1c8f579c875c308d9b90ddd94ec05134609267dfaa7f107aa04cd735aaf29df","sha512":"7325b31afaae8f78ecc9e58c9cf6b08f0f1c604d4b180f7ac573228b5f9582b8fed1c62aac26347082d4dfbaad37d10bafc2916651261b2ff56dac79ee0262e2","ssdeep":"3072:XHRGcT3uxipOV4749cYtYqnC9d5+1tL7rlP:XHRROe749zCszL9","tlshash":"57b308da37d7703983a228b463bf050bb27c6c531d8d9459e105e4d83a78aad827bf5c","first_seen":"2025-11-23T22:29:02.376939Z","last_seen":"2025-11-23T22:29:02.376939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":293,"dns":68,"connect":94,"send":0,"wait":100,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/login/rest/sas/sparta/ls/entry/v1/initContainer","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"OPTIONS /login/rest/sas/sparta/ls/entry/v1/initContainer HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-name,content-type\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.0 200 OK\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, UPDATE\r\nAccess-Control-Allow-Headers: Content-Type, X-Requested-With, Cache-Control, cawcsrf, clientait, __pageidheader, bdc-csrftoken, x-boa-access-token, x-boa-flowname, cpcv, csrf, app-name, Csrftoken, app-header, search-context, pragma\r\nConnection: Keep-Alive\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nServer: Oops\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: JET3YUxWIWjaeamF/8c0uQ==--BHw2bEyspSNmC4B9tcqEFQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1515,"timings":{"blocked":693,"dns":158,"connect":123,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"171.159.116.100/","fqdn":"171.159.116.100","domain":"171.159.116.100","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:27:56.111Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 171.159.116.100\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":0,"connect":127,"send":0,"wait":0,"receive":0,"ssl":412},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/js/common-chunks/common-es6-components-d5ca4d04e8646a4cfe63.m.js","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/js/common-chunks/common-es6-components-d5ca4d04e8646a4cfe63.m.js HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 18 Nov 2025 16:34:35 GMT\r\netag: \"21bddf-643e10a044051\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04y9SJiUBSGlFskfU2XgAAAWs\r\ncontent-type: application/x-javascript\r\ncontent-length: 486673\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2211295,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"526f0525b64c68233406f4f592e10a2c","sha1":"39b51d004804b9fd06c8299f60cc77c1e47a5308","sha256":"c179de05fab4f7919792f49e02a35753240aaeb8fa4fbe34d7237d77671f729d","sha512":"f30da2c6d955c23b73e6a27778aa034c8ff94ecbcb168b9220c0997a2b1ade95e9f61cd55108c64f963ea5bcfc1914cd622c853b8f8c5560a929e3d7a1d65293","ssdeep":"12288:PjXGRHSQWAq1ow6PCKez8R6c5SwWOQSEERX:PjMJXwowqzj5tRRX","tlshash":"8a2559da33d472b943c592a4502f02067736383a7819c54cf67de8dba969c8a017ff7a","first_seen":"2025-11-23T22:29:02.379598Z","last_seen":"2026-02-02T22:49:09.233931Z","times_seen":6,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":170,"dns":139,"connect":2,"send":0,"wait":13,"receive":16,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_04_-CSX8695c106.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_04_-CSX8695c106.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:16 GMT\r\netag: \"6f3b-642f6f85e8442\"\r\naccept-ranges: bytes\r\ncontent-length: 28475\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:05 GMT\r\nx-boa-requestid: aR04zTKBL0Qtgz62c4JUywAAAEA\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x460, components 3","md5":"a2a8bc3e9d8c63058842904b8a075e59","sha1":"7f4363a92f56acdef041f8611cb095088dbb8c6e","sha256":"2cdde299ab0d30add8de0777b744165b82d967f5ddde08f22fb015305e4c6a74","sha512":"fe2f1fbfc47c5e9ebf5cabb5fbb0e66689ea8cd110aac496ce8063c2545f0b50fbfd5ec6d97b5f162561cb8a5c0a73ae651aeb630f818ab16d4cfe4eb40e7045","ssdeep":"384:qEnbgU8SDV6NEqHE8WLk8s22LgNYorTeExmFMhlz30Ory5xMb/5v2WKF1M+wp5EA:qEnb6SD2NwLktRcRfkA/JJyePEU","tlshash":"d3d2e1eb7d64e291b99b64838fcc528f120e5a1d9818c49e50b42efaea14015beec46d","first_seen":"2025-11-08T07:08:40.644136Z","last_seen":"2026-03-23T12:47:44.408502Z","times_seen":53,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-5779014_Travel_3.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-5779014_Travel_3.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 08 Aug 2023 00:13:09 GMT\r\netag: \"bd6a-6025e3a6187c1\"\r\naccept-ranges: bytes\r\ncontent-length: 48490\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:36:14 GMT\r\nx-boa-requestid: Zz7w_Q6bBYBw4Papcx1E8QAAAR8\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1013x638, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"78012755545d42833aa26ec1a48d17a7","sha1":"5592fdd8c7552ce49a6fca2249764099a729c394","sha256":"f999970938cc846264ed13c778b50b41533cedcf211d66118b87ff53271e2baa","sha512":"12403cae49f5dc09b1246133ecad3ea3070de35e82a44212e57ada4d62699b78aaf8214ce36b5cecbe048fce2bd3892257f2d422ae469d0910b750f2dcc23c3e","ssdeep":"768:QgnwRrOqCfaL3m1DAwwoZcvi2r7yBaWPPVvvd5gaGg8+QMlqIoXpn1EinK:QWuO3iLEAKAf+z5gtgHQAxop1U","tlshash":"592302edb488d017423a062f495a70494ca4af95765f3792e0f18dbb30c9f9378b91bc","first_seen":"2023-08-21T01:15:45Z","last_seen":"2026-04-29T12:07:41.739136Z","times_seen":221,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"2e18-63c2eb9aa7414\"\r\naccept-ranges: bytes\r\ncontent-length: 11800\r\ncache-control: max-age=26920000, public\r\nexpires: Tue, 26 Aug 2025 00:48:12 GMT\r\nx-boa-requestid: aK0ESy179DFW29Ehd2OWeQAAAOU\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11800,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.197","md5":"79e7bc718644146e98b5d55f19c8ed4a","sha1":"9d0c5c674b242443a055a654e1ef0fa0e31642e2","sha256":"d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7","sha512":"af5f4d73f30a061ae87a2b63a308010b96280183d80a94881bd55e5294b53a6c554df75d729a654287c25e130652b03cde18fe438436efcc034168a975218fa8","ssdeep":"192:EwbB9M9mm2OVIXmy2dA4Si9dTVJQh3AT6Ci/dA/KRNI2/7OTj2bKKagXFVH6Vr1P:EwbB9+uOVIg9X95nN6rzs2/7EybySb67","tlshash":"0d32bfaa074dd6b943c0d9f811eebbd670e6013f5d653fb4ddd864ca0222e068be84e0","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.699201Z","times_seen":254,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/gt-secure-fdic-widget/1.0.0/index.html","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:03.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/index.html HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:28:03 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 10 Nov 2025 02:08:15 GMT\r\nETag: \"172f-6433401105083\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:28:04 GMT\r\nX-BOA-RequestID: aSOKc2-uhnmjcj_0Z6Hf7gAAAd8\r\nContent-Length: 1565\r\nKeep-Alive: timeout=40, max=464\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\nSet-Cookie: SPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=001EC896B80069238A73; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b13351544bb942085819b8fdea3174bfd69911ac52fdd79496c2604859e526d5d221a52785d8d80ccb83489a1af49b4df34eadf1; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: vRjRlmRh1GTl20m2QmEGnQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5935,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with very long lines (5935), with no line terminators","md5":"ed14ddcbbf4eb0f8399b95b392a48454","sha1":"29c3e77144bcead7b08051589da301d99cb9e9bb","sha256":"397889e35e7fc01fdd544f5aab29aec50695c1f7abaf12e6cfbe3e5e7fad74f0","sha512":"37fe7f2c43250cba83d0f785f6f1b909be8dd16fd97f29659bb134ae04c55d2687d6259592059f68befca7d7456ab2a3994f19aed3701a48041c433286836b66","ssdeep":"96:2t1IrDm/mmTXjFXgW+1jGCa1Q1A1aSikSL4lf/dDSXgiSlg7GCV19171BsvxK790:LaZOjGXie15Omg7G6fR57O","tlshash":"b0c1312132a56c6b413b42caf57c32c977905fcfebd59acc58ac6e600bc7cd8a6601d8","first_seen":"2025-11-23T22:29:02.384756Z","last_seen":"2026-02-15T01:17:16.616502Z","times_seen":7,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"3e00-626631fdda795\"\r\naccept-ranges: bytes\r\ncontent-length: 15872\r\ncache-control: max-age=26920000, public\r\nexpires: Mon, 18 Aug 2025 06:22:23 GMT\r\nx-boa-requestid: aKLGnktIzUxCJVjqDX1FmwAAAh8\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15872,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-13T13:16:02.965059Z","times_seen":3785,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"37fa-626631fd92b2c\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: Z7VWZoQQYEFrA7MjOW1AoQAAAZw\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awuseb.advanced-web-analytics.com/30306/nuadke.html?e=https%3A%2F%2Fwww.bankofamerica.com\u0026es=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688419481474","fqdn":"awuseb.advanced-web-analytics.com","domain":"advanced-web-analytics.com","tld":"com"},"ip":{"addr":"3.167.2.120","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.advanced-web-analytics.com","organization":"International Business Machines Corporation"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 20 Mar 2025 00:00:00 GMT","end":"Mon, 20 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:ED:CF:F3:68:66:B0:85:C3:39:E6:08:9E:97:F3:43:E5:E6:FA:08","sha256":"77:11:1B:6A:3B:06:08:97:C7:80:86:E2:55:12:88:B1:A7:0F:08:92:73:4C:40:1F:FD:6A:C7:F8:E4:86:0C:20"}}},"request":{"raw":"GET /30306/nuadke.html?e=https%3A%2F%2Fwww.bankofamerica.com\u0026es=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688419481474 HTTP/1.1\r\nHost: awuseb.advanced-web-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nserver: haile\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MeGp9yYy1zLTMbq_ZGggwF6AHMpfBgMP6QCEFTCBiPIHpqjYrkdVMw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":79509,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"6cd069301a63e1c2975eb38350bbf7db","sha1":"0f2f8a6067804987d96a34bae0c8399549927baf","sha256":"edaa0841c5284d0ee341b5222380675bdfecb04a6ccc9aee7469400db6ea1d56","sha512":"a328f60c8e9f81e1e2a8eef792e566660fa2c51c6ed35a84ccac068336602ac4aea34f436e5de2c7237111840fb7cefdbb89fee8514c45f6e01e1cdf9473ce95","ssdeep":"1536:EMD/DyDW/IZkLePT3JfGrxZfj5j+AsAyOiaM9oFLx9X7Gs07lVrWrFfs00LRP4Zn:E0/DyDyYT31G9HkO9MiJx9XSXJg9sLna","tlshash":"4c7318da33dbb43943e62cb056ff0507b6396c925c8dd098e154e4d439789a886bbf2c","first_seen":"2025-11-23T22:29:02.38703Z","last_seen":"2025-11-23T22:29:02.38703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":270,"dns":155,"connect":1,"send":0,"wait":213,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/index.html","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/index.html HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 10 Nov 2025 01:59:28 GMT\r\nETag: \"129af-64333e1a00242\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=1\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKb4sfl8L285TOeKYKKAAAAAg\r\nContent-Length: 15340\r\nKeep-Alive: timeout=40, max=489\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\nSet-Cookie: SPID=Q1S2; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=002D0B80220069238A6F; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b1335154455340a90035d46656222bd5d340803b8eefa7be67e704d05158dc0ac261443a8ccc0c6367971f54b78784f208b4d8f3; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: qSxWHe5NfKlQBFKNlGX6uQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":76207,"size_decoded":0,"mime_type":"text/html","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"26c9f2181dd9ba9fde36760ce71080eb","sha1":"4604993bdae52603d7705eb2c992040554df53be","sha256":"057568bc739d010f2891ca2b6006a6c75be62539f3d85023c09f640f6fcd9a8f","sha512":"2ed17e935ec6fe419401ea2dbd0187b894fbc3e9f1bdec23c5ec51043de459248e43c4354d077696374dbe9574da81df2b2ab032ca9599579c5b8cb9125fc097","ssdeep":"1536:LbjgaW3k8/WdEjrsTKOQTarTNAJjzuhmIoOAue4x3k81g3k8t+hk9+xw9+x4q:63k8/WdPTKOQTaVqfO3k81g3k8t/LC","tlshash":"d6733a7efa8c993f1fc04b44a79b7be0b2b5509991c50d6ce44c40a80ed7f886577ba8","first_seen":"2025-11-23T22:29:02.389439Z","last_seen":"2026-02-15T01:17:16.731147Z","times_seen":7,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glassbox-hlx-igw.bankofamerica.com/glassbox/reporting/aab600df-ed6d-5f46-dada-9c5376520067/cls_report?_cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2%3A0\u0026_cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0\u0026pv=2\u0026f_cls_s=true","fqdn":"glassbox-hlx-igw.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.161.100.253","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"glassbox-hlx-igw.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:44:75:59:AF:CE:33:FF:8E:E8:32:9D:4D:0D:53:8D:13:7B:02:E5","sha256":"2B:F9:06:A3:7B:04:50:2F:D5:AD:F8:4A:86:6D:D7:7E:3A:05:84:3E:B3:FC:2A:3A:C1:D2:BC:10:03:CE:5B:0D"}}},"request":{"raw":"GET /glassbox/reporting/aab600df-ed6d-5f46-dada-9c5376520067/cls_report?_cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2%3A0\u0026_cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0\u0026pv=2\u0026f_cls_s=true HTTP/1.1\r\nHost: glassbox-hlx-igw.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:28:00 GMT\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: POST, GET\r\nAccess-Control-Allow-Headers: accept,x-requested-method,origin,__pageidheader\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains;\r\ncontent-type: application/json\r\nvary: origin\r\ncontent-encoding: gzip\r\ncontent-length: 503\r\nVia: 1.1 laz10pegbxgs04v.sdi.ssc.ext.bankofamerica.com\r\nset-cookie: _cls_cfgver=3ab308b1; Path=/; Secure; SameSite=None;HttpOnly;Secure\n_cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; Path=/; Secure; SameSite=None;HttpOnly;Secure\n_cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; Path=/; Secure; SameSite=None;HttpOnly;Secure\nrto=default; Path=/; Secure; SameSite=None;HttpOnly;Secure\nTS01f13836=010383c7fd0f1bb082a114a835246717a4bd0202aeaf7ca8be22677f418aff57ad07b577b0d54cec8ec69ed916b746aa3d3c4846fa; Path=/; Secure; HttpOnly\r\nX-Akamai-testSITE: GTDC\r\nKeep-Alive: timeout=5, max=511\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d4d68c633d249e7833a31dacc6cbddf","sha1":"e828c6da05322003cb7db72f7ffd401632732930","sha256":"41be020b1bab1975046a5813b609d74d82083f3e10da591ce889fd8b46e12fab","sha512":"92528cd578a5c8a27521416fa198f788468e4cb579df3b33b720f8fdcc09547db139ec5fb6bc84e7aa5e2db5f47c48265538de45fa7a7c9034e3b2aa6260b751","ssdeep":"","tlshash":"2b0110a63b5126fe8b5b2907e4041e41c761268ff2a87e1cbc89844db56b488e703339","first_seen":"2025-11-23T22:29:02.391863Z","last_seen":"2025-11-23T22:29:02.391863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/cnx-bold.174a7bdd867eaf5bbc2d.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:54 GMT\r\netag: \"2e18-6184f982e1100\"\r\naccept-ranges: bytes\r\ncontent-length: 11800\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:32:30 GMT\r\nx-boa-requestid: Zz7wHfb2FvjBZiwgzakuyAAAAeA\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11800,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.197","md5":"79e7bc718644146e98b5d55f19c8ed4a","sha1":"9d0c5c674b242443a055a654e1ef0fa0e31642e2","sha256":"d48faa13adcd567a29299db487912dd91fd45f777cadf153520f52023b58cee7","sha512":"af5f4d73f30a061ae87a2b63a308010b96280183d80a94881bd55e5294b53a6c554df75d729a654287c25e130652b03cde18fe438436efcc034168a975218fa8","ssdeep":"192:EwbB9M9mm2OVIXmy2dA4Si9dTVJQh3AT6Ci/dA/KRNI2/7OTj2bKKagXFVH6Vr1P:EwbB9+uOVIg9X95nN6rzs2/7EybySb67","tlshash":"0d32bfaa074dd6b943c0d9f811eebbd670e6013f5d653fb4ddd864ca0222e068be84e0","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.699201Z","times_seen":254,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_01_-CSX7a28d554.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_01_-CSX7a28d554.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:23 GMT\r\netag: \"4303-642f6f8c34878\"\r\naccept-ranges: bytes\r\ncontent-length: 17155\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:05 GMT\r\nx-boa-requestid: aR04zWecw6uMMs4sRRU1awAAAAI\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x460, components 3","md5":"54ee09edc1aebee677157e089442a824","sha1":"e9272ec861e95c3cf835b7256186d3140733c949","sha256":"2e3ce6e748f0b49802844ad5d02c9902ee972086b70bc756fdfd4c6d1f949de2","sha512":"307ec8d4f9d9a391d0b984318654f23d5ef57f1c9f2be1ce8d2729b2c85b0d084bf21ee359e28b7d33a2b542b6dd3fb5f999c9c98557eb27be0c7e4e2ac2e42d","ssdeep":"384:ivOCSGZzX0kszQV/Wk8wsU+taOugdzq+d7fxsyJfb1z2:i2jGZzX01+WkIjaOuJcfxjJf56","tlshash":"1d72d0ca96bec196e9a4f267c6771093936b49d23119fb654042dfe6402837360bcca7","first_seen":"2025-11-08T07:08:40.679342Z","last_seen":"2026-03-23T12:47:44.407397Z","times_seen":53,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202509.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 124198\r\ncf-ray: 9a3418d6eee456c9-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: hR2rJrfQlXodAcvjDvQHJQ==\r\nlast-modified: Tue, 30 Sep 2025 02:10:11 GMT\r\netag: 0x8DDFFC67CB575C5\r\nx-ms-request-id: 82f1a884-001e-00c0-3396-5419ce000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 56744\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"5cf36dff5bb229631d8a5e1b28c2c96f","sha1":"a59d6fdd9f6f05935d8a1beaeca44403160c620c","sha256":"e4a4e646988da9ff17c1390f40929de6dbad336b137a818a80163075807184af","sha512":"785e13a618dc1ea9da32c80015ccc135a4d415930c42e36130d4e8ff2ba55b5a960b2e010a763ad96151a68a8763c82a61dba6bd8bbff0abe0692b6511a90d9f","ssdeep":"6144:Utz7PEhOVJZ9xzGtE7qxo6zqNXxJrJbtdusSMEj5pBrr7Beud7aC:UCQVpxzGtE7qxevSMgrcI","tlshash":"87b42a8e7590793587e752b8c027414ab63174acac95806cb45cc5f90bf9f821ea3fbb","first_seen":"2025-09-26T10:39:51.823405Z","last_seen":"2026-05-13T14:29:54.684422Z","times_seen":5341,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/login/rest/sas/sparta/v2/iac?dfp=true\u0026_=1763936878274","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /login/rest/sas/sparta/v2/iac?dfp=true\u0026_=1763936878274 HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ncache-control: no-cache\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-BOA-RequestID: aSOKb7cYldcIIuXSzxdjSAAAATs\r\nKeep-Alive: timeout=40, max=460\r\nConnection: Keep-Alive\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Language: en-US\r\nSet-Cookie: JS_VIPAA=0000r_kBBNX2z1YOJ9p9rQca3as:1e2gi79fq; Path=/; Secure; HttpOnly\nCSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; Path=/; Domain=.bankofamerica.com; Secure\nccts=VyuWXRIcujEEMieDcA7avD/72irmsLaSDskTlkdseFq03DDPxcTvQG3WH4tbaA52wcJFeF2Omc5pn9AP5OOvRQ==; Path=/; Domain=.bankofamerica.com; Secure; HttpOnly\nAHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; Path=/; Domain=.bankofamerica.com; Secure\n_cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; Path=/; Domain=.bankofamerica.com; HttpOnly\nSPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=001B3F88F90069238A6F; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b133515422d4674f949aaea7bca38acec16b15de1026967e79820a742c7d8463758efba911fd74850b28c2e5cb06bae9f837b955; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Expose-Headers: SMIDENTITY, Uniq_session_id, device-type, csrfToken, gatewayCSRFToken\r\nX-Serviced-By: 6eu/Y22ECbOCKtU95tG29A==--JET3YUxWIWjaeamF/8c0uQ==\r\nTransfer-Encoding: chunked\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39469,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4672)","md5":"e2e4fa6b4785d6d12b76c94870e80066","sha1":"5a15a0638a47593aab424c221561b9699575645e","sha256":"b8518afb56071f2752517aa838a36c10c9dcf8384160659262395c48cab86143","sha512":"ddef15b79569d1a1e305d080c6bed95ad9e2b5319072f418ea11f108b70ad2127480ed21d58260bc632c66d54f8a0a3dfda799e880b2a3ddb1f848f4ea68b8ba","ssdeep":"768:o1nlDUtj4wRn/nUO+uYPY5QizHEjI9yU1fwOwOoS:Unytj1RnfrYPY7zHEWyYD","tlshash":"51035d993276312952373275617f620ff0b256a1a806dc9090f6cde4bdb4eaf1233f69","first_seen":"2025-11-23T22:29:02.397387Z","last_seen":"2025-11-23T22:29:02.397387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":128,"send":0,"wait":266,"receive":1,"ssl":410},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-4b884495e6ab63432fc9.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-4b884495e6ab63432fc9.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:01:01 GMT\r\netag: \"1094d4-64333e7325557\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04Ha5WsCQHJH_CzO0SyQAAAZo\r\ncontent-type: application/x-javascript\r\ncontent-length: 334323\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1086676,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3eac154b6bd1c90504af0ebbd13357c2","sha1":"78ed022c221299f4a929620ed6fd72a951c6c109","sha256":"c691c99ec70ada41b7eb789b9caeb3d0271b00e29fba3efb8af2305bbc44159b","sha512":"6e883db7850f765c53b69bd610b065abb63fd5dda413b00fe442648d7a105698f848e8487ee65741b9c1a63835c296c033ef4c6d84f48156a53a5308beba4fe1","ssdeep":"12288:geHNY0q5ZYdupobOKALV+gQ9oTB1KcKHCBzSdJhlM:gZ0uZYgpobOGoTB1KdHyEJU","tlshash":"08256bd972d0b2b653ea53e1502b1102b3392879b809c894f17dd9cb3d2a94a417ff7e","first_seen":"2025-11-23T22:29:02.399987Z","last_seen":"2026-02-15T01:17:16.613724Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0//spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-internal-scripts-e0159c1fa0ce.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:08:15 GMT\r\netag: \"e4ce-6433401122d0f\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aRrapJz3dXorg7toQfYQnAAAASQ\r\ncontent-length: 11229\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58574,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53044), with CRLF, LF line terminators","md5":"eb23aa405c5541d4ef5fb7d55d3fd0e7","sha1":"477f1abd59c54d35cb4fe022ac0948d2bbdc329f","sha256":"f360195fe3f79ede2d6daa4c7b93d1bbdb1446c698ef37cccb801e9ede8d9bae","sha512":"b78309f48b7d9a5b11717610ddf4c11af985f87193e11a1512bf59239c75892007ea63713267eb862c56d3b15b2042acf26169f85c5e4800a9f70c69d1cb0102","ssdeep":"768:2U9/xe2TKOQTa+e++8dv+Pdb84yd9M6gcyxBxTKOQTaS4+PqTNA7i9MfXss:NTKOQTa+e+fd+b83aTKOQTatTNA7Pss","tlshash":"98433a2046c9dd770f61a29e608f76d79268089dfbc4cf5cbaed900026c6f98527f6e4","first_seen":"2025-11-23T22:29:02.278992Z","last_seen":"2026-02-15T01:17:16.639866Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/images/mb_yni_bb_3034668_1440-4d2b065272ea1845378f.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/images/mb_yni_bb_3034668_1440-4d2b065272ea1845378f.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com//homepage/spa-assets/css/homepage-dap-page-fd76a2f41956950fe221.m.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"2692-6184f98387d09\"\r\naccept-ranges: bytes\r\ncontent-length: 9874\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 22 May 2026 03:06:30 GMT\r\nx-boa-requestid: aC6Utt0byZvczsnU_HM55gAAAAk\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1440x320, components 3","md5":"9a3f32b23546d232b1724d4a71409ca4","sha1":"0bd9dd5dfdfa4c9aad7252215b7d8f6519377019","sha256":"36d949908df2e6067788cfc71a6f8d26baf2ef9a93e6a91a8377cb26d2ea8f6b","sha512":"f874da1b205c7092053a418f55f31265b4684c9c13e7c34dfd87395b28165c05b0627f64d49206bf848e2de9c73ff00c574cb34016fb41452a638812f3730dc9","ssdeep":"96:gKFTy9bbEw72DNZ53sDGJUgTNj5d3xmh8IpWy3oh4UnNATxoIZ:FE9Mw783sDGa+jhmlVdog","tlshash":"89125b07c342b2e8d44c237012512709b8c3957be9d646aa7fb28e74a47fb520d66dfd","first_seen":"2023-05-04T02:03:47Z","last_seen":"2026-04-29T12:07:41.749529Z","times_seen":300,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_overlay_dda_375_8080371_e.png","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_overlay_dda_375_8080371_e.png HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 27 Aug 2025 00:46:46 GMT\r\netag: \"4a09-63d4e1f883cd4\"\r\naccept-ranges: bytes\r\ncontent-length: 18953\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 27 Aug 2026 00:47:09 GMT\r\nx-boa-requestid: aK5VjSI7tVpRpYDtTVyimAAAAJw\r\ncontent-type: image/png\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 253 x 145, 8-bit/color RGBA, non-interlaced","md5":"01ea0516ea9502245abaea1ba9a917cf","sha1":"680e9b56e4bc45ec7300b9320c18f345c989d5b3","sha256":"cbe8d5dc65e751d0cf121bf125b2dfd77050df9b7b3f3439f40fb5aacc0c27d8","sha512":"95730a3a6a1d446bd36ed661876c7b5deabd1b3ce7901d2b4878e914f3138c1133c752391e25b9648f70418e92e1b0d7304cafe85d665016d7316f7ffae8e339","ssdeep":"384:7ELcXRJU292j3kjAiSZUWgg2Zr2ta+tJKEJlSqFkZTPjHhhldB1:oLKoRUH9z3En9kVPjflD1","tlshash":"4282d00fa0a66031ab30ce9c5bbc5029063f6086184f660d7de9c99b9eb556c00ef55e","first_seen":"2025-08-28T20:53:11.569058Z","last_seen":"2026-04-29T12:07:41.872975Z","times_seen":91,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/images/assets-images-global-get-app-modal-google-play-badge-CSX89f9024.svg HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:54:01 GMT\r\netag: \"1381-63c2eb9ad6218\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 23 Sep 2026 23:47:35 GMT\r\nx-boa-requestid: aNMxl3XlyNlb3bphbYr0ewAAASg\r\ncontent-length: 1841\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d44334d84df12f4539734b402b40cc34","sha1":"c46223399876b228fb4d6b57b8b7c63566bf2b31","sha256":"1fb7690d7f2b1b600dbea5fbfce96198cae49ad0009fee412d96bc462a27eea9","sha512":"ca93b45566f89d7043b8794104ede03bfa69565c05983a5142d99e4ff915ccc313a8b38961ac247320361b2fd4f0fc0b80e140768df7bc290bbdac2a147e77c1","ssdeep":"96:5hGfj88ukTP2In2IWudi8li/ZIfO7fab25kh2FTXDssq37+fNbz8claDp:52n2q2pudzMZ+Mfab25khATqL+V38T","tlshash":"66a13e3dc714d6fedd5bcabcdf529064418e22cad0e18315a3b8c73961e51cfa80da94","first_seen":"2023-04-28T00:18:52Z","last_seen":"2026-04-29T12:07:41.765314Z","times_seen":290,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-internal-scripts-ea61e11411ef.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:00.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0//spa-assets/js/pages/gt-nav-unauth-secure-bofa-widget-1.0.0-internal-scripts-ea61e11411ef.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 01:59:29 GMT\r\netag: \"e90d-64333e1b9174e\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04G9gIvncnJfV4M6akjwAAATg\r\ncontent-length: 11266\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53858), with CRLF, LF line terminators","md5":"813e2ffdadff5bb86ed01970e02c8547","sha1":"b74549b7bddc0dfc3603a62a3e03a8b058bd0355","sha256":"c2c3d48e28ea011f0ab9a35652e96052510fb2a9bb9a1afa923ae52729f5f65f","sha512":"0b96d6d8e0edece4c718f457750ed1a6cdafd687e75a6cab6f7cde0a62db9c5fd60a82d10f0432d029a353598b4fcd1c10c2dcb8ae1e345efff96e3679018f03","ssdeep":"768:CyBzd86TKOQTa+e++8dv+Pdb8Kynzg6iS2dJ7TKOQTaS4+PqTNAjezg1s8:rTKOQTa+e+fd+b8doTKOQTatTNAj/s8","tlshash":"1a434b108282ad378f61629da09f7e97436c04edf6c4cf5cb6dd91042adaf85907e6f8","first_seen":"2025-11-23T22:29:02.407202Z","last_seen":"2025-11-24T15:38:31.075319Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:13 GMT\r\netag: \"3d78-634eb5b417c9d\"\r\naccept-ranges: bytes\r\ncontent-length: 15736\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:26:25 GMT\r\nx-boa-requestid: aR044E31STd9hg-kYQDn8wAAATc\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15736,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T14:38:27.882006Z","times_seen":7531,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=85829292-f18e-416d-9351-bc91627ccda3","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=85829292-f18e-416d-9351-bc91627ccda3 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1722\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1722,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.475+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.476Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"GWM-SelfDirectedBrokerage-_-Default-_-G2C1QVEC01_Highlights_NH_Edge_0604_Solutions_Default_HL_meddt0424Hl4SolutionsEnHl\"}]},\"list2\":{\"list\":[{\"value\":\"G2C1QVEC\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 85829292-f18e-416d-9351-bc91627ccda3-d547b41d85674ece\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b497aa59724cc2cff67db03bb9c343fa","sha1":"e469dc43a1c68406dd1e9677f8dcc777d48d1c0d","sha256":"b753496b98870b807c1cd70ccf1969536ea92fb3581d0afaa07542487609ab65","sha512":"e08da84cf5f393abd4cac39fccb2c2052276f6da93d20ce0e19e7585c55ac9486ab6da078e4db9f329732cbd00707881cf4e788f065a2a2c425035e9a5caf21b","ssdeep":"","tlshash":"cdf055ca8e09aad409db3ac250d7f570975a3207e8dbc0441ba09bb2c2cdac8304de1b","first_seen":"2025-11-23T22:29:02.411025Z","last_seen":"2025-11-23T22:29:02.411025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=bd14c648-fd5f-47f0-8543-88044190e946","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=bd14c648-fd5f-47f0-8543-88044190e946 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1716\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1716,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.637+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.638Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"DEP-Checking-_-NotAssigned-_-DCB1SZCI01_SuperHighlights_DEPCHA_2HDDA500_EN_SHL_CMS_DEFAULT_depcha2hdda500EnShlCta\"}]},\"list2\":{\"list\":[{\"value\":\"DCB1SZCI\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: bd14c648-fd5f-47f0-8543-88044190e946-30927127b5154804\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9d63e900362731222efa10e34c707085","sha1":"a6686f5fa9a943052991afd87cc22ef7c99f42eb","sha256":"5f7814984e15873150093ced2757acd25e872c36847f089956859850e5487380","sha512":"3151a7cea5352b9035f55912e4723cc97d0011b88cd12dde059321f968dbda314952da3023c7e04f546fd19b620a486f71d259d3d4ce1235246123e5fcb8e16b","ssdeep":"","tlshash":"33f0dcda8e49ae9408ef398054d3f93087523107d8d780040aa09ba2c2ccac4300ce1b","first_seen":"2025-11-23T22:29:02.412985Z","last_seen":"2025-11-23T22:29:02.412985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=2f6303b1-cfdd-47ad-ade1-bb373dcc9aff","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:08.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=2f6303b1-cfdd-47ad-ade1-bb373dcc9aff HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 3272\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3272,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"web.webpagedetails.pageViews\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"homepage:Content:Personal;homepage_personal\",\"server\":\"www.bankofamerica.com\",\"pageViews\":{\"value\":1},\"isErrorPage\":false},\"webReferrer\":{\"URL\":\"\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:08.451+00:00\"},\"timestamp\":\"2025-11-23T22:28:08.451Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"marketing\":{},\"_experience\":{\"analytics\":{\"event1to100\":{\"event6\":{\"value\":0},\"event7\":{\"value\":0},\"event8\":{\"value\":0},\"event10\":{},\"event47\":{\"value\":0}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar2\":\"www.bankofamerica.com\",\"eVar3\":\"\",\"eVar7\":\"www.bankofamerica.com/\",\"eVar8\":\"\",\"eVar9\":\"\",\"eVar36\":\"www.bankofamerica.com\",\"eVar37\":\"/\",\"eVar38\":\"\",\"eVar42\":\"\",\"eVar56\":\"main\",\"eVar58\":\"browser\",\"eVar63\":\"en_US\",\"eVar64\":\"en_US\",\"eVar65\":\"en-US\",\"eVar66\":\"en_US\",\"eVar71\":\"\",\"eVar72\":\"\",\"eVar73\":\"\",\"eVar74\":\"false\",\"eVar76\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"homepage:Content:Personal;homepage_personal\",\"eVar82\":\"\",\"eVar85\":\"en\",\"eVar86\":\"|cck||rez_1280_1024|\",\"eVar90\":\"homepage:Content:Personal\",\"eVar91\":\"\",\"eVar93\":\"\",\"eVar95\":\"\",\"eVar96\":\"\",\"eVar97\":\"\",\"eVar98\":\"\",\"eVar100\":\"\",\"eVar101\":\"\",\"eVar102\":\"\",\"eVar103\":\"\",\"eVar104\":\"\",\"eVar105\":\"\",\"eVar106\":\"\",\"eVar107\":\"\",\"eVar108\":\"\",\"eVar109\":\"\",\"eVar110\":\"\",\"eVar111\":\"\",\"eVar112\":\"\",\"eVar121\":\"\",\"eVar122\":\"\",\"eVar140\":\"\",\"eVar141\":\"\",\"eVar142\":\"\",\"eVar143\":\"\",\"eVar144\":\"\",\"eVar145\":\"\",\"eVar146\":\"\",\"eVar147\":\"\",\"eVar148\":\"\",\"eVar149\":\"\",\"eVar150\":\"\",\"eVar151\":\"\",\"eVar152\":\"\",\"eVar153\":\"\",\"eVar154\":\"\",\"eVar155\":\"\",\"eVar156\":\"\",\"eVar157\":\"\",\"eVar158\":\"\",\"eVar159\":\"\",\"eVar171\":\"\",\"eVar172\":\"20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2\",\"eVar173\":\"\",\"eVar174\":\"\",\"eVar175\":\"\",\"eVar176\":\"\",\"eVar177\":\"\",\"eVar178\":\"\",\"eVar183\":\"homepage:Content:Personal;homepage_personal\",\"eVar184\":\"Personal;homepage_personal\",\"eVar185\":\"\",\"eVar186\":\"\",\"eVar187\":\"\",\"eVar188\":\"\",\"eVar189\":\"CCBA:1,C0001:1,C0004:1,C0002:1,C0003:1,CADCA:1,OOSS:1\",\"eVar190\":\"\",\"eVar193\":\"\",\"eVar194\":\"\",\"eVar195\":\"\",\"eVar196\":\"\",\"eVar197\":\"\",\"eVar198\":\"\",\"eVar199\":\"\",\"eVar200\":\"\",\"eVar201\":\"\",\"eVar202\":\"\",\"eVar203\":\"\",\"eVar204\":\"\",\"eVar205\":\"\",\"eVar206\":\"\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar214\":\"\",\"eVar227\":\"\"},\"props\":{\"prop1\":\"https://www.bankofamerica.com/\",\"prop2\":\"www.bankofamerica.com\",\"prop3\":\"\",\"prop36\":\"www.bankofamerica.com\",\"prop37\":\"/\",\"prop38\":\"\",\"prop42\":\"\",\"prop47\":\"\",\"prop50\":\"PageID found\",\"prop52\":\"false\",\"prop53\":\"true\"}}}},\"productListItems\":[]}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 2f6303b1-cfdd-47ad-ade1-bb373dcc9aff-955c4529fd9742c4\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:08 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"22db37b411dbdda66678603caf97954c","sha1":"304c72936eaec075d43de1f4fcfa93d914cf3007","sha256":"e3442af35981b321f9f12caaf4065d9a94f861e9f346bf47189cdf8fe0003c42","sha512":"c4aaaf621f371d30f137062189c5642cdf617f59f567abb1a7ae8012165de7cdf6ca9377d3640a5df4aced9d8643d922105e45d41e40c49e2ceeffaf889a7baa","ssdeep":"","tlshash":"b8f055ca8b0abed548ef798191c3f63097573107d8db80045ba0aba6c3cc8c8714ce1b","first_seen":"2025-11-23T22:29:02.415055Z","last_seen":"2025-11-23T22:29:02.415055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-5779014_Nonrewards_4.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-5779014_Nonrewards_4.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 08 Aug 2023 00:13:09 GMT\r\netag: \"6e80-6025e3a5f40a1\"\r\naccept-ranges: bytes\r\ncontent-length: 28288\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:47:53 GMT\r\nx-boa-requestid: Zz7zuN7lR2OVkEcNwcDhMQAAAN4\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1013x638, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad82286604a5e2af76f417eb5677fe8e","sha1":"9e2f91e00524bdd7068efb5106d65da2e1638af3","sha256":"0493254dde1141b9ccbf9218feb8df3347cad9d2bec42a74f12ca3edf671eb37","sha512":"f4d0374feb97bdb631287a241991087f7f850736f253d4df59be5f20c646b7630c3b9d14ac5a73f9d22150eb4f3415502d6eab23d633686933c0888ba7c50365","ssdeep":"768:lJxGNplk+4P/aQb65ihGXoWVRitgBPqXBK+edZTM:lmjlknyQbUd5WtgwXBKLXo","tlshash":"5ec2e10f3c7418b2355b32a5b31673c9196edc7bddbbec1bc3848f11526a65830b828a","first_seen":"2023-08-21T01:15:45Z","last_seen":"2026-02-02T22:49:09.339112Z","times_seen":211,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/roboto-regular.176f8f5bd5f02b3abfcf.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"3d78-626631fddc2eb\"\r\naccept-ranges: bytes\r\ncontent-length: 15736\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:39:41 GMT\r\nx-boa-requestid: Zz7xzD5i-NJHg1igr3MLDQAAANA\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15736,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T14:38:27.882006Z","times_seen":7531,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 07:16:38 GMT\r\netag: \"37fa-62661882cd163\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04zYPRGB5aLO147NNXJAAAACc\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com//spa-content/v1/content?key=en.global-tenants.unauth.bofa.gt-unauth-all-bofa","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET //spa-content/v1/content?key=en.global-tenants.unauth.bofa.gt-unauth-all-bofa HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-max-age: 1728000\r\ncontent-length: 11814\r\nx-boa-requestid: aSOKWHPMPly4w3D7gBwo6wAAAeI\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=30\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75269,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbca051362a42db9a3e9596c7196230c","sha1":"d59e6c9c4d566853eb7fc336d797e52ca2b1face","sha256":"8e3d5049ac23f61838442ce720ea266c46f2ae5baf8f2a0f2a168f080b0f56c0","sha512":"bcb3ece9cbcd106f607787378c13b2251dea70e03a43b24caec3fc4e13dbfd48a9b1ea1d622b3787040e80d700f4ea3823bb83c03799de11a56b17bd44da1ee4","ssdeep":"1536:dEbOmDPdbZsi4JuFEVkXrObEGkVLFk7EGkVBw:spsiq0FVw","tlshash":"cb7396621e5acab94bd123db70c67f44e667305ba2c05eccd59e9d0c05d8bc86328ebd","first_seen":"2025-11-23T22:29:02.418333Z","last_seen":"2025-11-23T22:29:02.418333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":234,"dns":159,"connect":1,"send":0,"wait":108,"receive":12,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glassbox-hlx-igw.bankofamerica.com/detector/conf/vtim/whitelist.js","fqdn":"glassbox-hlx-igw.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.161.100.253","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"glassbox-hlx-igw.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:44:75:59:AF:CE:33:FF:8E:E8:32:9D:4D:0D:53:8D:13:7B:02:E5","sha256":"2B:F9:06:A3:7B:04:50:2F:D5:AD:F8:4A:86:6D:D7:7E:3A:05:84:3E:B3:FC:2A:3A:C1:D2:BC:10:03:CE:5B:0D"}}},"request":{"raw":"GET /detector/conf/vtim/whitelist.js HTTP/1.1\r\nHost: glassbox-hlx-igw.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=000359FCC40069238A6E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nAccess-Control-Allow-Origin: https://default.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: POST, GET\r\nAccess-Control-Allow-Headers: accept,x-requested-method,origin,__pageidheader\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains;\r\nLast-Modified: Mon, 17 Nov 2025 15:21:14 GMT\r\nETag: \"28d-643cbe5daae80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 653\r\nVary: Origin\r\nX-Akamai-testSITE: GTDC\r\nCache-Control: max-age=3600, public\r\nKeep-Alive: timeout=5, max=512\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"78228957ed988b985916f669569251c4","sha1":"64d04c3a06a36bbd5a4f35caccb30d6418a30548","sha256":"d4402af9c24351ae9e965dc6a09207f7c74d3b946c640d8de0d8fb15b7bbdbd3","sha512":"71a5fdc3c90f106024b07bb185da8e7fe05c3ab1365a4be5dae08bcdfd115ea85a6f11471d071a7e3aeef0be1779d09606497b82fd46927512c267925621557b","ssdeep":"","tlshash":"ddf0f9ab40f4c96302448970c0df62ecf61aa2af4439fcddb18c723c5f4186b94956d7","first_seen":"2025-11-18T19:57:41.738173Z","last_seen":"2025-11-24T15:38:31.130608Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1783,"timings":{"blocked":808,"dns":313,"connect":155,"send":0,"wait":163,"receive":0,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-card_mh_cash_newoffer_4960977_e.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-card_mh_cash_newoffer_4960977_e.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 28 May 2025 00:09:15 GMT\r\netag: \"264a-63626fddbe304\"\r\naccept-ranges: bytes\r\ncontent-length: 9802\r\ncache-control: max-age=26920000, public\r\nexpires: Fri, 15 Aug 2025 18:20:07 GMT\r\nx-boa-requestid: aJ96VqD80zBwt77TQinYUAAAAHc\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a352a93650678fce85198a717834bcb4","sha1":"977f20daf5a233c20b2218f4ae674f02ddc9176b","sha256":"d5ae6fede8d354233a34c218e18c72098eeb6f9263b332f267b890b1bd92881a","sha512":"f3e96cf6f2e4541a77ca0f97444627b1e2286e31f125febd030bfdd1b1cc23cc072e8e3d8311a01bf387b6f4138929ddfa1080c7337673cecbb0070b96096655","ssdeep":"192:HQNpULVsIAjUJCYv+WmcUdk0pT7L0Y7sEhGBplGKHxNTmgEp6+f1k:wNpULOzaCYvTBkpoY4E4ngKHHTmLdW","tlshash":"8d12cf633872a06e29bd2850cf5d4d0205cbdc1e7186e81ce522e91edd37522ac5ebab","first_seen":"2025-06-27T22:40:35.161688Z","last_seen":"2025-11-24T15:38:31.11891Z","times_seen":72,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-bold.c18ee39fb002ad58b6dc.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:03.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-bold.c18ee39fb002ad58b6dc.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:18 GMT\r\netag: \"3dc8-63c0c43faa2de\"\r\naccept-ranges: bytes\r\ncontent-length: 15816\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:21 GMT\r\nx-boa-requestid: aR04oALHC5GJy0L26cKPBwAAAIM\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:03 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15816,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15816, version 1.0","md5":"2735a3a69b509faf3577afd25bdf552e","sha1":"8621aff863b67040010ccc183da5b9079ce6fd1d","sha256":"b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae","sha512":"299bc6bc782c38b4a63d080f8f41a16267c4cb44bc5327855591f833a6c5bbae19fe3eb2a66a24de28744be0c356b70f3ddc23730ddebbb62e8b71190efa4165","ssdeep":"384:OaGm6lgHMI6PWaRm9qoangeK6n3mV5QPl4vzOfmTtHv5yMe6hyFB:XGm6qrCgF6nWXQ9uTtv5yMroFB","tlshash":"7d62bf24c9bbe760c25842ff8f6422772a0b0c5968c691ee5bd79123f4e13477b22660","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-05-13T15:21:34.888823Z","times_seen":4675,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/js/common-chunks/common-es6-components-8af9c6c542b44fc16f62.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:02 GMT\r\netag: \"fd180-63c0c4a35aa77\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044GftYkbdpiD03qqYQwAAAQ4\r\ncontent-type: application/x-javascript\r\ncontent-length: 298215\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1036672,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a16fc5b0e86ac2d1309256f10f59491","sha1":"290cabef0e35adb329612be19f9f056fb602fd0d","sha256":"c298933c2292984a435faff34de2254d6ee019656066fda85ec3a1b1ee6132f6","sha512":"ce03d2a79c6cff648e748b011760296138598385a645627dc6fd7ce6c4236f6c1445777373eac8f41e7f7a9a951aacdd26c3a8f732e58c8644d24b6148976ee1","ssdeep":"6144:tvU9v7+UcJ1Pi4pFeTEYOh8ymRJCa/EXPpPhmXds+y/pXnFfpG1CnKks6L/:xURjY1aImRJCaMMsH/pXnO1C3s6L/","tlshash":"a7255bca33d0b2f653e662f8502b1102733628797c49c984f17dc9da7a26d4a417fe7a","first_seen":"2025-09-22T15:23:50.016858Z","last_seen":"2026-04-29T12:07:41.727223Z","times_seen":58,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bankofamerica.com/homepage/spa-assets/images/assets-images-global-favicon-android-chrome-192x192-CSXafb7d716.png","fqdn":"www.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:B0:7C:AD:57:41:5B:63:46:6F:A4:DB:CB:94:A0:C8:34:22:27:B9","sha256":"10:3E:18:50:9F:5B:97:BA:92:B1:7A:5F:05:38:23:6D:F0:75:C3:36:8C:94:00:70:A9:9D:D0:5C:A4:2C:96:1F"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-favicon-android-chrome-192x192-CSXafb7d716.png HTTP/1.1\r\nHost: www.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 15 Mar 2019 14:29:29 GMT\r\nETag: \"20a2-58422ddd48440\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8354\r\nX-BOA-RequestID: aSOKb6-_OfhDgsEzXoxu4gAAAJc\r\nContent-Type: image/png\r\nX-Serviced-By: /sparta/homepage/spa-assets/images/assets-images-global-favicon-android-chrome-192x192-CSXafb7d716.png--tWD10dQSYI70eGoBWtL6+A==--c4I1IrUyrxHGPGjkL4yc9w==\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.merrilledge.com;\r\nExpires: Sun, 23 Nov 2025 22:27:59 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nConnection: keep-alive\r\nSet-Cookie: SID=002FF5ECDD0069238A6F; Path=/; Domain=.bankofamerica.com\nTS0126dbc2=010da7fe7b932a6fed9f7148fe4075ff150a1bf31b7905bd477a6de4ea85b596f3d75e1477b5e3b798eaa7e49a05183f8410151ff5; Path=/; Domain=.www.bankofamerica.com; Secure; HttpOnly\r\nAkamai-Request-BC: [a=23.36.77.167,b=58217602,c=g,n=NO__OSLO,o=20940],[c=c,n=US_TX_DALLAS,o=20940],[a=104,c=o]\r\nX-BAC-AKM-C: ON\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"67af3bbd46f9947739538d49395d573d","sha1":"03a34b0aa432274f88862b27ab109f8e26311e72","sha256":"b47bfe9d7333188f5b2f8690785ccd966d882c2364a5e4e5ae293e02554ad8d8","sha512":"d7c64e89ee4ce5b2540b453cf27afd21dedb5cc0c3377e18bdf10cb91b64fe738c99b990c6dd5727c34c3d16f5dabe92e3c3779cd4f5a2ae1e5afbf6051004df","ssdeep":"192:ZF60vlrkggOh1iYEWlBDl9OxWMo4Gz3PjMYpV3ROc:ZA0vlrHg412i1rOxWKKjJH3T","tlshash":"8a029d5c58b2ff49029963dd4e630ac34b1ae07b43c162ed9cfebd00ea57b00825a719","first_seen":"2023-05-04T02:03:47Z","last_seen":"2026-04-30T03:27:44.431648Z","times_seen":336,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/authhub-controller/authhub-helper/1.0.0/js/authhub-helper.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /client/helper/spa-assets/components/utilities/client-helper/authhub-controller/authhub-helper/1.0.0/js/authhub-helper.js HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 02 Jun 2023 20:24:22 GMT\r\nETag: \"554-5fd2b56a8d02f\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=26920000, public\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKbwnwRiBmDIhtYvHKUQAAAe8\r\nContent-Length: 512\r\nKeep-Alive: timeout=40, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/x-javascript\r\nSet-Cookie: SPID=Q1S1; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nSID=0005A3D92A0069238A6F; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b133515421a5cd75e1debc9b2cb21d1c5077e457f74bbfee32dcbaaed84dfe1f16dfda26ea9fa8bda5db15bb72a6c6689800b556; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nX-Serviced-By: Dzp76aWVKPVfKGhDMhpRqQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1319)","md5":"13e80fd3861714ed2dbe681784c7a9af","sha1":"ff0fe84050163e394e517c282278078af62774e1","sha256":"ba007a904083bfdf2cd0a68b1b044ff20654d1f7a83303fe82edb6f0dd3714d4","sha512":"90d2658e3e43977dcd10d7dc2fafa8ed175c7b23c333753398a977e19d05bb63d9d31f57297de77b07f39240edb06067be204ae4ab6131c05ab002ea7dee324b","ssdeep":"","tlshash":"f621af557eb88a395f90924b1477ffca923234958f87e04468a9745b1b60f820b68efc","first_seen":"2023-06-02T13:50:52Z","last_seen":"2026-05-01T18:56:55.115733Z","times_seen":313,"resource_available":true,"data":null}},"time_used":1497,"timings":{"blocked":681,"dns":154,"connect":111,"send":0,"wait":126,"receive":0,"ssl":423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_02-CSXd29a3bd8.jpg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-homepage-bmh-module-default-education-bac-edu-tile_141706_608_en_gc_02-CSXd29a3bd8.jpg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Nov 2025 01:19:16 GMT\r\netag: \"689b-642f6f85e74a2\"\r\naccept-ranges: bytes\r\ncontent-length: 26779\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:05 GMT\r\nx-boa-requestid: aR04zTKBL0Qtgz62c4JUygAAAD4\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x460, components 3","md5":"825d7c7bccc6fcc446000f76d522c8dd","sha1":"039b24d93a9bbcf32466ce2d2977f8ab97c085d2","sha256":"4e2de7e752cdfa01ac9cbe85f4e1f7e8d77bc5a76b612da462beb10df070ad4c","sha512":"c7cb95e9c59c80a0f9479e0d1fc8137d36ef83461d30d8adf7629ea425e0055e71cb6a1844594bea5e6e806751acb4932fea97ad36beb68f2eb7122766dd4729","ssdeep":"384:qE75LqlWpEcBiSHdtXlIeg60XjqpL+iDrrUNOgMUflS2Zo5x93ehJdylW2u:qE75LG4cSHdt1A3zqR/24FHd3evclWD","tlshash":"40c2e10bdc9caabed694de7b260057cb035de5d80bcae1a9935f2e71e0ed5542c088dc","first_seen":"2025-11-08T07:08:40.708684Z","last_seen":"2026-04-29T12:07:41.71716Z","times_seen":59,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/spa/widgets/loader/6.0.9/index.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /spa/widgets/loader/6.0.9/index.js HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=000359FCC40069238A6E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 12 May 2025 08:33:34 GMT\r\nETag: \"5ac2-634ec2bf2baef\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=26920000, public\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKbzpgiMWdpL163FkMRAAAAPA\r\nContent-Length: 7709\r\nKeep-Alive: timeout=40, max=491\r\nConnection: Keep-Alive\r\nContent-Type: application/x-javascript\r\nSet-Cookie: SPID=Q1S2; Path=/; Domain=.bankofamerica.com; samesite=None; Secure\nTS017f5af8=01b1335154f9cfdb9a23cff5f35f9cbafafaf90c6a3e17e9f5a6c1d5ed1a0f354e8817e8e64c874eddca3c0b6871f088bbf89cde27; Path=/; Domain=.secure.bankofamerica.com; Secure; HttpOnly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nX-Serviced-By: kkW3FjfCaiVldALL4OOljg==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23234,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (23233)","md5":"bb13f29eb63fe230e3f60c50208a9a68","sha1":"636ccaaf337dfbd6d1e11c33c76e98d880b202ca","sha256":"db87111abeef6f77b69e1a7aaec9932098f5911783a57c5546b3f6cbc166a41e","sha512":"2b6d1aeab4be0e18d9e97891a1719af6dc653aa06b496c0ae445b42fef80596eca8e5be0fc8d84b72f104c234e037c16d2aacc47efea4944720588bb6e1adff9","ssdeep":"384:OFQcOa71ZcxebM1my7L2soWRvJ0Sz3F6czT7zsyYYbR4C:gVZZcxebMsy7qsoWlz3F6czT7zb","tlshash":"d8a29788bbe5f07613a76135901f210bf336659ab41a4850e625e8e1bcb488fd237f7d","first_seen":"2025-10-06T15:18:01.341071Z","last_seen":"2026-05-01T18:56:54.971183Z","times_seen":36,"resource_available":true,"data":null}},"time_used":1416,"timings":{"blocked":567,"dns":1,"connect":140,"send":0,"wait":282,"receive":0,"ssl":424},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.bankofamerica.com/client/helper/spa-assets/components/utilities/client-helper/GIS/helper/1.0.0/js/helper.js","fqdn":"secure.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.159.116.200","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"secure.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sun, 14 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:D1:9F:F7:FC:91:A4:09:38:DD:3E:CC:46:94:FD:0E:BA:17:38:4C","sha256":"0C:31:98:BF:F4:F9:61:C6:52:76:B8:A4:C5:22:BF:26:F3:7F:D4:9D:0B:D9:CD:13:7F:1C:5C:DF:84:F6:B7:18"}}},"request":{"raw":"GET /client/helper/spa-assets/components/utilities/client-helper/GIS/helper/1.0.0/js/helper.js HTTP/1.1\r\nHost: secure.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=0005A3D92A0069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S1; TS017f5af8=01b133515421a5cd75e1debc9b2cb21d1c5077e457f74bbfee32dcbaaed84dfe1f16dfda26ea9fa8bda5db15bb72a6c6689800b556\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:27:59 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 11 Dec 2023 06:52:19 GMT\r\nETag: \"163f-60c366013e370\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=26920000, public\r\nExpires: Sun, 23 Nov 2025 22:28:00 GMT\r\nX-BOA-RequestID: aSOKb94US9kPQqF1iOKsCAAAAAQ\r\nContent-Length: 1767\r\nKeep-Alive: timeout=40, max=498\r\nConnection: Keep-Alive\r\nContent-Type: application/x-javascript\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com fsa.merrilledge.com *.ml.wallst.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com www.mczbf.com www.knotch-cdn.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.bofa.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com *.ml.wallst.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud-bofa.medallia.com resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com *.bofa.com *.merrilledge.com;\r\nX-Serviced-By: ynMxr0WlI1enE8xHeszrkQ==--JET3YUxWIWjaeamF/8c0uQ==\r\nServer: Oops\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":5695,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5658)","md5":"7370da5190517683a6ce7312e3cf0773","sha1":"b81f50087d28309967d97d026215b53abade9d1c","sha256":"55957050a049260a7c7535f1a4eac02c4c31d659319958ce9dbf22e1e9057a2a","sha512":"e5f97f4c6ad5c809d88205558ba431e051f98779b78f3572cdce1fcb923d8e5da4fb13225004f215525beeee452c254a1cf27b3f41cc600dfbb733baec2f3a05","ssdeep":"96:56z9xqu/nLxQPaNgWUjMy/8JeQ01q0z0gz3DWavqavmvdvtL9YvmLXvM9vBvbvMp:56xxr/nngWUjMy/8Je7jou6dl9HUk4CN","tlshash":"52c12ed41f41294d43f22bbe6d3edecaa4fd5e831d4180c310535c779da91abba8aa70","first_seen":"2023-12-14T14:57:11Z","last_seen":"2026-05-01T18:56:55.105673Z","times_seen":288,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/assets/otCenterRounded.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202509.1.0/assets/otCenterRounded.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 2706\r\ncf-ray: 9a3418d948eb56c9-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: tiEI6VsL7YxW1o145YFy7g==\r\nlast-modified: Tue, 30 Sep 2025 02:10:06 GMT\r\netag: 0x8DDFFC679AB4FC9\r\nx-ms-request-id: 7a022e1f-401e-00a1-567d-535d11000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nage: 58648\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10557,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72e2c33c985b07573a97db5cd92a7c74","sha1":"736d917bd732af62d8c408c9c4f8b63463160461","sha256":"cc0893f7642163731e6a1ac5913371303ce1fd81be6995d11012326617ba6817","sha512":"cbe66d14124c97793da4647097ff297adf8a8c06551ce4b326d17063391cff376ad439e7f219193a98231c5bd73910e9a90d36d412ae1e0d47f0c1963a25b61b","ssdeep":"192:NqCIyAQgtNBIWguxw68uCZItctpFwhTwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0PpF:q4rsCJ9OO51j","tlshash":"972296167e101b2cf1ebcbad999275c834226d8bfd3389dc925da77483ad2f20e65710","first_seen":"2025-05-29T05:37:44.344322Z","last_seen":"2026-05-13T14:42:12.887224Z","times_seen":12682,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Fri, 21 Nov 2025 06:40:49 GMT\r\nx-ms-request-id: 4001b626-101e-0018-710e-5bbe1f000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 64279\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9a3418d9b96556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-05-13T12:10:46.817815Z","times_seen":119044,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-global-connect-with-us-icon-contact-black-CSXcce2d264.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:57.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-global-connect-with-us-icon-contact-black-CSXcce2d264.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:31 GMT\r\netag: \"4d0-635075b2d552b\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:03 GMT\r\nx-boa-requestid: aR04y8uUxRkOWkokitMrtQAAALQ\r\ncontent-length: 709\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:57 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94af6f5d099f859f2bf2b81a8dc30dd8","sha1":"8b0d578a846948485532d94cdcc147bef2b0e531","sha256":"0afee1385a20699eb620b044e0abc196c7cdcc7f3f5dcbc743841af51740e638","sha512":"7856ef5d9cd97369857be1a0687bd8eb6bf9689a38e3c6f4c73940fe45706fb4f6a41c2f31be3d0e286501a12b1acb227a76e62405fbf12a6edb3789bdddcef0","ssdeep":"","tlshash":"5f213fc04f68d25c85cf4e78ef29b088361fb9fdb56d54588f8ec628b4e34d5a002859","first_seen":"2025-09-22T15:23:50.018146Z","last_seen":"2026-04-29T12:07:41.895639Z","times_seen":77,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_overlay_dda_722_8080371_e.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-consumer-deposits-en-checking-cd_overlay_dda_722_8080371_e.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 27 Aug 2025 00:46:44 GMT\r\netag: \"237d-63d4e1f6f9ba2\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:06 GMT\r\nx-boa-requestid: aR04zjVRGGprucsROmV55QAAAbQ\r\ncontent-length: 3266\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b96f2d0aa4691dde30e4a6901977f52","sha1":"e5fc641c49cd1c5c65edabfa4aa1a2eb80838314","sha256":"4156ba26e64cf265316ec7be7edd3d342e06885f679bddf890e1bce21c52a574","sha512":"650bd37e38ad23f0cf5ab602fae80b16c7ca005a3719995f3c59aaeb1dfc7b11312f66c4bb0a49d655c8fb437ce842417c580cddce4d239087837440b4e5126b","ssdeep":"96:5JzB+m/Zi7l2LYwTwB29BFhwc85nNEOROWj+Nwasf/KaGf21i9705QEnY1x/kdjO:5Jz3/6l2LYG8HEoOWAwDnqf2F56z","tlshash":"d512116e4354cbf9add4467caf2c68467990dce6f130d2d076af2016cb0c8e4958dbda","first_seen":"2025-08-28T20:53:11.489529Z","last_seen":"2026-04-29T12:07:41.834102Z","times_seen":78,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/9b1b72d0-06ef-4e7c-9b2a-e8bc09f34daf/5a21514a-3b71-4677-b52d-207b6f11ff68/fceb4368-db91-43cf-af24-36ac5b5badc2/BOA.PNG","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/9b1b72d0-06ef-4e7c-9b2a-e8bc09f34daf/5a21514a-3b71-4677-b52d-207b6f11ff68/fceb4368-db91-43cf-af24-36ac5b5badc2/BOA.PNG HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 71361\r\ncf-ray: 9a3418d9b96356c9-OSL\r\ncontent-md5: jvB7VcShVhyScfVwMaUaWQ==\r\nlast-modified: Thu, 13 Oct 2022 13:50:15 GMT\r\netag: 0x8DAAD21DBA3A72F\r\nx-ms-request-id: 85a9b8fc-801e-0052-5b2f-f78e78000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 69336\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 849 x 84, 8-bit/color RGBA, non-interlaced","md5":"8ef07b55c4a1561c9271f57031a51a59","sha1":"5a9dfd0174d1ba6b8784f928c98379f08cd711af","sha256":"69d3432300ba1610b3b7b677b5e821630636aae7f61c01e1058158e69701b2d5","sha512":"b9fba6ee1383e7b983045137031aeee4fe500d78dd9fe84c30e08846f55456a69ba49c13fdb759ed5c6bf9a03fc8ae32101bc761d0dd9bde4f6bfeda89f8f623","ssdeep":"1536:50PshkAyijedj0Y6tbJ/CXc7TEnW6uvrvyNAMP+1Umu9I:If7qoSyXc7TEnY0AMKuG","tlshash":"986302a1c6ef84df2f16007366583ad366b88136e7a9cf6e21983955111f003f7b253b","first_seen":"2023-05-04T02:03:47Z","last_seen":"2026-05-09T20:59:46.699962Z","times_seen":442,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/roboto-medium.f5b74d7ffcdf85b9dd60.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:18 GMT\r\netag: \"3e00-63c0c43fb180a\"\r\naccept-ranges: bytes\r\ncontent-length: 15872\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04npz3dXorg7toQfa8lgAAAWU\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15872,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-13T13:16:02.965059Z","times_seen":3785,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/B7HnESPNt1lXoCEr5","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/B7HnESPNt1lXoCEr5 HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5425\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5425,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":\"MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=\",\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"login-home\",\"requestId\":3,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4px3qsz5n_dNgsEZDhiqxXxZ--Zl3IX_lija-AGkcyXnUbanVo9W23JyYCiUHsUyL9hpdmAnfi67izHRcX1RD98UKpo9nyD9eYIbZ_aoFX6oa-CjRgbuGKPc0PHDGuSzOtJv7jKvIbk9uu0RyQF2IW8CR4TvtNSKeQC32cgohoQoGiTBEXyFzVeKGaErMyJ1n-7_khmi17Wt9ZJPnHQAFae6MosDJ3puvY71abe-YXYKFzkRw2lj9mR1u-AbgaVFZ2S5A2tyNzTqdcAAYCKBc77tS43k-GMi0cJJEXh0F9tbb1Lq5HenQaDT7Or-jlL5KDzxZu_olK00vd2nEHkrS2g5T_oXH7fPtfHEY8OYK3IoeXT0OaVx8nJP0c47mZt1v9EZfgs3vODUYzftI52gfBNw0etOl-lDjqqACY2m4ty_0I=\",\"std\":\"gAAAAABpI4px-ZBtmkEQ3xRXcoOXY3K7qsDHOOvDepI9FKvEBsJc5nlJA-3cEtdTKeU4oH8xUEwYJnRLKYqIJsxyJ0dbwDn7518ij0ueg9jAcQPnEOIVvmy-YR2tlr427sSvZ9Pwe87jCwi9flQDBY6zObrIUzwhNYjqt_hJH0nU50s4cXcmipTNLo0mtssa_tXKZqidit7aSj7BeBl8QoPvvnIp6dBoSA==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 709\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 6a8d8e21-091f-404d-ab13-e388e9151dca\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d54597def9e9ef32862ddbdf8907b070","sha1":"40a0859a27b4949e24c88ae3e67324ed5ad06301","sha256":"692436e19f42305c0a7cbb3375201570b73175b5e5b9b41be42abfdd9260f10a","sha512":"1cefdd3d0c56417829657ce17c4bddd564b0132096f91d6315f9cf12eb4361dde5bbe5c8bdc90c16531b2ad2e41d8770e875c32770e577bf9396b0a610a15470","ssdeep":"","tlshash":"c7019417c2d49e05848d300118ec62be8dc1b03697eca8390fd09b0925c73949bf6451","first_seen":"2025-11-23T22:29:02.43696Z","last_seen":"2025-11-23T22:29:02.43696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=e941aa16-3875-4f75-8789-174744912e0f","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=e941aa16-3875-4f75-8789-174744912e0f HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1679\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1679,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:04.241+00:00\"},\"timestamp\":\"2025-11-23T22:28:04.242Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"Cons-CC-_-Peros2025-_-CCA1HZKU03_Hero_NH_Card_Peros_Aug25_CMS_MH_product3Cta\"}]},\"list2\":{\"list\":[{\"value\":\"CCA1HZKU\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: e941aa16-3875-4f75-8789-174744912e0f-815b367480ff46dd\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"881f8e9676b5d25b9bafade76f033576","sha1":"412a7b82bc62ab3664eef2b3539efd0e88ffb3fd","sha256":"4fe76bc91ffaaf86076a9c14e9f107b72c950c7adfd715c8bd2a24daf35bd258","sha512":"1222937c1a1477458119ac6845d4470aed740f80c453e76b4a40bf84a1aeeba23f23805e90095042716ad094349165524df3a74f1feaff708e81888d1b8f34ae","ssdeep":"","tlshash":"24f0a3ca4e06aed40cdf758054c7f67497563147d4d780041f909b75c2cc8c5700dd1b","first_seen":"2025-11-23T22:29:02.438803Z","last_seen":"2025-11-23T22:29:02.438803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dull.bankofamerica.com/boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9#e=https%3A%2F%2Fwww.bankofamerica.com\u0026__tp=login\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688529757365","fqdn":"dull.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.211.75.104","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dull.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F2:23:CA:F2:90:03:23:45:D9:E4:C6:6D:97:02:D4:A7:C7:CF:8A","sha256":"19:4F:C9:85:05:F1:19:7D:2B:EB:04:C1:FC:3B:FE:34:62:F8:27:CE:15:CD:56:8D:59:00:18:37:46:47:5E:2C"}}},"request":{"raw":"GET /boaa/iconnectmx.html?sui=e22171397ffdcabd3a0cfc421c67da81b8179ac97b635d68f985bd46baf939a9 HTTP/1.1\r\nHost: dull.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nexpires: Sun, 23 Nov 2025 23:28:06 GMT\r\ncache-control: private, max-age=3600\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (28361), with no line terminators","md5":"d880c1fe07e4f3c5d8efbff25306144e","sha1":"7b78bba791ec0290a116746dfb35a420acd2f4d6","sha256":"193a534463c1e16c0a66a65566f801c6516b2b4489ce709cc0687d17cb7ebb8b","sha512":"b064ed743ab06716dd900ac1371dc00b2630f1c1791b80d797a98c02265261fb73d1dbf767d126817c79eb53e9b898332ed72907ff9ca0a267936cc81c504b29","ssdeep":"768:/QHeVCzoebtAw/A4pVlT3jkgQmz67m8A3v9kghUIj:/gfoEAw/A4nlT3jfQmW6XFfhtj","tlshash":"e0d2d4e533d7b47c83d66ca017bf1a47f17c4c829c88a098f590e4d57978ea485bbe28","first_seen":"2025-11-23T22:29:02.235457Z","last_seen":"2025-11-23T22:29:02.235457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/01991107-cfa8-77a4-92a8-39d0d2dd5589/en.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/72e99fdc-3ef1-452a-9b02-e35228fa4504/01991107-cfa8-77a4-92a8-39d0d2dd5589/en.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9a3418d7df9e56c9-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 51241\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DE23E7B030D8BC\r\nexpires: Mon, 24 Nov 2025 22:27:59 GMT\r\nlast-modified: Sat, 15 Nov 2025 01:38:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: VcNptmRu8wbwJ/IeR5feTg==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 1d341d8b-d01e-0101-3cd0-55d422000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130625,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec2597a74ac1b88005b7fb9cb9be6582","sha1":"e824c61a93c5c880977e2d691857b83fde0c8da0","sha256":"3472ead133f65d581243777ffe45fe6fd0eaebb26889f6a6f8508562f7e432b5","sha512":"b535cb331e7425b17bec82e6716d8d0a246e0540e97d7ac15e36ecd594cd817c0546cce69c78388926df17c940c004be6244e2f4fa557cdc3c0aadcc2c47f957","ssdeep":"3072:8ThCytC4CXCC4Cah1opotKslHETl2NPesB:8ThCAC4CSC4CxslHETl2xesB","tlshash":"46d3d606aa5824b84f4f039118a5efcae33d052af760ce1dac5d8e3d4253ee55b37297","first_seen":"2025-11-18T19:57:41.597344Z","last_seen":"2026-01-02T23:14:16.776414Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/fonts/cnx-light.fc0e5d6eda6a3ce855e6.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:17 GMT\r\netag: \"2d6c-63c0c43f9b881\"\r\naccept-ranges: bytes\r\ncontent-length: 11628\r\ncache-control: max-age=26920000, public\r\nexpires: Wed, 19 Nov 2025 03:25:19 GMT\r\nx-boa-requestid: aR04nodJvc-kmYfycMrGcwAAAOE\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:01 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11628,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11628, version 1.197","md5":"01ed6e7ce19d38ecdeb6aefaa5b09de9","sha1":"74e17e5c8d95b15f82b51066cd65790c6e991967","sha256":"e7a245881b6946f6a5ce4bb8f6d47c7369274451a6b8cebf0d148834a1c87d5c","sha512":"ae86d8c7cc6e9559204a7cfe5ac0659dbb55b8c5db2ac556d9ff084cf475915ef85185dca64c09be3457d55d1c9fd430a35fb1d80020d4905587906defc76d35","ssdeep":"192:g/vmDwHexFlxTk+l3AHPmz9vH2hTxXhX8BaYgV2dMNvkaE1K/J1to/Vzp:gHmhxTt3AvoAhTBhMgh2dYvjEE/Qzp","tlshash":"f832b0f5a6f0a916e500db3650bb73b4b77e45b0ddd0a034fc2be00b864b6854647e7a","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.687283Z","times_seen":327,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/vendors/vue-router-2e5f804eccfe665a8f66.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-nav-unauth-secure-bofa-widget/1.0.0/spa-assets/js/vendors/vue-router-2e5f804eccfe665a8f66.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 12 Aug 2025 17:52:56 GMT\r\netag: \"9ae4-63c2eb5d199d0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04oJ7rmtjfVQK2H7TSMQAAARQ\r\ncontent-length: 14090\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39652,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (38229)","md5":"0bdadea65dacc0f4bf493241dd4189f5","sha1":"74f8fb180b93983cd9d577c5254769d0e8c5ea59","sha256":"10e4513af8bbc519309eef5238fa27363fa4ea0b43bd0d5a5a0385d0fc1e9e37","sha512":"7c36ca1b5f0fbb7b50ec3b018270ed5a8c1690c9fe519565b8568d9798f2689d7987a5e63f87e63591349ddbc6e3fe57d8de089f779f4b4acd2f7374fd1dfbbc","ssdeep":"768:bw1zoGYhnCK0WDk2unj0irvHwg0WDhJviKb3Xs7Ek3qH9WMGawhO5lv3UiBD073S:mhIAHN5Q8p1O91Yl","tlshash":"6f03f8e932c2703597e61be2417f2116f23608d6784d85d1f05cb9973c3399ac2bbe5a","first_seen":"2025-09-22T15:23:49.965535Z","last_seen":"2026-02-15T01:17:16.620513Z","times_seen":50,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0//spa-assets/js/pages/gt-search-public-widget-1.0.0-internal-scripts-6f541bba67c5.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:43 GMT\r\netag: \"e3c9-63c0c4ca380fd\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aK0ETaF5r5tJaM6xPFcopwAAALo\r\ncontent-length: 10915\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58313,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52714), with CRLF, LF line terminators","md5":"ee007517982034e740cdd6a5d5637bbb","sha1":"b39c17faa4c71704e18df0abae4dcd207419ca15","sha256":"dd6bb99eca452ae8e326fcfeced7167ad127f3a58546a9efd01b896ec8e89c48","sha512":"f0f8bdea949c9417de36ce80e1419c097226b17c71c891b611151af3ba15cf1d94c3faf8e7bce7a635afaaabd8b9a98ea7944deb96c2f9f6a807620ea750910d","ssdeep":"768:foCj12CTKOQTadRB76+vd1p+PRbfM9o6kIi1FtTKOQTaSc+PqTKW9o7sI:dTKOQTadRp6SdCbAGTKOQTahTKbsI","tlshash":"82432b214686dd370f71a69d608f7ba3526c049cfec88f68f6ed900026d7f98527b6b4","first_seen":"2025-09-22T15:23:49.960503Z","last_seen":"2026-04-29T12:07:41.736191Z","times_seen":15,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-search-public-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-search-public-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 12 May 2025 07:35:12 GMT\r\netag: \"37fa-634eb5b3d9c72\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR044Zz3dXorg7toQfa9YwAAAQ4\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/fonts/cnx-regular.6cb3ff6fc51e9438d229.woff2 HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 13 May 2024 05:59:55 GMT\r\netag: \"2d58-6184f98326a4c\"\r\naccept-ranges: bytes\r\ncontent-length: 11608\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 21 Nov 2024 08:32:30 GMT\r\nx-boa-requestid: Zz7wHX5X36OCnnscFT47rgAAAFI\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11608, version 1.197","md5":"46b5329e8e4e5925129ab2c36b336d0f","sha1":"63cd5fbcbe5331e7d8059a4caee8d2510f834d68","sha256":"79f02d139cfd07f2a19e0a8831553b3de4627fcab371e18eb776af035465949b","sha512":"6a0581147291985cdfa5ab87188e24c69c23c03c8803825364d4a2213e9c5e5a1f35c07461e3daf3e47856a23f005cf7714fc491a5388fd037a294803de85937","ssdeep":"192:ZB9RK+WMN2ruGOuYTBwsUSvS7S9UUaLiGp7SQ98g5LN:ZBDPWG3TOsULOi979Jv","tlshash":"3732c0f7f723e655e424733daa3c18872426f4415024c25858e795703da91ee7ca0fbe","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-05-09T20:59:46.641542Z","times_seen":438,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/bofa/main/prod/utag.102.js?utv=ut4.48.202511150118","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 17 Feb 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:30:60:F2:DA:DF:F0:ED:EC:1B:D3:44:CD:83:04:D5:E2:C5:D9:05","sha256":"49:CF:0C:E0:4C:15:5F:2E:54:08:C6:62:82:4A:E9:E0:91:90:FC:67:8F:BF:CA:14:95:FC:B3:76:EC:7F:07:5B"}}},"request":{"raw":"GET /utag/bofa/main/prod/utag.102.js?utv=ut4.48.202511150118 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 01:13:21 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GPUQZd9sg.1GwhIxcvI7kpJsIDThjiqV\r\nserver: AmazonS3\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\netag: W/\"e8d8960a0cdb51d89dc43be0b903c55e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: imCmLHxPBiI5W8SeUT_UYQdXNUubTVNs_A8x1MWJ70crHQ7idOXQFw==\r\nage: 119\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"e8d8960a0cdb51d89dc43be0b903c55e","sha1":"319b56ff5c0901659d81c5fe7177133a9a592ead","sha256":"829fef4de3bac3656043f396ece5f41ddfd770e95477b9a55d050da987ebdb1f","sha512":"55759d80ee2afedb403d4f92de06238e3bfe8e3bbb3c0f9315db94c1956f5b6f316aa03bc0211e618f729331edb00913f2b03dbec7039a3cef68cebce741d590","ssdeep":"","tlshash":"3e81889e7fdc023e6e695786b95fef1c31e17133398258118298cd489b89acb8475e0e","first_seen":"2025-11-23T22:29:02.44374Z","last_seen":"2026-02-20T22:41:29.183809Z","times_seen":16,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=c3fbb12f-b424-460d-8d6a-321ace863a31","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=c3fbb12f-b424-460d-8d6a-321ace863a31 HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1687\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=000359FCC40069238A6E; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938738; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=1; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1687,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"query\":{\"personalization\":{\"schemas\":[\"https://ns.adobe.com/personalization/default-content-item\",\"https://ns.adobe.com/personalization/html-content-item\",\"https://ns.adobe.com/personalization/json-content-item\",\"https://ns.adobe.com/personalization/redirect-item\",\"https://ns.adobe.com/personalization/ruleset-item\",\"https://ns.adobe.com/personalization/message/in-app\",\"https://ns.adobe.com/personalization/message/feed-item\"],\"decisionScopes\":[\"BOA_HOME_SIGNON_ENGAGEMENTBANNER\",\"BOA_HOME_SIGNON_SUPHIGHLIGHT_01\",\"BOA_HOME_SIGNON_SUPHIGHLIGHT_02\",\"BOA_HOME_SIGNON_REGHIGHLIGHT_01\",\"BOA_HOME_SIGNON_REGHIGHLIGHT_02\",\"BOA_HOME_SIGNON_REGHIGHLIGHT_03\",\"BOA_HOME_SIGNON_REGHIGHLIGHT_04\"],\"surfaces\":[]}},\"xdm\":{\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\"},\"webReferrer\":{\"URL\":\"\"}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:27:58.599+00:00\"},\"timestamp\":\"2025-11-23T22:27:58.599Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"eventType\":\"regionalmbox.request\"},\"data\":{\"__adobe\":{\"target\":{\"profile.BA_0021\":null,\"profile.BOA_0020\":null,\"profile.BOA_HPR\":null,\"profile.state\":null,\"profile.tc_lang\":\"en_US\",\"pageVersion\":\"DAP\"}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: c3fbb12f-b424-460d-8d6a-321ace863a31-d7d403e595f141fe\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; Max-Age=63244800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nmboxEdgeCluster=37; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nkndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9958,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9f2cf9bbefe0e3db36a1b92de5fa9e79","sha1":"55311b72b406b13922ce9f3b026c3e286bab6b86","sha256":"2798ea139d79118a520eb37c262551cb0b6281644b85da3ffebf13801c4f0339","sha512":"fe862ad7eac54ad1991157adae92c2178c3c50b7ea6ee8288397b7ec83582e7f219eb65729f36bdf648e3bf0234b80e75ee29068c7d9f446c086ed44f0ffe18c","ssdeep":"192:xUaKpLvJaKpLvhaKpujvgOaKpLvvaKpLvtaKpLvyaKpLvV:xgpvhpvpkjv1pvjpv1pv6pvV","tlshash":"1e226147e04c09ff9b5b7a5969c2df8a51b82003f6c10a106decc69cd64ee8713879b7","first_seen":"2025-11-23T22:29:02.445587Z","last_seen":"2025-11-23T22:29:02.445587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/zeKMiGCon2hg","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:01.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/zeKMiGCon2hg HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1262\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1262,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":\"MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=\",\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"cd_auto\",\"requestId\":2,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4pwcDao35dT4cjahP2Q_Z4A6ty3y9YmlULIhIqiM4wu-jvLgSHEN_vMwx8dHeLgv3Yeni3IhMawlmAEFNvn8fctYV0QlvbnZs6BcK11bXa84AS7p9H55AzVYPvj_hy0z_RRNgQMzOfu7jcHyu62XfHsZ7dnwTAFUadcQa9M_KeV7g-YdktBTDF6f1LrJQtGeXhwx9HSc6Q4WN2hm5vO8jPsbRp1BF8rMnyxNSMl_WBLxZRXtL19It7kuv1gD9sgxA-_WOJZx8NTpDPoRcHg2h17ARvQh-mPpiLIbSSkkTJQJ5zjpZXpsgzegGjbIS3XKdg6muE1TR4IOjrENg8mFNC0Fg==\",\"std\":\"gAAAAABpI4pwvh8WsMZnwTSNNSjQ-74JhNMV0ifAwvxTfl6SX50XGmetqsLiHhc9ZvsycrYPAqiIhTaysfxsZ-Wi2QwNYjXRwfI_s480dxZiV65B0tAtqM7h4XaWezXZ8cDkLROTUvmIM3nuazcKWeRMjtcmIpI7YyBXaNMgK2VxE1DD_9H4k4M9AC-iQm8WHlo9O0CF1eQ1i6_HwJ2d5bn6-_YJ-1dQkw==\",\"d\":[\"TY7BSsMwAEDB/wmkaZImhx062kjBdMgmY72MmqTQuLXapOh68xd68AsE6UHQP9hv7G/sSX2nd3q810/nS1+rfVWbg3Zv49SZp944n+mrcVJt483L7B9K78vet+PkjHN122T6sggiGvKQsohHKADONnCGMQY4pagiCAGiTAmwJhXgECKAKLmvKlZRw/D4rXrn26Pp1r/FRG60La5FnVvl5UY+F2sIJRL2ZpueJMr8bnOwxVaGMrkdpM1OK5uGuZVEDjucDw9wldwtxq/HsvPNv+55fD/2tb6gv2FIMSA0wEKI+RJFBGDEBeBpvAQ8ZnBJBYsjgn4A\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 709\r\ndate: Sun, 23 Nov 2025 22:28:00 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 9264e669-35b2-47b7-a771-bdbe0b3eb1c6\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"407f76b0d592b039f8d35f1eabac9d40","sha1":"6a99bec6c352b8af6722fd6a98cb9427dde25f2d","sha256":"44925d42b9ff8fb49638c18114d8acd06864e9367a636194d19349c838fe908a","sha512":"333ccc36c17a4f1675c39c5841f7c0c3d003217ef0de3e3934202c8e87c2a3fd389d7b2ada9a17b72d0d51db826703aa7af81007f1e31d620b0d777a31ef0e7e","ssdeep":"","tlshash":"2b0194362cb7bfa44abb10452ac0c47e0fbf518a180a6e8e1ab509729689257b9cd41d","first_seen":"2025-11-23T22:29:02.447395Z","last_seen":"2025-11-23T22:29:02.447395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/css/styles-67459201e251b94c0aa0.m.css","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/css/styles-67459201e251b94c0aa0.m.css HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:08:20 GMT\r\netag: \"ef3f5-64334015d5e40\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:23:14 GMT\r\nx-boa-requestid: aR04Ip2dxXqbqBX14vgQTAAAARc\r\ncontent-type: text/css\r\ncontent-length: 68658\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":979957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6de8f17fa3cce847affd279dede36888","sha1":"49f4d6be04ee4d7b3dc18c611d1ef12dabdfdf1f","sha256":"6698c73c9ecbf79b276fd6de5743d7a1b0f47427273ed1bbaa78d7b7542b9366","sha512":"153236ec7f1f8d3f48d5abe14939eb1888cb5408400f787095cda220b62129f37d37e8a75b58ac224b5e3ec4b2b7404a3f13f52176070cf92941e66c2cfc46f8","ssdeep":"12288:ja0Jguxkz5mzzNozzG9ANuG7gP6Z1QbODowdeR0zAGP1Owun/M06AA8SosxiVRx0:HLW","tlshash":"85258a61b68df860e1ba891f725d70856b0a7842fd925ecdbc845810d9efc9f13298fc","first_seen":"2025-11-23T22:29:02.454949Z","last_seen":"2026-02-15T01:17:16.708214Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:55 GMT\r\netag: \"3f3-63c0c4d567947\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aK0CbMuFymoJsdgk2siwTQAAAiw\r\ncontent-length: 377\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1011), with no line terminators","md5":"9d50207d68bf3d9595c7144f275fbb9a","sha1":"0016135b691d287ebbb7a92fd3fd9a6f975882b9","sha256":"c5b5d1be640c0bffb88c595ec89e0c3e58ba6a3830601c72fe11a2d6837aef84","sha512":"60194de7383844598ce577d8e772ef859d0cb0e8c1e4b78c137c291b418f28797c5b7bd57d18eaf72a2d36cf491c3f3485d72a14e06a5012d9c380bd7a6ec974","ssdeep":"","tlshash":"5b112218a1ddecd1267444aff56f33a942100d9effd926cc2d9a6960220fdc743315d9","first_seen":"2024-12-03T21:16:27.666173Z","last_seen":"2026-04-29T12:07:41.84573Z","times_seen":105,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aero.bankofamerica.com/30306/C5ib?d=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%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=xfnxwmamkmnpxqph\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F","fqdn":"aero.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"34.193.55.157","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aero.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:50:33:9B:A0:50:10:C7:20:6F:08:F8:F1:5E:83:FD:B6:25:42:0F","sha256":"43:8C:AD:00:14:00:B7:A6:7A:EA:70:58:FE:C2:9F:8E:79:35:1E:1A:62:F5:F4:AC:E6:13:89:B0:8A:BA:72:F9"}}},"request":{"raw":"GET /30306/C5ib?d=ZW5jZEBXb0V3dWRpbGRsREhnRWw0Q0RSL3VuQTFGbkdJOTZWdDlWTjRtZmpabm1SdG05UnVWcUhNYlZONE84c3lJZGlQL3E5aStBN3dvQXdOc1NINlpvQngra0tSbkxwTjdaRTVjNTYrclBaak5iT3lJSXp2YW5iSlQ0MFpXQy9CMUg5RGlRZWVTdjdqWm8wNmJ0SWhBTkpnZ1laZmRlclZrTDhTU2hLWUxpTzlBWnNrWUY2Y3RxaW1HaG9xQ0pRZEwraUVoV1V5TG5Ic1NhWT18ZWQ3OTJhN2NhMzVkNWQyNzY1Yjg5ZGEzZTk4NTllYTRjOTc5Y2MyYmJlMGVmNDVkZGY2MWE5MDk0YTIwYzgyNDc0Nzk3NmEyYzY2YWFhMTQxY2E5MDcxZTQ4YTUyMzZjNzExM2I2ZTZkY2Q4NzViNzM2N2UwOTYzNTczYmQzZjJlN2JhNmNkNWRkNGRhODU5ZTY0M2RjOWYxMGI2NjRkYzQyM2I5ZTcyMTA0NGM1YWNjYzk3YTZlODdkOTI0ZmFlNWQyYTBmNTAwNDMxYWVhMzFiMmY3OTk5OWVkZGRmNmQ5NTc3Y2VkNjEyNmNlMjUyYjFjMWQ3OTAxOGVlZTcwZTIyMDdmMmY4YzYzOTQzN2ZlM2FkODQ5ZWFmNzU4NDU2OGE5ZTU5YTcwYTQ1YmQwMmU2OGEzM2Q1Yjk1MmU1NzM4MTMyYjNmZjc1YjE2NzgyMWQzZmJjOTE1MGQyYjg5NDZmNmJkNWRlYjI3ZDIyYjFmODU1ZmVjZGY0YjVmY2RjMmQ5MzhiODNjNWVkZDcyMmIwYjhlNzU2YWJmNjA3NTZkYWQ1Mjg3YWE4NDdiOGQ5MzU4NTNiODhjMWJlOTY5ZWFiYWU3ZDRiMGViMDkyN2EzMWI5NTIwNmM2MTNhMDUyZDgzNDA1MTFhNDBkYTI4OTk1NDkyYWNhMmI2YzI5MzJ8MDBlZTBiNjJlY2FhYzg5Zg%3D%3D\u0026cid=13\u0026si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=jsonp\u0026__tp=login\u0026c=xfnxwmamkmnpxqph\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F HTTP/1.1\r\nHost: aero.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 156\r\nserver: haile\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"d3a010624e874aba46d2f773fd5696e8","sha1":"a1e41b7cddcc6ae8925e505af5f76cc73f791599","sha256":"bc92b368ca01e50598c49846526267de4ce513629b7436676720417bb493e04f","sha512":"6768ae49f508e6921d37a2a24a8653a15d4370c68de3d09f2d0a66f8d92adce8c07ab6afc3c09f92f1d4ed29bc738525d6c8d1522524a5881dcc6bcc39da8c55","ssdeep":"","tlshash":"37c0809d4d1483149540508d4c5a8e95c567d51f4e0c44cd69591c1455314b4d506991","first_seen":"2025-11-23T22:29:02.458293Z","last_seen":"2025-11-23T22:29:02.458293Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com//homepage/spa-assets/images/logo-bofa-flagscape-18ad22ccaf518c47d77b.svg","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:58.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET //homepage/spa-assets/images/logo-bofa-flagscape-18ad22ccaf518c47d77b.svg HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www1.bac-assets.com//homepage/spa-assets/css/homepage-dap-page-fd76a2f41956950fe221.m.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Tue, 13 May 2025 16:59:31 GMT\r\netag: \"169f-635075b2dce3b\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 19 Nov 2026 03:26:05 GMT\r\nx-boa-requestid: aR04zRxSVymrEqdn025M9gAAAVo\r\ncontent-length: 2444\r\ncontent-type: image/svg+xml\r\ndate: Sun, 23 Nov 2025 22:27:58 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5791,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ab5f2c1625c55fc4e0d9dabec9701cf","sha1":"093825adfb5260c90f7e1c7ba8f4b26a467885ce","sha256":"9fc46c589d0d1ff7b9415b3c9c8c0323d6a5a453e0a9ee08228d27cf4e208a26","sha512":"04d70ffda2e62c8458083ae0556bdb3a69d2db4771e6eba3002f8abd42af7a5f0d371db51289989decaafcbf958cd203812930e27e0da1a4d549252094b46333","ssdeep":"96:T+/2HeuRIfhxoVlOtAwD/675wdoTNuQUNsf4T++S/dluvaJ7r98ioik0oTjW+Bdt:T+/2rIffoLO6wLbdopuQgGdldlmCrqDZ","tlshash":"82c171fda3e0e1d9c805dbf1bb1676f9352b2afbaf68c64486a9e945190017c948cdc0","first_seen":"2025-09-22T15:23:50.086173Z","last_seen":"2026-04-29T12:07:41.842659Z","times_seen":94,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-card_mh_un_newoffer4960977_e.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-mastheads-consumer-cards-en-4-card-card_mh_un_newoffer4960977_e.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 28 May 2025 00:09:15 GMT\r\netag: \"1c10-63626fddbf690\"\r\naccept-ranges: bytes\r\ncontent-length: 7184\r\ncache-control: max-age=26920000, public\r\nexpires: Mon, 11 Aug 2025 11:20:58 GMT\r\nx-boa-requestid: aJnSGW00AbK3hl-4Mz8VSgAAADg\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"739b1c133cfd151b24ff1c4183d82235","sha1":"a2ecb60379ff371946c83a1fdf3fc6be2496be56","sha256":"89175829c8f9088171f5f2a9b486c3dcd1d63b12980798484a7859f63e25a5d5","sha512":"7d7f98941eab4b3f150188e561caef616c38e2dfb8c77108129032b0c6b2d662b2652d5b627dc94a6b3a9361bb7e23005844789b27c619385c86d36bca6203b3","ssdeep":"192:oKuA4eZCiQ1yr9N0iqKBL7UU+Ahkq9K8y:9EiqypTqUr9K8y","tlshash":"e4e19ed844be80a4776f374425e641bd16d3ea2fa7e3abf8b382fd197c0088544b0b64","first_seen":"2025-06-27T22:40:35.1252Z","last_seen":"2025-11-24T15:38:31.190699Z","times_seen":72,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www1.bac-assets.com/homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-enterprise-en-special-olympics-ent_shl_bmh_champs_5963738_722_gc.webp","fqdn":"www1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.77.168","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:B9:1F:04:4C:FF:93:C8:FF:5E:EE:3C:BE:B3:81:36:EA:A0:BD:F9","sha256":"54:41:E6:67:2D:86:B3:44:CF:97:FA:D0:AA:4D:76:13:C2:EA:07:6A:F6:D8:A0:E2:0D:20:09:7B:8E:D4:46:FE"}}},"request":{"raw":"GET /homepage/spa-assets/images/assets-images-site-hp-assets-super-highlights-enterprise-en-special-olympics-ent_shl_bmh_champs_5963738_722_gc.webp HTTP/1.1\r\nHost: www1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 07 Jun 2024 00:07:56 GMT\r\netag: \"3060-61a41977bccb0\"\r\naccept-ranges: bytes\r\ncontent-length: 12384\r\ncache-control: max-age=26920000, public\r\nexpires: Thu, 22 May 2025 03:06:33 GMT\r\nx-boa-requestid: aC6UuJbTXnOOLsUiJXQLngAAANM\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 722x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca84484f6b62e5f473c83ac38f8f0c68","sha1":"52269c8ce8467ba1de2aabaee3c288d2c10d2d16","sha256":"eb5637200c5ae8325d389ffab789c4b157f4e0b362fb17c2a65a3fc1f381e3ba","sha512":"c4e53cbcafe678bbbc9f007a49ba1826f2f4fc4e0f16054c3dc37bf7f23054465d8a671f61615c914d03031c9f82d394919d6bed55cc2fbe29b500b99de58a8b","ssdeep":"192:uNpfcMFKmARGYIe5PHtSCHls3PJB/p2IkY3odCtsc+n6kIpW+MoieWwd0LQoo:uN9cRGRSv6Pz/p3btsF8WrobSo","tlshash":"bc42c1597ac199c1d0c6c99ce75a3548286a7987c71d3d1d2fe086c6b2e733107f6237","first_seen":"2024-06-12T19:11:35Z","last_seen":"2026-02-26T20:02:53.75878Z","times_seen":127,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202509.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncontent-md5: eLyXdZf+bqdC5B3OZljzGQ==\r\nlast-modified: Tue, 30 Sep 2025 02:10:15 GMT\r\nx-ms-request-id: 35638e57-a01e-00ab-6a52-3f4498000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 54526\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9a3418d948ed56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26463), with no line terminators","md5":"78bc977597fe6ea742e41dce6658f319","sha1":"a25c272eaf83b848a2a5fca4374475a922a15559","sha256":"2cc804e7b18cb3d2143d8a44db9d4467e349734d6a384bc089e4c31d3998959a","sha512":"0afa0990a71a520a2374c007ad988acf9dac772fd09f3fb53d3ca73c91fcc7bd01380b326d91fb018f536880c87bcb338069d740b6d5027472ed09f9590a5f2d","ssdeep":"384:W48ChRGo09YUNHDouelC77FGAVsqLnwGfg4xqsQ4PNE:yYypkN","tlshash":"42c2459b38513b19e6d7c719992139827d11aceffd739ceee005a3784adc3e24c1464a","first_seen":"2025-09-26T10:39:51.909194Z","last_seen":"2026-05-13T14:29:54.664041Z","times_seen":5459,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boss.bankofamerica.com/30306/ugateway.html?si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197645369","fqdn":"boss.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"3.210.174.194","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boss.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Tue, 31 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:EE:F9:47:4A:F8:C3:44:74:76:64:86:4E:C4:D5:D6:DA:E6:6A:99","sha256":"7A:46:5C:B9:78:92:2D:62:C3:25:CF:A7:5F:CE:5D:BE:9D:A8:9B:A5:87:7A:C0:B9:A7:29:49:FF:E6:A5:41:D9"}}},"request":{"raw":"GET /30306/ugateway.html?si=0\u0026e=https%3A%2F%2Fwww.bankofamerica.com\u0026LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D\u0026t=xframe\u0026__tp=login\u0026eu=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026icid=176393688197645369 HTTP/1.1\r\nHost: boss.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\ncontent-type: text/html\r\nserver: haile\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\npics-label: (PICS-1.1 \"http://www.icra.org/pics/vocabularyv03/\" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) \"http://www.icra.org/ratingsv02.html\" l r (nz 0 vz 0 lz 0 oz 0 cz 0) \"http://www.rsac.org/ratingsv01.html\" l r (n 0 s 0 v 0 l 0))\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88620,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"c86f6a822d55705dc4b49edbfcbfdbcf","sha1":"3e0097c6232dead8a5733b00aa0ed10fc79d4d5a","sha256":"6d9bd27c9b29e98782584225170978d6d03b8c6a21179cf7d06d5a8951606ef1","sha512":"3686a191cdfaad846c4cc26dba0b5ce34ab7b0a2f330533e4c242188700355340d94c3125d90a62289e406a87caf35c2dcff61708af42e955dd87d337c67949e","ssdeep":"1536:g5CucLDylCfwwtUTaT3UfWaz7avhUJAsA70OH4tdUW3L49eQ8aBnplWPyfvxid4G:g+LDyEEGT3CWMP1Omhb49eXaBpcPMvxM","tlshash":"af832adb37dbb03843a22cb056bf160bb2796d465c8dd4d8e154e4c039789a9867bf2c","first_seen":"2025-11-23T22:29:02.464138Z","last_seen":"2025-11-23T22:29:02.464138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:05.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/js/pages/gt-secure-fdic-widget-1.0.0-es6-page-a01f5b47ceb85f845339.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:49:55 GMT\r\netag: \"3f3-63c0c4d567947\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aK0CbMuFymoJsdgk2siwTQAAAiw\r\ncontent-length: 377\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1011), with no line terminators","md5":"9d50207d68bf3d9595c7144f275fbb9a","sha1":"0016135b691d287ebbb7a92fd3fd9a6f975882b9","sha256":"c5b5d1be640c0bffb88c595ec89e0c3e58ba6a3830601c72fe11a2d6837aef84","sha512":"60194de7383844598ce577d8e772ef859d0cb0e8c1e4b78c137c291b418f28797c5b7bd57d18eaf72a2d36cf491c3f3485d72a14e06a5012d9c380bd7a6ec974","ssdeep":"","tlshash":"5b112218a1ddecd1267444aff56f33a942100d9effd926cc2d9a6960220fdc743315d9","first_seen":"2024-12-03T21:16:27.666173Z","last_seen":"2026-04-29T12:07:41.84573Z","times_seen":105,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bup.bankofamerica.com/v3.1/orwQAdmmEi","fqdn":"bup.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"52.247.36.244","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bup.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Mar 2025 00:00:00 GMT","end":"Wed, 25 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:97:25:A4:BD:0C:37:9C:24:7A:D3:ED:26:2A:42:77:DC:68:0F:AD","sha256":"57:A2:C4:CC:1A:EF:DC:61:79:C2:35:07:46:01:D7:C7:E9:41:84:41:AE:D6:C7:35:BE:AA:0B:91:46:F7:65:5B"}}},"request":{"raw":"POST /v3.1/orwQAdmmEi HTTP/1.1\r\nHost: bup.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5965\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5965,"data":"{\"ds\":\"js\",\"cdsnum\":\"1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84\",\"csid\":\"MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=\",\"psid\":null,\"muid\":\"1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752\",\"context_name\":\"login-home\",\"requestId\":5,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABpI4p0VtRI51gUnYwzfCjWprRvztyYYQbyu_MPSj0Cww_IRb3dEiu9ai4aYFj_7AlV15CyaTPa0TS1Nk2buUrbpBjww43E3MbTshoL09Y2b0LxfVyjn6gv3RstcKL2lhUKFuOXgoZcTfrAX57WGCpVPskadCGObj5F27yIHwudG4Xi5yL-HMAj6iN7qZx3pywTETuvkh8mt0Z7urkQodeF76GU-DpAGq4xjyVT0WSeRtGfVO_1kmH5tX7_I65BYz-BtztilA_J9BZdF75EfNQcPRANKUYYxwhJNec7dCkjFc021FJIEq2gk86j66vVoJgcn_89toeTtOCzhqvujg0p6_FQhBiYQkhuk3E3XtwRmnoRpD-D6RBt9CH2ptLn4gSfZdpDUPbpdHQUI9xF2e8D3gliHDFg5YqV-kRMEFijVupqKmA=\",\"std\":\"gAAAAABpI4p0uOoyj8_zJIy6rJUflzbppxl5SACvvK_nwVUQshrrH0wqwBYUjlrWN98NKqcMlkoQ5mmeoqjhks-8l2NqG2QLasViOVcw6uQaErDdiaphSV10Jpw1Gu-sbrz5-pzmBGhV5FMXOd1pRddXzXMjfnMPQ_gCRuy6ZIltLV-ymJN2UvrtRKi9Fs9b-OuzIxT-v3JJZx3e02LxO4NQMtwYOxTEeA==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 709\r\ndate: Sun, 23 Nov 2025 22:28:05 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: ccc28786-abce-486b-a74b-d4731a6f3960\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5b9764b64c503ce62429fb3619ae46cc","sha1":"005939fc60fc89046867efcfa1fb5913f7c78131","sha256":"9d0301cd219fa2f1dfe3606e6a1bb1036c730b2e50613fc0029f6a0dcbeb3fee","sha512":"8fcce5247edab2f678256074a623c419f6c993105ddebf65aaa7dee6a3c299eddd796d0e78f4b395abfbe4992310cb43ba20d48a27feff9f4c9076d70b04f5de","ssdeep":"","tlshash":"710194b14e1b1b6978c51a80262aa26c7e938886e04c1fe90e8f09d4394a8c8d588621","first_seen":"2025-11-23T22:29:02.466265Z","last_seen":"2025-11-23T22:29:02.466265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/vendors/vue-router-17e9a280195ddda19671.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/vendors/vue-router-17e9a280195ddda19671.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:40 GMT\r\netag: \"9af0-63c0c4554691c\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04n2b1H5jMC722jHOPWgAAAX0\r\ncontent-length: 14091\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39664,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (38229)","md5":"4d61ab43c5b8e6950bcd5131e53b7754","sha1":"eca8629c14be551007162c5ae884efc7af69d144","sha256":"0a429c82ae8ee895e33870c71e3dbf10d27dbeaafd9830c2b7ee8468735f7e8e","sha512":"cb6ace0a6a9455a25c3c84fe2194a3121e5758e3cb2b2ebc60ee53863cd7ac3f248920fddf702ea3f6861b6a32394c8fba272cbe202935036ee374785c9ea173","ssdeep":"768:bw1zoGYhnCK0WDk2unj0irvHwg0WDhJviKb3Xs7Ek3qH9WMGawhO5lv3UiBD073S:mhIAHN5Q8p1O91Yl","tlshash":"1c03f8ea32c2703597e61be2417f2116f23608d6784d85d1f05cb9973c3399ac2abe5e","first_seen":"2025-09-22T15:23:50.039691Z","last_seen":"2026-02-15T01:17:16.756791Z","times_seen":51,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:04.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-secure-fdic-widget/1.0.0/spa-assets/fonts/cnx-medium.6cc97db8e46d3dced7a8.woff2 HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure1.bac-assets.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Fri, 08 Nov 2024 09:10:38 GMT\r\netag: \"2ed0-626631fdbf5fc\"\r\naccept-ranges: bytes\r\ncontent-length: 11984\r\ncache-control: max-age=26920000, public\r\nexpires: Tue, 11 Nov 2025 17:15:58 GMT\r\nx-boa-requestid: aRNvTbnU2eXf3lS9zOvN2QAAAIc\r\ncontent-type: application/font-woff2\r\ndate: Sun, 23 Nov 2025 22:28:04 GMT\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11984, version 1.197","md5":"50d39f33c7179280df5acb6a5bb2716b","sha1":"eb19d2940c727bb4e7f66e1e5c89ecff30725875","sha256":"a431986817e5d309cdd61c623a5259d6ea5840375876ffb41f5a2cab65ddd2e3","sha512":"1bdb49e8017cb517cdeb9bfe217302bff0b4be62f6a7f7b4c7fb2cac262721f8643f2dbaefde8963f37da193335d48d772bb4a52c844b7cdc17e39b6ec99b222","ssdeep":"192:/JlWpOvK6qHAY/RI23aPI9T55Dsomu0eWAbkmmc6Xo6kN8SegX9oz8:/JlWYCvgIK23aPA55Qomu0eOmmbz8","tlshash":"4632bf9d5c72ebb0d9028cd91c9c1c63b2df4be6ec9163b264883e2f5281735c552353","first_seen":"2023-04-06T19:51:32Z","last_seen":"2026-04-29T12:07:41.720839Z","times_seen":333,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.bankofamerica.com/ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=82aeb2bf-9a90-47f4-ba5a-24aae384a8ce","fqdn":"smetrics.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"63.140.62.210","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:06.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:E0:81:67:45:65:71:E9:30:D3:57:3E:3F:93:2F:C6:50:2E:58:D0","sha256":"FB:2E:80:78:19:65:B3:5B:AE:D9:BB:A0:2E:08:C7:41:05:8E:17:4C:52:15:0A:FA:E2:F8:8D:1C:62:D2:E8:C9"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=f45f4a2b-c94b-4b81-a49b-acd898ade560\u0026requestId=82aeb2bf-9a90-47f4-ba5a-24aae384a8ce HTTP/1.1\r\nHost: smetrics.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1707\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; __gdic=micah6n4yrklcw4h4h\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1707,"data":"{\"meta\":{\"configOverrides\":{\"com_adobe_target\":{\"propertyToken\":\"338dacae-1da7-d420-f22c-0af26820a52f\"}},\"target\":{\"migration\":true},\"state\":{\"domain\":\"bankofamerica.com\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"Web Webinteraction Link Clicks.Sitepromotion\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.bankofamerica.com/\",\"name\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"server\":\"www.bankofamerica.com\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"Site Promotions Impressions\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-11-23T22:28:06.157+00:00\"},\"timestamp\":\"2025-11-23T22:28:06.158Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.21.1+2.25.0\",\"environment\":\"browser\"},\"identityMap\":{\"FPID\":[{\"authenticatedState\":\"ambiguous\",\"id\":\"333b7da9-d987-4592-ba5c-a94739d67e1d\",\"primary\":false}]},\"_experience\":{\"analytics\":{\"event1to100\":{\"event1\":{\"value\":1}},\"customDimensions\":{\"eVars\":{\"eVar1\":\"https://www.bankofamerica.com/\",\"eVar4\":\"\",\"eVar78\":\"www.bankofamerica.com/\",\"eVar81\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\",\"eVar211\":\"Bank of America - Banking, Credit Cards, Loans and Merrill Investing\"},\"lists\":{\"list1\":{\"list\":[{\"value\":\"MobileAlerts-_-Default-_-MAY4QU6W01_Highlights_NH_2024DefaultmobilealertHL3_mobileAcquisitionQ1RefreshHl\"}]},\"list2\":{\"list\":[{\"value\":\"MAY4QU6W\"}]}},\"props\":{}}}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 82aeb2bf-9a90-47f4-ba5a-24aae384a8ce-217432c9f6b94fa5\r\nvary: Origin\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Sun, 23 Nov 2025 22:28:06 GMT\r\nx-konductor: 25.9.9-HOTFIXMETRICSAVAILABILITYDURINGHIGHTRAFFIC:1ea882178\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=bankofamerica.com; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"662509fa63d71e8074689d42eef1d179","sha1":"5445756cb5f6d3a9b28f3b7781ee6bcd88058276","sha256":"7ae9340694ae678ae76d80616c3bc4713af24cb1dda0d5d83293bfb0e68a121b","sha512":"eb2900077e1a91f2cb024dfdc96f6822993cddd7648c78354e5d39769bce20742708ec899ec21f1e96838fa2cf0b5ccdfec110bff80b4dc8a2db7cc0ac2d7cef","ssdeep":"","tlshash":"acf05cc68a59ad9109df36c121d3f97057973503d4d7c0040a90db66c2cc5c4750cd1b","first_seen":"2025-11-23T22:29:02.469098Z","last_seen":"2025-11-23T22:29:02.469098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glassbox-hlx-igw.bankofamerica.com/glassbox/reporting/aab600df-ed6d-5f46-dada-9c5376520067/cls_report?clsjsv=6.6.138B282\u0026_cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\u0026_cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0\u0026pid=612a7ace-55f4-413a-b64d-c06ef8924c9d\u0026sn=1\u0026cfg\u0026pv=2\u0026aid=","fqdn":"glassbox-hlx-igw.bankofamerica.com","domain":"bankofamerica.com","tld":"com"},"ip":{"addr":"171.161.100.253","port":443,"asn":10794,"as":"BANKAMERICA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:11.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"glassbox-hlx-igw.bankofamerica.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:44:75:59:AF:CE:33:FF:8E:E8:32:9D:4D:0D:53:8D:13:7B:02:E5","sha256":"2B:F9:06:A3:7B:04:50:2F:D5:AD:F8:4A:86:6D:D7:7E:3A:05:84:3E:B3:FC:2A:3A:C1:D2:BC:10:03:CE:5B:0D"}}},"request":{"raw":"POST /glassbox/reporting/aab600df-ed6d-5f46-dada-9c5376520067/cls_report?clsjsv=6.6.138B282\u0026_cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0\u0026_cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0\u0026pid=612a7ace-55f4-413a-b64d-c06ef8924c9d\u0026sn=1\u0026cfg\u0026pv=2\u0026aid= HTTP/1.1\r\nHost: glassbox-hlx-igw.bankofamerica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13682\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nCookie: FPID=333b7da9-d987-4592-ba5c-a94739d67e1d:exp=1798496877; FPID_CLIENT=333b7da9-d987-4592-ba5c-a94739d67e1d; WPID=C1S1; CONTEXT=en_US; INTL_LANG=en_US; LANG_COOKIE=en_US; BOFA_LOCALE_COOKIE=en-US; ignoreSBRedirect=true; BOA_0020=20251123:0:O:26048345-3e26-4285-b1f3c8e727e138c2; utag_main=v_id:019ab2d4c027001f130863c7c28405050001e00900918$_sn:1$_se:1$_ss:1$_st:1763938678632$ses_id:1763936878632%3Bexp-session$_pn:1%3Bexp-session; SID=001B3F88F90069238A6F; mbox=session%2354096719408509273544517466835770463885%2DjYXpRW%231763938739; mboxEdgeCluster=37; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_cluster=irl1; kndctr_A9893BC75245B1D70A490D4D_AdobeOrg_identity=CiY1NDA5NjcxOTQwODUwOTI3MzU0NDUxNzQ2NjgzNTc3MDQ2Mzg4NVITCPKC05arMxABGAEqBElSTDEwAPAB8oLTlqsz; cdContextId=2; bmuid=1763936879064-5614FFF2-5275-429F-9EAB-9A80B6F8A752; AMCV_A9893BC75245B1D70A490D4D%40AdobeOrg=MCMID|54096719408509273544517466835770463885; LSESSIONID=eyJlIjoiUmFoT1o4YzhlXC9QeEdsNWtQb2c1SVRJMzBMcWdNTms3SWRqQU5ad05pcnk2QWhRc0hrNm1heDlqTnV3ZkFzRnBTWnZjR2lIOUZvMWhlb1wvcG5sSHJDUEwwa3FWYjF4dG5LRTVOdHZBTERrQWFmTVpBdXNsUUlQU2lXdzIwSVh5SVBSV0FoQU54RURBUFJKM3RnM3B4cnc9PSIsImkiOiJ5RUhDTk5aYk1ObjJSdHpoK0pwUUxnPT0ifQ%3D%3D.6807b76e0b385b28.NjBlY2VhZjNhNGRiYzNhNGUzN2I0ZjUwMzU5ZjQ1ZDIzNDk4Mjg5Nzk0ZTQ5MTMxZDQ2MzcyYjIzNTUxMWIyOQ%3D%3D; SPID=Q1S2; TS0156185e=01b13351544681c9bbb1728acfb79a71083dd57c38d891a5362e2c72957a6e498d0dd3d5ea38d40c51f766074f2a9530a71eb14723; CSID=MTdjZGFiNjctMTMwZS00M2FjLWEyM2ItYTljZWM3MDQzMjIyOjE3NjM5MzY4Nzk0ODU=; ccts=YD1syBFHBeBZnUQR50JFBZAyAynr6PW2dbBFQOEKyhaVLcbDnVVqqCpyeKy+ZKzTueHZqFWQ9OD+z/bS+hTAZA==; AHVC=0-7:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/cs/2.0.0/js/cs.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/bc/4.0.0/js/bc.js:https://secure1.bac-assets.com/sparta/client/helper/spa-assets/components/utilities/client-helper/behbio/auth/2.0.0/js/auth.js:invokeHeartBeat:true:invokeHeartBeatMweb:false; _cc-x=Y2QyYzBmNDUtMmMwNC00YmM5LTlhMzUtYTcwZDJiMzI3NDhmOjE3NjM5MzY4Nzk0ODg; GSID=mgXB91sJc6yM2jGSQmvgM4ox8EE1viY71P745aNA; cdSNum=1763936879721-sjn0000888-9662f522-5cea-4d5f-9002-265bff8f6e84; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; _cls_cfgver=3ab308b1; _cls_v=f3dd0d41-0a69-4eca-a67f-41a54b0203f0; _cls_s=517cb9d1-2e6b-40bf-b556-c45031c612c2:0; rto=default; TS01f13836=010383c7fd0f1bb082a114a835246717a4bd0202aeaf7ca8be22677f418aff57ad07b577b0d54cec8ec69ed916b746aa3d3c4846fa; __gdic=micah6n4yrklcw4h4h; ___r30306=0.3159919021514\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13682,"data":"v=2\u0026r=https%3A%2F%2Fwww.bankofamerica.com%2F\u0026sn=1\u0026p=612a7ace-55f4-413a-b64d-c06ef8924c9d\u0026seg=%2F\u0026sp=\u0026e=micah3dw~2~-~Nu_-ufew6x*s_1280x1024*sc_1280x1024~vn.2_QmFuayBvZiBBbWVyaWNhIC0gQmFua2luZywgQ3JlZGl0IENhcmRzLCBMb2FucyBhbmQgTWVycmlsbCBJbnZlc3Rpbmc%3D*windowDepth.0_0*historyLen.0_2*detectorCfg.2_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%3D*scrollDebounced.1_1*eventId.0_1*pageSn.2_MQ%3D%3D*browserTabId.2_YWIzMWVkY2YtYmQzNC00MzM5LTgxODItNTI0MDg4ZTU3YWZk~-~-~-~~micah43k~19~-~EMF8yYXZfMF9zZw%3D%3D~eventId.0_2~-~-~-~~micah53d~35~-~N1_micah0tq*2_0*4_micah110*5_micah111*7_micah1ef*8_micah1em*10_micah1es*13_micah1ew*15_micah1i2*17_micah27o*19_micah436*20_micah436*21_micah43j*nt_0*rc_0*bt_1ph~vn.2_QmFuayBvZiBBbWVyaWNhIC0gQmFua2luZywgQ3JlZGl0IENhcmRzLCBMb2FucyBhbmQgTWVycmlsbCBJbnZlc3Rpbmc%3D*eventId.0_3~-~-~-~~micah43u~22~-~Nsn_0*m_GET*u_aHR0cHM6Ly9zZWN1cmUuYmFua29mYW1lcmljYS5jb20vc3BhcnRhL2NsaWVudC9oZWxwZXIvY2xpZW50LWFzc2V0cy8%2FbT1RbVZvUW1sdklGTkVTeUJwY3lCc2IyRmtaV1FnZDJsMGFDQmpjMmxrSUdGdVpDQndZV2RsUTI5dWRHVjRkQT09Ok1UZGpaR0ZpTmpjdE1UTXdaUzAwTTJGakxXRXlNMkl0WVRsalpXTTNNRFF6TWpJeU9qRTNOak01TXpZNE56azBPRFU9OmxvZ2luLWhvbWUmcj1hSFIwY0hNNkx5OTNkM2N1WW1GdWEyOW1ZVzFsY21sallTNWpiMjB2*d_gj*upa_1*s_5k*st_T0s%3D*rqh_Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi9qc29uDQphY2NlcHQ6IGFwcGxpY2F0aW9uL2pzb24NCmNhY2hlLWNvbnRyb2w6IG5vLWNhY2hl*rh_Y2FjaGUtY29udHJvbDogbWF4LWFnZT0xDQpjb250ZW50LXR5cGU6IHRleHQvaHRtbA0KZXhwaXJlczogU3VuLCAyMyBOb3YgMjAyNSAyMjoyODowMiBHTVQNCmxhc3QtbW9kaWZpZWQ6IE1vbiwgMTAgTm92IDIwMjUgMDI6MTY6MjUgR01UDQo%3D*rct_dGV4dC9odG1s*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*dt_gj*rdt_gj*a_0*api_xhr*vhdr_0~selectorActionCount.0_1*eventId.0_4~-~-~body~~micah4zl~22~-~Nsn_1*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LWZvb3Rlci11bmF1dGgtc2VjdXJlLWJvZmEtd2lkZ2V0LzEuMC4wL3NwYS1hc3NldHMvZGF0YS9zcGFydGEtYnJvd3Nlci1zdXBwb3J0LXV0aWxpdHkuMC5mNjhjN2RiMDEwYzgxNTQ1YjI2OWUzOTQ5MjgyN2QyMWEwZWRhZTYwLmpzb24%3D*d_c*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogTW9uLCAxMSBBdWcgMjAyNSAwMDo0Nzo0MCBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_c*rdt_c*a_0*api_xhr*vhdr_0~selectorActionCount.0_2*eventId.0_5~-~-~body~~micah520~22~-~Nsn_2*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LW5hdi11bmF1dGgtc2VjdXJlLWJvZmEtd2lkZ2V0LzEuMC4wL3NwYS1hc3NldHMvZGF0YS9zcGFydGEtYnJvd3Nlci1zdXBwb3J0LXV0aWxpdHkuMC5mNjhjN2RiMDEwYzgxNTQ1YjI2OWUzOTQ5MjgyN2QyMWEwZWRhZTYwLmpzb24%3D*d_b*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogVHVlLCAxMiBBdWcgMjAyNSAxNzo1NDowMSBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_b*rdt_b*a_0*api_xhr*vhdr_0~selectorActionCount.0_3*eventId.0_6~-~-~body~~micah5mm~22~-~Nsn_3*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS1jb250ZW50L3YxL2NvbnRlbnQ%2Fa2V5PWVuLmdsb2JhbC10ZW5hbnRzLmd0LXVuYXV0aC1mb290ZXItYm9mYQ%3D%3D*d_1x*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogbWF4LWFnZT0zMA0KY29udGVudC1sYW5ndWFnZTogZW4tVVMNClgtR2xhc3Nib3gtT3JpZy1Db250ZW50LUxlbmd0aDogMzY2Nw0KY29udGVudC10eXBlOiBhcHBsaWNhdGlvbi9qc29uDQo%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_2tv*dt_1x*rdt_1x*a_0*api_xhr*vhdr_0~selectorActionCount.0_4*eventId.0_7~-~-~body~~micah636~22~-~Nsn_4*m_GET*u_aHR0cHM6Ly9zZWN1cmUuYmFua29mYW1lcmljYS5jb20vc3BhL3dpZGdldHMvZ3Qtc2VjdXJlLWZkaWMtd2lkZ2V0LzEuMC4wL2luZGV4Lmh0bWw%3D*d_3c*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogbWF4LWFnZT0xDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDE1NjUNCmNvbnRlbnQtdHlwZTogdGV4dC9odG1sDQpleHBpcmVzOiBTdW4sIDIzIE5vdiAyMDI1IDIyOjI4OjA0IEdNVA0KbGFzdC1tb2RpZmllZDogTW9uLCAxMCBOb3YgMjAyNSAwMjowODoxNSBHTVQNCg%3D%3D*rct_dGV4dC9odG1s*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_17h*dt_3c*rdt_3c*a_0*api_xhr*vhdr_0~selectorActionCount.0_5*eventId.0_8~-~-~body~~micah637~22~-~Nsn_5*m_GET*u_aHR0cHM6Ly9zZWN1cmUuYmFua29mYW1lcmljYS5jb20vc3BhL3dpZGdldHMvZ3Qtc2VhcmNoLXB1YmxpYy13aWRnZXQvMS4wLjAvaW5kZXguaHRtbA%3D%3D*d_3u*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogbWF4LWFnZT0xDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDM5NDANCmNvbnRlbnQtdHlwZTogdGV4dC9odG1sDQpleHBpcmVzOiBTdW4sIDIzIE5vdiAyMDI1IDIyOjI4OjA0IEdNVA0KbGFzdC1tb2RpZmllZDogTW9uLCAxMSBBdWcgMjAyNSAwMDo0OTowMiBHTVQNCg%3D%3D*rct_dGV4dC9odG1s*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_31g*dt_3u*rdt_3u*a_0*api_xhr*vhdr_0~selectorActionCount.0_6*eventId.0_9~-~-~body~~micah78g~22~-~Nsn_6*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LXNlY3VyZS1mZGljLXdpZGdldC8xLjAuMC9zcGEtYXNzZXRzL2RhdGEvc3BhcnRhLWJyb3dzZXItc3VwcG9ydC11dGlsaXR5LjAuZjY4YzdkYjAxMGM4MTU0NWIyNjllMzk0OTI4MjdkMjFhMGVkYWU2MC5qc29u*d_15*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogRnJpLCAwOCBOb3YgMjAyNCAwOToxMDozOCBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_15*rdt_15*a_0*api_xhr*vhdr_0~selectorActionCount.0_7*eventId.0_a~-~-~body~~micah7c4~22~-~Nsn_7*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LXNlY3VyZS1mZGljLXdpZGdldC8xLjAuMC9zcGEtYXNzZXRzL2RhdGEvc3BhcnRhLWJyb3dzZXItc3VwcG9ydC11dGlsaXR5LjAuZjY4YzdkYjAxMGM4MTU0NWIyNjllMzk0OTI4MjdkMjFhMGVkYWU2MC5qc29u*d_d*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogRnJpLCAwOCBOb3YgMjAyNCAwOToxMDozOCBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_d*rdt_d*a_0*api_xhr*vhdr_0~selectorActionCount.0_8*eventId.0_b~-~-~body~~micah7fc~22~-~Nsn_8*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LXNlYXJjaC1wdWJsaWMtd2lkZ2V0LzEuMC4wL3NwYS1hc3NldHMvZGF0YS9zcGFydGEtYnJvd3Nlci1zdXBwb3J0LXV0aWxpdHkuMC5mNjhjN2RiMDEwYzgxNTQ1YjI2OWUzOTQ5MjgyN2QyMWEwZWRhZTYwLmpzb24%3D*d_d*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogTW9uLCAxMiBNYXkgMjAyNSAwNzozNToxMiBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_d*rdt_d*a_0*api_xhr*vhdr_0~selectorActionCount.0_9*eventId.0_c~-~-~body~~micah7kr~22~-~Nsn_9*m_GET*u_aHR0cHM6Ly9zZWN1cmUxLmJhYy1hc3NldHMuY29tL3NwYS93aWRnZXRzL2d0LXNlYXJjaC1wdWJsaWMtd2lkZ2V0LzEuMC4wL3NwYS1hc3NldHMvZGF0YS9zcGFydGEtYnJvd3Nlci1zdXBwb3J0LXV0aWxpdHkuMC5mNjhjN2RiMDEwYzgxNTQ1YjI2OWUzOTQ5MjgyN2QyMWEwZWRhZTYwLmpzb24%3D*d_d*upa_1*s_5k*st_T0s%3D*rh_Y2FjaGUtY29udHJvbDogcHVibGljLCBtYXgtYWdlPTMxNTM2MDAwDQpYLUdsYXNzYm94LU9yaWctQ29udGVudC1MZW5ndGg6IDkzNzcNCmNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24vanNvbg0KbGFzdC1tb2RpZmllZDogTW9uLCAxMiBNYXkgMjAyNSAwNzozNToxMiBHTVQNCg%3D%3D*rct_YXBwbGljYXRpb24vanNvbg%3D%3D*rqct_dGV4dC9wbGFpbjtjaGFyc2V0PXV0Zi04*rcl_78h*dt_d*rdt_d*a_0*api_xhr*vhdr_0~selectorActionCount.0_a*eventId.0_d~-~-~body~~micahbtc~113~-~NeyJGQ1AiOjIwODgsIlRURkIiOjc2MiwiTkNMUyI6MCwiTkxDUCI6MH0%3D~eventId.0_e~-~-~-\u0026dom=\u0026pattr="}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:28:12 GMT\r\nAccess-Control-Allow-Origin: https://www.bankofamerica.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: POST, GET\r\nAccess-Control-Allow-Headers: accept,x-requested-method,origin,__pageidheader\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains;\r\ncontent-type: application/json\r\nvary: origin\r\ncontent-encoding: gzip\r\ncontent-length: 503\r\nVia: 1.1 laz10pegbxgs04v.sdi.ssc.ext.bankofamerica.com\r\nX-Akamai-testSITE: GTDC\r\nKeep-Alive: timeout=5, max=512\r\nConnection: Keep-Alive\r\nset-cookie: _cls_cfgver=3ab308b1; Path=/; Secure; SameSite=None;HttpOnly;Secure\nTS01f13836=010383c7fd0f1bb082a114a835246717a4bd0202aeaf7ca8be22677f418aff57ad07b577b0d54cec8ec69ed916b746aa3d3c4846fa; Path=/; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d4d68c633d249e7833a31dacc6cbddf","sha1":"e828c6da05322003cb7db72f7ffd401632732930","sha256":"41be020b1bab1975046a5813b609d74d82083f3e10da591ce889fd8b46e12fab","sha512":"92528cd578a5c8a27521416fa198f788468e4cb579df3b33b720f8fdcc09547db139ec5fb6bc84e7aa5e2db5f47c48265538de45fa7a7c9034e3b2aa6260b751","ssdeep":"","tlshash":"2b0110a63b5126fe8b5b2907e4041e41c761268ff2a87e1cbc89844db56b488e703339","first_seen":"2025-11-23T22:29:02.391863Z","last_seen":"2025-11-23T22:29:02.391863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1523,"timings":{"blocked":502,"dns":5,"connect":164,"send":0,"wait":513,"receive":1,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202509.1.0/sri-hashes.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:27:59.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202509.1.0/sri-hashes.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bankofamerica.com/\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:27:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 555\r\ncf-ray: 9a3418d64e6856c9-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: oBGHAGJgzwlqR7h0o4Z2WQ==\r\nlast-modified: Tue, 30 Sep 2025 02:10:05 GMT\r\netag: 0x8DDFFC6791FB1DE\r\nx-ms-request-id: b1d06a22-301e-0062-7452-3fd452000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 58648\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":745,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8db1fd11f3ee3d5195c72f3e17eabdd9","sha1":"8319e4ac088ad864dd7f0ee54e5270572349ed3e","sha256":"6c6ea854fd78478e5f1dadec46c9f73165a88446ec74b66008b2dc705af5a735","sha512":"ad3b92d7c5f14448b21e2b34f138c35942cd3910431c4dddb9e9bd719bf85e5f53faea49c0c8f8f636c3332810e74a720dbe6e74cd280daa94d080f6efa54680","ssdeep":"","tlshash":"1401d0686130d03f19c1db05ab888f8c4686d53f51706988330f136b16bc55f647d49f","first_seen":"2025-11-10T15:40:58.873834Z","last_seen":"2026-05-10T11:37:41.745419Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/data/sparta-browser-support-utility.0.f68c7db010c81545b269e39492827d21a0edae60.json HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bankofamerica.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 Aug 2025 00:47:40 GMT\r\netag: \"37fa-63c0c45505241\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aMBj80AOMpXETbOprilYfAAAAGc\r\ncontent-length: 9377\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: __PageIdHeader, Content-Type, Origin, Accept, geh-httptrace-gtml, cache-control\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bankofamerica.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdd0aeed37ab1fe62cb4f40044f68a12","sha1":"f68c7db010c81545b269e39492827d21a0edae60","sha256":"2a38032d85ca8cd3dcee02f1dbb481b9f5c324fdab9f5f62782c922f6dbc8eac","sha512":"97c570e42eca193a53d8c2b68d666d633cf8303501997a01c6eb9ac55774c540c46e0c9518d44538c82ca2d4e8ba028d418937890e3566d7ef894be41eb8df0d","ssdeep":"384:1ZCqECvdzhTJZ8kZuEI0rXi1ZtlBqHTql5zOjll/o:bCAxr88uETrXi1BBETOCr/o","tlshash":"ce528e7af0793c8e953442c3b4b61ad7fee495ab85909793347f020d0b62a44664eabc","first_seen":"2024-12-03T21:16:27.586982Z","last_seen":"2026-05-01T18:56:54.954434Z","times_seen":170,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure1.bac-assets.com/spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-es6-page-8e3ff0a4a2caffa97491.m.js","fqdn":"secure1.bac-assets.com","domain":"bac-assets.com","tld":"com"},"ip":{"addr":"23.36.79.169","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bankofamerica.com/","date":"2025-11-23T22:28:02.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure1.bac-assets.com","organization":"Bank of America Corporation"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Fri, 11 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:0C:31:2D:85:07:47:C8:5F:6A:1C:FA:49:DC:09:80:79:F4:5F:78","sha256":"27:66:DD:7B:F7:C8:1B:94:94:A3:DB:A3:B8:E8:E8:B9:07:A2:87:A3:88:F7:51:4D:A9:C3:A0:37:D9:63:C9:03"}}},"request":{"raw":"GET /spa/widgets/gt-footer-unauth-secure-bofa-widget/1.0.0/spa-assets/js/pages/gt-footer-unauth-secure-bofa-widget-1.0.0-es6-page-8e3ff0a4a2caffa97491.m.js HTTP/1.1\r\nHost: secure1.bac-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bankofamerica.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 10 Nov 2025 02:00:55 GMT\r\netag: \"1b5b-64333e6db979b\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-boa-requestid: aR04nkHRiAdZcVx2LwYrsgAAASY\r\ncontent-length: 903\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=31536000\r\ndate: Sun, 23 Nov 2025 22:28:02 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nx-bac-akm-c: ON\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7003,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7003), with no line terminators","md5":"a403bae92208947efe22a8e84cc1ee30","sha1":"2f405ff2ae335cecc909bf88d4ca195ce4ccec3f","sha256":"6cbb3f083624af37807723ed5ecbd9cfc0d3310890ab3cc983bdd02ab8f8de86","sha512":"71db2570eebe56cf9fbc45b3e74dab2488474a2bb7a990dd296ea46c248a461c52017ab4f6255038dd5e47fe9fdae9c982e907e28f5c4b0f1fa7c8ac48265a30","ssdeep":"192:Mb+ESFrG0HExS4GnGt4E4G4Jy4JY4S444/414h474i4I4o4aGVGPG8GuG5GDGJGF:q+EgGaVzJPJ5vZAyOs/pJd8O/BwyACZK","tlshash":"38e1b0acb9a2246d187ca87bf23b7d47237444eaac8e46d0651d22cd1a4f74ba1311bd","first_seen":"2025-11-23T22:29:02.471752Z","last_seen":"2026-02-15T01:17:16.637208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
