bankofamerica.com

HTML metadata

Title

Bank of America - Banking, Credit Cards, Loans and Merrill Investing

Description

What would you like the power to do? At Bank of America, our purpose is to help make financial lives better through the power of every connection.

Language

en-US

Canonical

https://www.bankofamerica.com/

Translations

es

Open Graph

url: https://www.bankofamerica.com/
title: Bank of America - Banking, Credit Cards, Loans and Merrill Investing
site name: Bank of America
description: What would you like the power to do? At Bank of America, our purpose is to help make financial lives better through the power of every connection.

Technology

CMS: Ghost

Third-party hosts loaded (1)

www1.bac-assets.com×15

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1998-12-28

Expires

2026-12-28 221 days left

Updated

2025-12-24

Name servers

a.ns-bac.com
b.ns-bac.org
c.ns-bac.net
d.ns-bac.info
e.ns-boa.biz
f.ns-boa.us
g.ns-bac.com

DNS records live

NS

a.ns-bac.com
b.ns-bac.org
c.ns-bac.net
d.ns-bac.info
e.ns-boa.biz
f.ns-boa.us
g.ns-bac.com

MX

10 mxa-0000ec05.gslb.pphosted.com
10 mxb-0000ec05.gslb.pphosted.com

TXT

Show 41 TXT records

00D300000000Lsb=1TBHp0000008OIF
_mue2mr9ttx0pb28iu4vju44fyivlze2
00Dd0000000fllf=1TBKh000000Kynr
00DDn0000014WMF=1TBDn0000000006
00DDn0000014WHa=1TBDn000000XZAR
00D30000001H88T=1TBKX000000Gmb7
00DDk000000E4pS=1TBDk0000008ONA
00D210000002QLf=1TBDl0000008OKR
00D1D000000jT9H=1TBDR0000008OIt
00D30000000nW2o=1TBKd000000000B
00DD50000009T2F=1TBD50000004CCI
00DHo000007ESQH=1TBHo000000sXtb
00D700000009PLP=1TBKe0000004C9D
N73NW9KHOCFO1J30DG9M0U52P3KJYN458U7T7MOAO
79HRM45BZQL4W6DODHCJ08ICCEPI4ZZ95OPF1PODC
00D7g0000005BwN=1TBD70000004CB9
ccisso=4d9729b7-b770-4856-947d-935d1b4dca9c
00D8I0000016LkC=1TBDa000000000a
00D30000001H1Cv=1TBHt000000000B
00D3000000071D4=1TBKX0000008OLJ
00D750000000NEs=1TBDh0000004CB9
00D52000000JPHM=1TBDU000000Gma9
00D4C0000008x25=1TBD10000004CCb
00DDE0000045mMg=1TBDE000000CaRH
00D60000000KTAU=1TBKZ000000001T
00D46000000aATr=1TBKk0000000007
00D0b000000De84=1TBKW000000GmaA
00D30000001FXpf=1TBHt000000000Q
00D400000007EoN=1TBKY000000fxU2
00D36000000rZom=1TBHq0000004C9D
00D2g0000000ZPI=1TBD1000000003M
00D37000000J5Lh=1TBKb000000TN74
XP24tQeCoyIoYKFUDBai/TAmSrkfqDi8E276kwIOINKuXcgwMZwhckPM+6x5egH7+IV5OFBRNkdgRIHmbQ4Usw==
00D300000005zGi=1TBKe000000oLob
00DE0000000ZaqE=1TBHt000000XZEJ
00D30000001HRSt=1TBKe000000blLi
00D300000000K1b=1TBKZ0000004CFQ
00DDn00000122RU=1TBDn0000004C9E
00D3K0000008lCp=1TBDc0000008OM2
00DDY0000000PuC=1TBDY0000004C9D
00D30000000nqfl=1TBHt000000CaRH

Verified for

Apple
Cisco Webex
DocuSign
Meta
Microsoft 365
OneTrust

Email authentication strong

SPF

v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec15.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:auth.report_ns@bankofamerica.com; ruf=mailto:bankofamerica@ruf.agari.com

policy: reject (enforced)

DKIM

smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

DigiCert EV RSA CA G2

from 2025-09-16 to 2026-09-16

Expires in 118 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.bankofamerica.com/

present

strict-transport-security
content-security-policy
x-frame-options

findings

CSP uses wildcard sources
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com glancecdn.net www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com
strict-transport-security: max-age=31536000; includeSubDomains