Audit Trail

{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": null,
    "server_ipv6": null
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "unreachable",
            "v6_egress": "unreachable"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "23.45.176.196",
        "total_time_ms": 430.3,
        "connect_time_ms": 4.54,
        "response_headers": {
            "0": "HTTP/1.1 301 Moved Permanently",
            "1": "Content-Length: 0",
            "2": "Location: https://business.bofa.com/",
            "3": "Date: Fri, 06 Mar 2026 09:00:14 GMT",
            "4": "Connection: keep-alive",
            "5": "Set-Cookie: FPID=c014793a-9dc2-40ef-8540-04881b12bbef:exp=1807347614; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; HttpOnly; SameSite=Lax",
            "6": "Set-Cookie: FPID_CLIENT=c014793a-9dc2-40ef-8540-04881b12bbef; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; SameSite=Lax",
            "7": "X-BAC-AKM-C: ON",
            "9": "HTTP/2 301",
            "10": "content-type: text/html; charset=iso-8859-1",
            "11": "content-length: 263",
            "12": "x-frame-options: SAMEORIGIN",
            "13": "x-frame-options: SAMEORIGIN",
            "14": "location: https://business.bofa.com/content/boaml/en_us/home.html",
            "15": "cache-control: no-cache, no-store, max-age=0",
            "16": "expires: Mon, 09 Dec 1996 16:00:00 GMT",
            "17": "x-ua-compatible: IE=Edge",
            "18": "x-xss-protection: 1; mode=block",
            "19": "pragma: no-cache",
            "20": "access-control-allow-credentials: true",
            "21": "x-content-type-options: nosniff",
            "22": "date: Fri, 06 Mar 2026 09:00:14 GMT",
            "23": "set-cookie: FPID=7d1cbaae-d847-4f66-8d9f-86879a007c90:exp=1807347614; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; HttpOnly; SameSite=Lax",
            "24": "set-cookie: FPID_CLIENT=7d1cbaae-d847-4f66-8d9f-86879a007c90; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; SameSite=Lax",
            "25": "strict-transport-security: max-age=31536000",
            "26": "x-bac-akm-c: ON",
            "28": "HTTP/2 200",
            "29": "content-type: text/html; charset=UTF-8",
            "30": "x-frame-options: SAMEORIGIN",
            "31": "x-frame-options: SAMEORIGIN",
            "32": "content-security-policy: default-src 'self' data: blob:; script-src 'self' 'sha256-PDCh5VeDfe/iHIJExhXDgKYK4CPkmuHfMskeNGTun5U=' 'sha256-tGCAy79zMW94DgRaBsZosm/7cizDEgOkLjOwt18lCGk=' 'sha256-Moqg3U+rgUW0c5F6kpcB8jsAlUY7xQEgDa74XSOmLj4=' 'nonce-onetrust-style' 'nonce-rAnd0m' https: data: blob: *.baml.com *.ml.com *.merrilledge.com *.bankofamerica.com *.bofa.com www.merrill.com vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com bcbolt446c5271-a.akamaihd.net hlsak-a.akamaihd.net  bankofamerica.tt.omtrdc.net testdata.coremetrics.com analytics.twitter.com twitter.com www.facebook.com www.linkedin.com dc.ads.linkedin.com maps.googleapis.com fonts.googleapis.com 1359940.fls.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net adservice.google.com www.youtube.com www.google-analytics.com c.betrad.com www.googletagmanager.com api.company-target.com insight.adsrvr.org test.salesforce.com login.salesforce.com d.agkn.com  znczuxiczndmh7vpb-bankofamerica.siteintercept.qualtrics.com zn78njubwkodhg8ht-bankofamerica.siteintercept.qualtrics.com cdn.cookielaw.org geolocation.onetrust.com www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it; font-src 'self' https: *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com vjs.zencdn.net *.ml.com fonts.gstatic.com fonts.googleapis.com data:; style-src 'self' 'sha256-z3bpeRnijmdUWtkq+L2MmU0dKSQsB3GBSKmF6wcEKP0=' 'sha256-rOh4425QGt1UOiKgpZdfaA+GP2RJqCXbTGNSHxJm/9A=' 'sha256-LZ2ACTODk8/R90lF8ZpSWziYyPh3iOlrfLNonIuG2PY=' 'sha256-KxdIAY0X65VjqzYMz0Mb2p3/HcFIDzTvzevwJXBxoFU=' 'nonce-rAnd0m' 'nonce-onetrust-style' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com tags.tiqcdn.com cdn.cookielaw.org cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com fonts.googleapis.com; frame-src 'self' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com td.doubleclick.net www.googletagmanager.com 1359940.fls.doubleclick.net insight.adsrvr.org ct.pinterest.com match.adsrvr.org tr.snapchat.com www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it; connect-src 'self' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com cdn.cookielaw.org www.googleadservices.com www.google.com www.googletagmanager.com geolocation.onetrust.com privacyportal-bofa.my.onetrust.com www.google-analytics.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com maps.googleapis.com bat.bing.com insight.adsrvr.org ct.pinterest.com znczuxiczndmh7vpb-bankofamerica.siteintercept.qualtrics.com zn78njubwkodhg8ht-bankofamerica.siteintercept.qualtrics.com adobedc.demdex.net www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com tr.snapchat.com api.company-target.com; worker-src 'self' blob:; media-src 'self' blob: *.baml.com *.ml.com *.merrilledge.com *.bac-assets.com *.bankofamerica.com *.bofa.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com data:; img-src 'self' *.baml.com *.ml.com *.merrilledge.com *.bac-assets.com *.bankofamerica.com *.bofa.com data: bat.bing.com googleads.g.doubleclick.net www.google.com cdn.cookielaw.org ad.doubleclick.net www.googletagmanager.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com cdnsecakmi.kaltura.com alb.reddit.com maps.gstatic.com maps.googleapis.com;",
            "33": "last-modified: Fri, 06 Mar 2026 05:01:09 GMT",
            "34": "etag: \"3b2c5-64c53f101e918-gzip\"",
            "35": "x-ua-compatible: IE=Edge",
            "36": "x-xss-protection: 1; mode=block",
            "37": "access-control-allow-credentials: true",
            "38": "x-content-type-options: nosniff",
            "39": "x-ua-compatible: IE=Edge",
            "40": "expires: Fri, 06 Mar 2026 09:00:14 GMT",
            "41": "cache-control: max-age=0, no-cache, no-store",
            "42": "pragma: no-cache",
            "43": "date: Fri, 06 Mar 2026 09:00:14 GMT",
            "44": "set-cookie: BIGipServerpool_about.bankofamerica.com_8443=!+/2r9IcN2EMF5B8XJP0ukTWD6KciQBIudxELU1nLvP6SEhI/Jg5jDhJPOFvlL9qzXImfbMhtqJsgXQ==; path=/; Httponly; Secure",
            "45": "set-cookie: FPID=e8bfda8f-67aa-4ee9-b59e-f0fffeacc3cd:exp=1807347614; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; HttpOnly; SameSite=Lax",
            "46": "set-cookie: FPID_CLIENT=e8bfda8f-67aa-4ee9-b59e-f0fffeacc3cd; expires=Sat, 10-Apr-2027 09:00:14 GMT; path=/; domain=.bofa.com; secure; SameSite=Lax",
            "47": "strict-transport-security: max-age=31536000",
            "48": "x-bac-akm-c: ON"
        },
        "starttransfer_time_ms": 430.19
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nzOABMm4OmgZJDxoAhCo53kFgfqNTFS1GCpG3c9nFmw==\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
                    "rsa(e)": "10001",
                    "rsa(n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
                    "Subject": "jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2927442, C = US, ST = North Carolina, L = Charlotte, O = Bank of America Corporation, CN = about.bankofamerica.com",
                    "Version": "2",
                    "Signature": "2a:40:3c:c1:0c:84:7a:47:ad:bd:24:88:e5:b8:88:f9:1b:b9:2d:a8:6c:a3:eb:db:6e:de:b2:86:59:73:09:23:d6:c4:13:15:93:a5:9c:91:69:77:88:3f:58:27:de:04:a8:59:2e:ab:e4:a9:73:1e:2a:d7:dc:1b:11:52:d6:93:d9:d7:b9:06:97:97:2d:eb:2a:0b:2e:1a:f3:12:a8:59:8b:75:6f:58:e5:09:9c:35:54:e7:c5:75:47:8a:a1:59:72:50:e5:7a:f5:ed:da:c1:77:86:b7:c1:e9:57:2b:7c:df:00:6b:ce:67:ff:a5:3d:85:63:16:d5:ee:b7:0a:8d:b9:32:4f:f2:d5:f2:c0:19:99:f1:56:b6:a3:f0:6c:36:d7:eb:f3:82:bb:85:49:84:36:0f:88:96:28:ce:9d:db:7a:dd:96:63:a5:00:dd:6d:de:b9:a0:f4:52:0e:bb:c4:ec:2f:c0:87:74:4d:ec:21:8e:e3:21:1d:fa:ee:f4:bb:45:65:f7:0d:ca:ae:ec:97:8d:13:91:61:1b:ac:58:e8:3c:41:4e:61:65:45:e8:65:46:73:cf:6c:ab:c6:01:40:4e:cc:e0:01:32:6e:0e:9a:06:49:0f:1a:00:84:2a:39:de:41:60:7e:a3:53:15:2d:46:0a:91:b7:73:d9:c5:9b:",
                    "Start date": "Jan  7 00:00:00 2026 GMT",
                    "Expire date": "Feb  7 23:59:59 2027 GMT",
                    "Serial Number": "06595b177eafe5fc551ffd196783622b",
                    "RSA Public Key": "2048",
                    "X509v3 Key Usage": "Digital Signature, Key Encipherment",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "rsaEncryption",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F:\n                AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26\n    Timestamp : Jan  7 22:21:16.557 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:6E:75:BE:EE:DA:84:59:56:0A:FF:5F:F0:\n                11:28:40:D5:FF:5E:7B:F1:C6:46:91:CC:38:A5:19:07:\n                7F:E0:E8:67:02:21:00:EF:2F:FD:15:68:FF:10:68:1B:\n                FA:9B:93:61:4F:5F:81:62:B5:32:E2:30:BE:D3:6C:FD:\n                6F:C9:BD:0A:97:31:23\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:\n                DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F\n    Timestamp : Jan  7 22:21:16.614 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:FD:CA:0C:10:3C:2C:EF:78:48:18:AD:\n                2E:AA:8F:E9:EC:A4:B8:CF:E5:4A:42:78:20:4B:02:91:\n                69:38:67:51:97:02:20:12:43:17:30:E2:D6:F2:11:5C:\n                9C:BD:84:71:A3:47:51:D6:C1:FC:BC:B5:63:41:58:23:\n                AF:D8:3F:3B:42:8C:10\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99:\n                EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9\n    Timestamp : Jan  7 22:21:16.761 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:33:5B:A3:43:67:F5:5C:2A:BF:E9:1E:0D:\n                D2:A3:7E:13:0D:34:80:6A:3E:0A:66:6B:61:2C:D5:8C:\n                6C:B8:81:8D:02:20:54:1D:C9:21:2A:87:93:89:EA:EE:\n                9E:DB:70:AC:78:22:76:9C:1A:38:DC:9F:57:48:02:C9:\n                71:F9:46:6B:FB:CD",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.16.840.1.114412.2.1\nPolicy: 2.23.140.1.1\n  CPS: http://www.digicert.com/CPS",
                    "Authority Information Access": "OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt",
                    "X509v3 Subject Key Identifier": "A7:E9:49:2C:B2:62:DC:56:86:76:9C:95:F7:91:05:2F:17:EB:FF:D4",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl",
                    "X509v3 Authority Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
                    "X509v3 Subject Alternative Name": "DNS:about.bankofamerica.com, DNS:ba.ml.com, DNS:baml.bankofamerica.com, DNS:bankatwork.bankofamerica.com, DNS:bettermoneyhabits.bankofamerica.com, DNS:business.bankofamerica.com, DNS:business.bofa.com, DNS:ees.bankofamerica.com, DNS:employeeinfo.bankofamerica.com, DNS:healthaccounts.bankofamerica.com, DNS:homeloanhelp.bankofamerica.com, DNS:images.em.bankofamerica.com, DNS:info.bankofamerica.com, DNS:institute.bankofamerica.com, DNS:loans.bankofamerica.com, DNS:mcoeapp.bankofamerica.com, DNS:message.bankofamerica.com, DNS:mobilewallet.bankofamerica.com, DNS:museums.bankofamerica.com, DNS:offers.merrilledge.com, DNS:online.bankofamerica.com, DNS:personalize.bankofamerica.com, DNS:preferences.em.bankofamerica.com, DNS:promo.bankofamerica.com, DNS:promotions.bankofamerica.com, DNS:red.bankofamerica.com, DNS:rg.ml.com, DNS:utility.bankofamerica.com, DNS:ux.bankofamerica.com, DNS:wb.ml.com, DNS:workplaceinsights.bofa.com, DNS:www.bamlclientconf.com, DNS:www.bamlevents.com, DNS:www.bamlinsights.com, DNS:www.bankofamerica.co.id, DNS:www.bettermoneyhabits.com, DNS:www.bofa-india.com, DNS:www.bofaevents.com, DNS:www.bofaml.com, DNS:www.loans.com, DNS:www.ml-india.com, DNS:www.saveituseit.com, DNS:www.usconsumerprivacypolicy.com"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2",
                    "rsa(e)": "10001",
                    "rsa(n)": "AD1E66CC7F9DE4EB7F8317273D11D9F2532037CDF00C1402EEE1CB8808D2FA7B3BC2C0007C768776DB7FCC25FA918C4B16892BD7DF0C3083EB716AA8506A13D7939A8DD192042196EE796B4E0BB1744B70AE9CAE404E3B47637689F26E686B7C6AED06A62F6D16ADC5E9E4BF44A0E1FAE1465E30621E1D9D6D0B39544685BB751B9435F739BD0AA325ABB2E551D004FBA7776B9FBEA697C672758B99B11511C2C73C09DB97EFE229AB90A50954D4C8BEC040678C4E6D2BC43BEFC9DA5E717E0EC79D409ECD122F9B428A274C7133F6BC9E11C507B904EFEE70296BFCC2A9EB399579F5A4CB382D927749581B9132E3F916C1A2FFEE8B04D7B6404459AC2F647F",
                    "Subject": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
                    "Version": "2",
                    "Signature": "52:32:0a:c2:75:8d:be:3b:db:29:9d:83:6f:c0:78:86:fb:d9:42:25:bc:84:2d:1d:14:b2:82:f0:a7:31:a9:49:d9:07:0f:ba:55:0c:31:49:9b:7f:ff:07:c1:2c:fb:5e:d3:d6:8e:47:6a:df:87:44:3b:2f:46:be:dd:dc:c1:32:a3:d8:97:92:4c:4b:84:a1:20:02:90:36:16:dd:9e:65:f3:eb:4e:89:5c:f7:93:f0:49:69:e7:dc:56:7c:06:17:46:3b:86:eb:4c:0e:3e:ce:43:d2:2a:83:17:8b:f5:fe:58:b0:4d:37:6f:59:fe:76:c2:4b:b1:ff:a8:b1:ad:ee:05:62:12:f4:c8:75:4f:31:f8:7e:25:fd:78:a0:64:c5:03:69:59:89:f8:1e:5d:ed:cc:12:2b:bc:8e:a1:07:5f:a0:80:46:98:0e:4c:a7:82:e1:33:3a:39:da:b7:ff:fe:45:cf:7c:4d:f0:60:86:55:1e:a5:6e:c7:19:67:4e:41:58:99:f7:c2:5f:df:cb:a2:7e:d2:59:a1:9d:83:a4:5c:93:84:47:84:72:d6:b6:6c:f6:95:36:79:08:4a:36:96:30:ec:1b:30:85:18:93:fb:a1:3e:2a:e9:0f:28:14:2d:fc:8a:bb:dd:28:82:7d:e5:c5:31:63:38:f8:b6:73:88:",
                    "Start date": "Jul  2 12:42:50 2020 GMT",
                    "Expire date": "Jul  2 12:42:50 2030 GMT",
                    "Serial Number": "01678f1fef882255d8b0a70e6b7bb220",
                    "RSA Public Key": "2048",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "rsaEncryption",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS\n  User Notice:\n    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua",
                    "Authority Information Access": "OCSP - URI:http://ocsp.digicert.com",
                    "X509v3 Subject Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl",
                    "X509v3 Authority Key Identifier": "4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39"
                }
            ]
        },
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "23.45.176.226",
        "total_time_ms": 281.31,
        "connect_time_ms": 0.82,
        "response_headers": {
            "0": "HTTP/2 301",
            "1": "content-type: text/html; charset=iso-8859-1",
            "2": "content-length: 263",
            "3": "x-frame-options: SAMEORIGIN",
            "4": "x-frame-options: SAMEORIGIN",
            "5": "location: https://business.bofa.com/content/boaml/en_us/home.html",
            "6": "cache-control: no-cache, no-store, max-age=0",
            "7": "expires: Mon, 09 Dec 1996 16:00:00 GMT",
            "8": "x-ua-compatible: IE=Edge",
            "9": "x-xss-protection: 1; mode=block",
            "10": "pragma: no-cache",
            "11": "access-control-allow-credentials: true",
            "12": "x-content-type-options: nosniff",
            "13": "date: Fri, 06 Mar 2026 09:00:15 GMT",
            "14": "set-cookie: FPID=59d68513-eaa8-42ba-87fa-4faf8e8b5ed5:exp=1807347615; expires=Sat, 10-Apr-2027 09:00:15 GMT; path=/; domain=.bofa.com; secure; HttpOnly; SameSite=Lax",
            "15": "set-cookie: FPID_CLIENT=59d68513-eaa8-42ba-87fa-4faf8e8b5ed5; expires=Sat, 10-Apr-2027 09:00:15 GMT; path=/; domain=.bofa.com; secure; SameSite=Lax",
            "16": "strict-transport-security: max-age=31536000",
            "17": "x-bac-akm-c: ON",
            "19": "HTTP/2 200",
            "20": "content-type: text/html; charset=UTF-8",
            "21": "x-frame-options: SAMEORIGIN",
            "22": "x-frame-options: SAMEORIGIN",
            "23": "content-security-policy: default-src 'self' data: blob:; script-src 'self' 'sha256-PDCh5VeDfe/iHIJExhXDgKYK4CPkmuHfMskeNGTun5U=' 'sha256-tGCAy79zMW94DgRaBsZosm/7cizDEgOkLjOwt18lCGk=' 'sha256-Moqg3U+rgUW0c5F6kpcB8jsAlUY7xQEgDa74XSOmLj4=' 'nonce-onetrust-style' 'nonce-rAnd0m' https: data: blob: *.baml.com *.ml.com *.merrilledge.com *.bankofamerica.com *.bofa.com www.merrill.com vjs.zencdn.net bofa.demdex.net tags.tiqcdn.com bcbolt446c5271-a.akamaihd.net hlsak-a.akamaihd.net  bankofamerica.tt.omtrdc.net testdata.coremetrics.com analytics.twitter.com twitter.com www.facebook.com www.linkedin.com dc.ads.linkedin.com maps.googleapis.com fonts.googleapis.com 1359940.fls.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net adservice.google.com www.youtube.com www.google-analytics.com c.betrad.com www.googletagmanager.com api.company-target.com insight.adsrvr.org test.salesforce.com login.salesforce.com d.agkn.com  znczuxiczndmh7vpb-bankofamerica.siteintercept.qualtrics.com zn78njubwkodhg8ht-bankofamerica.siteintercept.qualtrics.com cdn.cookielaw.org geolocation.onetrust.com www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it; font-src 'self' https: *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com vjs.zencdn.net *.ml.com fonts.gstatic.com fonts.googleapis.com data:; style-src 'self' 'sha256-z3bpeRnijmdUWtkq+L2MmU0dKSQsB3GBSKmF6wcEKP0=' 'sha256-rOh4425QGt1UOiKgpZdfaA+GP2RJqCXbTGNSHxJm/9A=' 'sha256-yopbCHar2g/zfB7hKK6YnWWdKEFSVz6xoQoLKgqRgv4=' 'sha256-KxdIAY0X65VjqzYMz0Mb2p3/HcFIDzTvzevwJXBxoFU=' 'nonce-rAnd0m' 'nonce-onetrust-style' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com tags.tiqcdn.com cdn.cookielaw.org cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com fonts.googleapis.com; frame-src 'self' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com td.doubleclick.net www.googletagmanager.com 1359940.fls.doubleclick.net insight.adsrvr.org ct.pinterest.com match.adsrvr.org tr.snapchat.com www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it; connect-src 'self' *.bankofamerica.com *.bofa.com *.bac-assets.com *.ml.com cdn.cookielaw.org www.googleadservices.com www.google.com www.googletagmanager.com geolocation.onetrust.com privacyportal-bofa.my.onetrust.com www.google-analytics.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com maps.googleapis.com bat.bing.com insight.adsrvr.org ct.pinterest.com znczuxiczndmh7vpb-bankofamerica.siteintercept.qualtrics.com zn78njubwkodhg8ht-bankofamerica.siteintercept.qualtrics.com adobedc.demdex.net www.knotch-cdn.com units.knotch.it aq-sp-api.knotch.it pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com tr.snapchat.com api.company-target.com; worker-src 'self' blob:; media-src 'self' blob: *.baml.com *.ml.com *.merrilledge.com *.bac-assets.com *.bankofamerica.com *.bofa.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com data:; img-src 'self' *.baml.com *.ml.com *.merrilledge.com *.bac-assets.com *.bankofamerica.com *.bofa.com data: bat.bing.com googleads.g.doubleclick.net www.google.com cdn.cookielaw.org ad.doubleclick.net www.googletagmanager.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com cdnsecakmi.kaltura.com alb.reddit.com maps.gstatic.com maps.googleapis.com;",
            "24": "last-modified: Fri, 06 Mar 2026 05:00:56 GMT",
            "25": "etag: \"3b2c8-64c53f03fcd26-gzip\"",
            "26": "x-ua-compatible: IE=Edge",
            "27": "x-xss-protection: 1; mode=block",
            "28": "access-control-allow-credentials: true",
            "29": "x-content-type-options: nosniff",
            "30": "x-ua-compatible: IE=Edge",
            "31": "expires: Fri, 06 Mar 2026 09:00:15 GMT",
            "32": "cache-control: max-age=0, no-cache, no-store",
            "33": "pragma: no-cache",
            "34": "date: Fri, 06 Mar 2026 09:00:15 GMT",
            "35": "set-cookie: BIGipServerpool_about.bankofamerica.com_8443=!7PH31HBM1iFoYecXJP0ukTWD6KciQAi1RANi4Wyvzj0dSg4ZVbeo3XZq5pwj6sqNkWdthuQUzqLq9w==; path=/; Httponly; Secure",
            "36": "set-cookie: FPID=6599c989-c31f-4952-80df-f9cd7b9283bc:exp=1807347615; expires=Sat, 10-Apr-2027 09:00:15 GMT; path=/; domain=.bofa.com; secure; HttpOnly; SameSite=Lax",
            "37": "set-cookie: FPID_CLIENT=6599c989-c31f-4952-80df-f9cd7b9283bc; expires=Sat, 10-Apr-2027 09:00:15 GMT; path=/; domain=.bofa.com; secure; SameSite=Lax",
            "38": "strict-transport-security: max-age=31536000",
            "39": "x-bac-akm-c: ON"
        },
        "starttransfer_time_ms": 281.22
    }
}

{
    "tcp_connect_v4_80": "301 0.001548 0.008885",
    "tcp_connect_v4_443": "301 0.001826 0.196357"
}