HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 20:35:31 GMT
X-Frame-Options: SAMEORIGIN
Cache-Control: no-store, max-age=1
Location: https://www.bankofamerica.com/?TYPE=33554433&REALMOID=06-000aea23-f082-1f06-b383-082c0a2840b5&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=-SM-Aozvcgyma8RplVH%2b8S6WlYV1Rj%2fuK51Fl1d3cfn%2b1bprEdWbD4PxjMzaY%2bYiJydB&TARGET=-SM-https%3a%2f%2fsecure--darkpod%2emerrilledge%2ecom%2f
Expires: Fri, 26 Apr 2024 20:35:32 GMT
Content-Length: 486
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SPID=Q2S2; Path=/; Domain=.merrilledge.com; samesite=None; Secure
Set-Cookie: SID=0021B0E07900662C1013; Path=/; Domain=.merrilledge.com; samesite=None; Secure
Set-Cookie: TS01e36e03=017de87c01c722acabb58c1f3c9f705a05b96beccc6fc592a9822766e91c174c326956788533edf937dacff761346d85ad228b9204; Path=/; Domain=.secure-darkpod.merrilledge.com
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: wss: data: blob:; script-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com fsa.merrilledge.com merrilledge.com s3.amazonaws.com boa-api.arkoselabs.com cdn.cookielaw.org resources.digital-cloud.medallia.com players.brightcove.net metrics.brightcove.com cdnapisec.kaltura.com tags.tiqcdn.com akamai.tiqcdn.com glance.net beta.glancecdn.net storage.glancecdn.net cct.google cdn.mplxtms.com cdn.tt.omtrdc.net data.cmcore.com data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com secure-cdn.mplxtms.com convertro.com stage.convertro.com idsync.rlcdn.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com www.glancecdn.net www.google-analytics.com maps.googleapis.com www.googletagmanager.com mboxedge34.tt.omtrdc.net anrdoezrs.net cj.dotomi.com cj.com cj.mplxtms.com emjcd.com mczbf.com sjwoe.com secure-cdn.mplxtms.com cdn.mplxtms.com bofa.demdex.net cdnstorage.myglance.net bankofamerica.tt.omtrdc.net www.paypalobjects.com cdn-bofa.myglance.net six.cdn-net.com vjs.zencdn.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' data: blob: *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org glance.net beta.glancecdn.net storage.glancecdn.net convertro.com stage.convertro.com idsync.rlcdn.com www.glancecdn.net cdnstorage.myglance.net www.google-analytics.com cdn-bofa.myglance.net resources.digital-cloud.medallia.com 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.bankofamerica.com *.ml.com;
X-Serviced-By: g8xhzg73QjjzqNxb3UmeKQ==--DszZ8KF0NMqbPd6c2Ule3w==
Server: Oops

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:74:f5:d8:32:ce:67:40:e3:28:bc:4f:cf:c4:f0:fe
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2014 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M
        Validity
            Not Before: Mar 28 18:06:47 2024 GMT
            Not After : Apr 28 18:06:45 2025 GMT
        Subject: C=US, ST=Illinois, L=Chicago/jurisdictionC=US/jurisdictionST=Delaware, O=Bank of America Corporation/businessCategory=Private Organization/serialNumber=2927442, CN=secure.bankofamerica.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:2c:3e:d7:a0:ba:f4:cd:de:4d:eb:5e:c7:
                    25:dd:7e:81:f8:8f:1b:73:81:e9:13:d2:e1:f8:87:
                    1f:31:29:34:de:1a:71:ea:65:e2:dc:d6:2e:64:25:
                    ff:c4:ed:e6:fc:2d:9e:83:96:e5:35:4c:a5:84:4a:
                    a1:5d:ba:5a:54:b8:4d:39:9d:e5:b4:96:19:4a:cd:
                    a8:32:39:99:0c:66:c8:8a:89:33:40:79:db:b2:dc:
                    5f:88:91:76:51:8f:62:07:98:3b:af:9a:4e:32:48:
                    4c:bb:21:c7:7f:f4:84:61:af:47:48:8c:84:ce:03:
                    d4:1e:3a:69:bd:3d:0b:ea:07:57:6b:a0:3c:8f:f7:
                    13:7f:5a:66:e9:63:50:aa:c8:f1:31:9a:f1:96:ad:
                    ee:44:06:7a:71:2a:3d:87:e1:b1:ea:32:b5:17:82:
                    86:06:a9:96:e3:83:77:67:99:cc:b9:18:63:ab:00:
                    9b:87:09:a6:e9:db:e6:75:f3:6f:b8:08:79:c4:12:
                    eb:90:6c:d8:ac:95:5c:06:f0:0f:e0:92:89:a7:37:
                    8d:66:f3:5f:62:08:fb:1b:3c:2b:75:0d:75:19:09:
                    02:b4:a9:e6:fb:d7:92:37:71:57:3a:bb:d4:f9:cd:
                    b2:d0:55:ff:31:6b:ee:d4:d9:e3:f6:04:65:87:cf:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                9B:26:66:8F:5B:66:70:00:FB:74:90:DD:21:B7:3C:6F:4F:10:B7:EF
            X509v3 Authority Key Identifier: 
                C3:F7:D0:B5:2A:30:AD:AF:0D:91:21:70:39:54:DD:BC:89:70:C7:3A
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1m-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1m.crl
            X509v3 Subject Alternative Name: 
                DNS:secure.bankofamerica.com, DNS:secure-darkpod.bankofamerica.com, DNS:secure.fs.ml.com, DNS:secure-darkpod.fs.ml.com, DNS:secure.fs.ustrust.com, DNS:secure-darkpod.fs.ustrust.com, DNS:secure.benefits.ml.com, DNS:secure-darkpod.benefits.ml.com, DNS:secure.accountmanagement.baml.com, DNS:secure-darkpod.accountmanagement.baml.com, DNS:secure-darkpod.merrill.com, DNS:secure-darkpod.merrilledge.com, DNS:secure-darkpod.ml.com, DNS:secure-darkpod.mymerrill.com, DNS:secure.merrill.com, DNS:secure.merrilledge.com, DNS:secure.ml.com, DNS:secure.mymerrill.com, DNS:tpcm-portal.bankofamerica.com, DNS:secure.privatebank.bankofamerica.com, DNS:secure.accountmanagement.bofa.com, DNS:secure.pod2.rvc.ecomm.bankofamerica.com, DNS:secure.pod1.rvc.ecomm.bankofamerica.com, DNS:secure.pod2.wyn.ecomm.bankofamerica.com, DNS:secure.pod1.wyn.ecomm.bankofamerica.com, DNS:secure.pod2.chd.ecomm.bankofamerica.com, DNS:secure.pod1.chd.ecomm.bankofamerica.com, DNS:secure.goalmanagerportal.ml.com, DNS:secure-darkpod.goalmanagerportal.ml.com, DNS:secure.econtribs.ml.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.16.840.1.114028.10.1.2
                  CPS: https://www.entrust.net/rpa
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar 28 18:06:47.245 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C7:81:B0:63:B9:E8:9D:85:EA:21:9D:
                                9A:BE:30:48:73:F5:0C:9D:CC:22:63:C3:EF:0E:40:4F:
                                73:CC:C4:94:6F:02:21:00:BF:2C:AB:F9:62:E0:51:9B:
                                58:10:F4:21:4E:5D:CA:9F:CB:D2:6C:71:95:3C:DE:BC:
                                E7:DF:C0:D1:EB:73:F7:C3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 28 18:06:47.282 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B8:0D:04:B9:53:E5:D0:A5:94:B0:5D:
                                89:F4:CF:05:F0:68:31:FA:A3:82:FF:19:A2:52:89:88:
                                11:E8:18:DD:8B:02:21:00:AE:10:0F:FA:C3:1D:39:D3:
                                9D:55:CD:BC:52:F3:4C:90:6B:81:56:C3:37:FB:2C:79:
                                B6:F5:63:5E:C9:56:7C:12
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 28 18:06:47.357 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:16:99:3D:BC:A6:B4:C8:F5:17:C4:97:36:
                                11:F9:B6:52:1E:12:0D:65:95:C9:56:05:F5:FE:79:12:
                                01:51:FC:12:02:21:00:97:29:0D:C9:4E:75:24:1C:10:
                                55:C6:77:29:30:BD:D3:95:F2:FC:0E:88:8B:23:7D:2B:
                                C5:88:5C:3F:EF:03:07
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9c:64:75:45:12:1d:ec:ff:ec:56:dd:a5:77:3a:d0:79:a6:8e:
        a3:be:98:ca:9d:ad:75:29:1c:1b:15:a8:99:c9:9d:a5:59:fa:
        04:c9:7d:a7:62:64:3c:fe:8f:11:a1:53:9f:2c:d1:25:03:d8:
        21:4b:46:57:dc:69:b4:40:0c:1e:5b:bf:6d:1d:12:39:40:9c:
        04:0b:95:c8:73:9e:83:3d:ac:da:76:0a:66:09:44:93:c4:f4:
        79:66:8b:b7:27:c4:ef:90:05:6f:6a:8b:4f:31:6d:ae:6d:dd:
        8a:1f:1a:8f:7d:e3:34:c9:d5:eb:38:fb:d9:71:3a:df:50:7d:
        ac:03:fe:e6:8a:91:cd:78:b9:a9:bf:5f:68:28:34:30:b7:1b:
        04:ff:2d:26:3b:02:36:e1:ff:b7:ad:fe:62:cc:29:56:01:6c:
        99:d5:40:14:a6:c3:b3:d2:52:33:3e:54:7a:6b:86:e2:f7:81:
        d5:cf:af:de:5c:a2:28:24:77:72:5b:2b:b1:ae:39:1f:65:de:
        17:47:98:4c:8d:3d:bf:ec:53:bb:b4:64:f5:84:99:12:98:85:
        d6:00:f9:87:61:1e:3a:41:e9:98:b5:d3:1f:21:e4:47:cf:7d:
        3d:ec:e4:da:1f:37:96:cc:3c:7d:d1:8c:02:dc:46:44:6c:05:
        cc:42:6c:8a