GET /consent/64af94a0-1d18-480d-8fd5-47286c4308bd/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:57 GMT
content-type: application/javascript
cf-ray: 959e33b3d91ab4fd-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 17502
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DDA449D9A82535
expires: Sat, 05 Jul 2025 11:14:57 GMT
last-modified: Thu, 05 Jun 2025 15:58:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot
content-md5: Lp8+E9ExCWSxi3i1qquljA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 064cec8b-601e-0053-0d32-d68f85000000
x-ms-version: 2009-09-19
x-onetrust-isbot: false
cross-origin-resource-policy: cross-origin, cross-origin
server: cloudflare
X-Firefox-Spdy: h2

GET /pill.svg HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Thu, 05 Jun 2025 10:04:18 GMT
Accept-Ranges: bytes
ETag: "03d35331d6db1:0"
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:57 GMT
Content-Length: 925

GET /scripttemplates/202505.1.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securemsg.bankofamerica.com/
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: application/json
content-length: 2706
content-encoding: gzip
content-md5: 0SdaL0SpFAP8dHBVlNrpww==
last-modified: Tue, 17 Jun 2025 03:21:48 GMT
etag: 0x8DDAD4E18B2CBD0
x-ms-request-id: 6a329dfc-d01e-00e0-6e97-df7502000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 17503
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33b9f9abb4fd-OSL
X-Firefox-Spdy: h2

GET /scripttemplates/202505.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securemsg.bankofamerica.com/
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: text/css
content-md5: dIH5shy27L66mhu4/gDB5Q==
last-modified: Tue, 17 Jun 2025 03:21:58 GMT
x-ms-request-id: 73f7ffe9-b01e-0037-6852-df3f25000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 17503
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33b9f9bab4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /logos/9b1b72d0-06ef-4e7c-9b2a-e8bc09f34daf/5a21514a-3b71-4677-b52d-207b6f11ff68/fceb4368-db91-43cf-af24-36ac5b5badc2/BOA.PNG HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: image/png
content-length: 71361
content-md5: jvB7VcShVhyScfVwMaUaWQ==
last-modified: Thu, 13 Oct 2022 13:50:15 GMT
etag: 0x8DAAD21DBA3A72F
x-ms-request-id: 9719aeac-d01e-00e0-5f81-5a7502000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 32883
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 959e33ba7a82b4fd-OSL
X-Firefox-Spdy: h2

GET /pe.css HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 05 Jun 2025 10:04:18 GMT
Accept-Ranges: bytes
ETag: "03d35331d6db1:0"
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:56 GMT
Content-Length: 610

GET /consent/64af94a0-1d18-480d-8fd5-47286c4308bd/64af94a0-1d18-480d-8fd5-47286c4308bd.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:57 GMT
content-type: application/json
cf-ray: 959e33b76dadb4fd-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 17502
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DDA449D9883DF1
expires: Sat, 05 Jul 2025 11:14:57 GMT
last-modified: Thu, 05 Jun 2025 15:58:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot
content-md5: n8HNX3e4W4OWj/AMCGsQ9Q==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: b85eb5b0-301e-00c3-4632-d61ac9000000
x-ms-version: 2009-09-19
x-onetrust-isbot: false
cross-origin-resource-policy: cross-origin, cross-origin
server: cloudflare
X-Firefox-Spdy: h2

GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:57 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 959e33b81bd80b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:57 GMT
Content-Length: 1245

GET /scripttemplates/202505.1.0/assets/v2/otPcTab.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securemsg.bankofamerica.com/
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: application/json
content-length: 13717
content-encoding: gzip
content-md5: bxir9OX3ZXTEbQ+ucObEog==
last-modified: Tue, 17 Jun 2025 03:21:50 GMT
etag: 0x8DDAD4E19C503E2
x-ms-request-id: fd9fec4c-701e-00ed-1297-df9a0e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 17503
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33b9f9b3b4fd-OSL
X-Firefox-Spdy: h2

GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Thu, 03 Jul 2025 19:12:25 GMT
x-ms-request-id: 2ae78e06-501e-0014-4186-ec50ee000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 18883
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33ba6a68b4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Thu, 03 Jul 2025 19:12:26 GMT
x-ms-request-id: 6a152a6c-601e-0058-7350-ec97f1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 13508
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33ba7a8cb4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /bofa_lo1_rgb.svg HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Encoding: gzip
Last-Modified: Thu, 05 Jun 2025 10:04:18 GMT
Accept-Ranges: bytes
ETag: "03d35331d6db1:0"
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:57 GMT
Content-Length: 4309

GET /pe.css HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 05 Jun 2025 10:04:18 GMT
Accept-Ranges: bytes
ETag: "03d35331d6db1:0"
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:57 GMT
Content-Length: 610

GET /scripttemplates/202505.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Referer: https://securemsg.bankofamerica.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: application/javascript
content-length: 121335
content-encoding: gzip
content-md5: NAZ3glRN8wQbxaNJl4xrXg==
last-modified: Tue, 17 Jun 2025 03:21:54 GMT
etag: 0x8DDAD4E1BF46436
x-ms-request-id: 3d952eca-601e-00d0-4997-df2f28000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 17503
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33b8efd5b4fd-OSL
X-Firefox-Spdy: h2

GET /consent/64af94a0-1d18-480d-8fd5-47286c4308bd/019740c8-7173-783a-b701-b82091f8fb1d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securemsg.bankofamerica.com/
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: application/json
cf-ray: 959e33b9a91db4fd-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 17503
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DDA449D9E7CCF1
expires: Sat, 05 Jul 2025 11:14:58 GMT
last-modified: Thu, 05 Jun 2025 15:58:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot
content-md5: WM/NE2DD7cuqUWabpbBVSQ==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c4b04bba-e01e-00c1-1633-d61833000000
x-ms-version: 2009-09-19
x-onetrust-isbot: false
cross-origin-resource-policy: cross-origin, cross-origin
server: cloudflare
X-Firefox-Spdy: h2

GET /index.html HTTP/1.1
Host: securemsg.bankofamerica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Thu, 05 Jun 2025 10:04:18 GMT
Accept-Ranges: bytes
ETag: "03d35331d6db1:0"
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' cdn.cookielaw.org *.onetrust.com;script-src 'self' 'unsafe-inline' cdn.cookielaw.org geolocation.onetrust.com;style-src 'self' 'unsafe-inline' cdn.cookielaw.org;img-src 'self' data: https://cdn.cookielaw.org/; frame-ancestors 'self'
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Fri, 04 Jul 2025 11:14:56 GMT
Content-Length: 1654

GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://securemsg.bankofamerica.com/
Origin: https://securemsg.bankofamerica.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 04 Jul 2025 11:14:58 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Wed, 02 Jul 2025 19:06:25 GMT
x-ms-request-id: 486f45bb-d01e-00a4-04f9-eba96e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 17503
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: cloudflare
cf-ray: 959e33ba8aa5b4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2