Bankofamerica.com - Museums.bankofamerica.com

server: AkamaiGHost
content-length: 0
location: https://about.bankofamerica.com/en-us/what-guides-us/arts-and-culture.html
date: Sun, 14 Dec 2025 22:08:02 GMT
set-cookie: FPID=a2a4065f-be29-4dcc-8fe0-c12edd760470:exp=1800310082; expires=Mon, 18-Jan-2027 22:08:02 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax
set-cookie: FPID_CLIENT=a2a4065f-be29-4dcc-8fe0-c12edd760470; expires=Mon, 18-Jan-2027 22:08:02 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax
strict-transport-security: max-age=31536000
x-bac-akm-c: ON

HTTP/2 301 
content-type: text/html; charset=iso-8859-1
content-length: 275
server: Apache
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
location: http://about.bankofamerica.com/en/making-an-impact/arts-and-culture
x-ua-compatible: IE=Edge
x-xss-protection: 1; mode=block
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Sun, 14 Dec 2025 22:08:03 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 14 Dec 2025 22:08:03 GMT
set-cookie: BIGipServerpool_about.bankofamerica.com_8443=!34XrDCoHFWMjiogXJP0ukTWD6KciQFltQC388AsVUxpecHOC9HFEr5h9xp+QZmFsfHqa1ZbN6H0gDw==; path=/; Httponly; Secure
set-cookie: FPID=1f7b6e6b-f633-4508-95b8-5db4922a7705:exp=1800310082; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax
set-cookie: FPID_CLIENT=1f7b6e6b-f633-4508-95b8-5db4922a7705; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax
strict-transport-security: max-age=31536000
x-bac-akm-c: ON

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://about.bankofamerica.com/en/making-an-impact/arts-and-culture
Expires: Sun, 14 Dec 2025 22:08:03 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 14 Dec 2025 22:08:03 GMT
Connection: keep-alive
Set-Cookie: FPID=7de2d210-565f-458a-a7f4-c01f7f62e4ba:exp=1800310083; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax
Set-Cookie: FPID_CLIENT=7de2d210-565f-458a-a7f4-c01f7f62e4ba; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax
X-BAC-AKM-C: ON

HTTP/2 200 
content-type: text/html; charset=UTF-8
content-length: 34713
server: Apache
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' https: wss: data: blob:;     script-src 'self' 'sha256-BIu6sFl29YJiC2d5vWeELsUxqREVSNk0sEywFIXk0tU=' 'sha256-N9B/dBqUFVgx0MhP6IjJu+0kY6DGxhfrAY67TTwhuN4=' 'sha256-yVYwWHzC0qfT0D50Sz/WwLXaw5nu4b+DgRCd2tyUA6M=' 'sha256-tyTeWN5a17+KNOFel5zocpweVv9ppY2PBcluSsT3DxY=' 'sha256-V4SIAth5HbnjzlS0X2vUK+RUAJFGSkShbS2qHwD3Xso=' 'sha256-lHzX/imVe3NgLfvMdfHZdZN0L0VFqbo4pHhphl3Cyog=' 'nonce-rAnd0m' 'nonce-onetrust-style' *.bankofamerica.com *.ml.com institute1.bofa.com www.ustrust.ml.bac-assets.com www1.bac-assets.com c.betrad.com api.company-target.com cdn.cookielaw.org data.coremetrics.com iocdn.coremetrics.com libs.coremetrics.com mc.coremetrics.com mcdata.coremetrics.com mktgcdn.coremetrics.com recs.coremetrics.com test.coremetrics.com testdata.coremetrics.com tmscdn.coremetrics.com dpm.demdex.net 1359940.fls.doubleclick.net www.glance.net storage.glancecdn.net www.glancecdn.net www.myglance.net cobrowse-location.glance.net s1056.glance.net www-bofa.myglance.net cdn-bofa.myglance.net cdnstorage.myglance.net  googleads.g.doubleclick.net stats.g.doubleclick.net www.facebook.com adservice.google.com cct.google.com www.google.com www.googleadservices.com www.google-analytics.com maps.googleapis.com www.googletagmanager.com maps.gstatic.com dc.ads.linkedin.com etui.fs.ml.com rg.ml.com bankofamerica.tt.omtrdc.net cdn.tt.omtrdc.net mboxedge34.tt.omtrdc.net akamai.tiqcdn.com tags.tiqcdn.com analytics.twitter.com vjs.zencdn.net cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com geolocation.onetrust.com assets.adobedtm.com;     style-src 'self' 'sha256-BL8na+ZRQVzA1f82ofdBcYAY1MLWLLFQ9/VHxRpO6M8=' 'sha256-YCzV3mrpLJ070nBLhlpQqNoDrtH+0KXbP+vzCNK92D8=' 'nonce-rAnd0m' 'nonce-onetrust-style' *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com fonts.googleapis.com tags.tiqcdn.com;     font-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com https: vjs.zencdn.net fonts.gstatic.com fonts.googleapis.com data:;     img-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com data: googleads.g.doubleclick.net www.google.com cdn.cookielaw.org cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com cdnsecakmi.kaltura.com maps.gstatic.com maps.googleapis.com www.google-analytics.com ad.doubleclick.net;     frame-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com td.doubleclick.net www.googletagmanager.com 1359940.fls.doubleclick.net;     connect-src 'self' *.bankofamerica.com *.bac-assets.com *.ml.com cdn.cookielaw.org www.googleadservices.com www.google.com geolocation.onetrust.com privacyportal-bofa.my.onetrust.com www.google-analytics.com cdnapisec.kaltura.com analytics.kaltura.com cfvod.kaltura.com maps.googleapis.com adobedc.demdex.net api.company-target.com;     worker-src 'self' blob:;
last-modified: Sun, 14 Dec 2025 22:03:59 GMT
etag: "32662-645f0abf926e3-gzip"
accept-ranges: bytes
content-encoding: gzip
x-ua-compatible: IE=Edge
x-xss-protection: 1; mode=block
access-control-allow-credentials: true
x-content-type-options: nosniff
x-ua-compatible: IE=Edge
expires: Sun, 14 Dec 2025 22:08:03 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 14 Dec 2025 22:08:03 GMT
vary: Accept-Encoding
set-cookie: BIGipServerpool_about.bankofamerica.com_8443=!lr4HdUIM/BmbLokXJP0ukTWD6KciQIK5uzXuPTMXFydbyAbkwbVy5lgtkAuNwHZb1bqXtaRiuj7USg==; path=/; Httponly; Secure
set-cookie: FPID=78d2d7bf-6852-4a1d-86c8-113d6b3ea354:exp=1800310083; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; HttpOnly; SameSite=Lax
set-cookie: FPID_CLIENT=78d2d7bf-6852-4a1d-86c8-113d6b3ea354; expires=Mon, 18-Jan-2027 22:08:03 GMT; path=/; domain=.bankofamerica.com; secure; SameSite=Lax
strict-transport-security: max-age=31536000
x-bac-akm-c: ON