Site Health Report Card

bankofamerica.com

  • Bank of America
  • Finance · Banking
  • Online since 1997
  • Checked Sep 30, 2026

“Careful, sensible, and slightly formal.”

Pica's take. Bank of America keeps the doors locked and the guest list short, exactly as a bank should. The page is a little heavier than it needs to be, but nothing wobbles. Erica says hello.

A95 / 100

Overall health

#24 of 100 sites graded

  • Largest paint

    2.9s

  • Page weight

    3.9 MB

  • Requests

    115

  • Third-party scripts

    8

  • Domain age

    29 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

B
86

Solid, with a quibble or two.

Largest paint (LCP)
2.9s
First paint (FCP)
1.3s
Server response (TTFB)
300 ms
Layout shift (CLS)
0.05
Page weight
3.9 MB
Requests
115

Pica: Four megabytes. Cleared in one business day.

Run the Speed Test on bankofamerica.com

A look from the outside

Security Check

A+
100

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Strict
Mixed content
None
Third-party scripts
8

Pica: Strict policy, eight outside scripts. Vault on a time lock.

Run the Hack Check on bankofamerica.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
29 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 200 days
Lookalike domains
Plenty

Pica: Twenty-nine years online. Look twice at lookalikes.

Run the Tracker Check on bankofamerica.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Bank of America · own network
Content delivery
Akamai
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Bank of America properties
Flagged neighbors
0

Pica: Own network, Akamai at the door.

Run the TTFB Check on bankofamerica.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.