Independent SiteAuditLint analysis
SiteAuditLint crawled 100 URLs on bankofamerica.com. The findings center on links: 55 pages link to Bank of America subdomain pages that return 404, 63 pages link to internal URLs that redirect, and one mortgage link contains a literal [secure-env] placeholder that returns 404.
| Metric | Result |
|---|---|
| Pages crawled | 100 |
| Crawl time | 39s |
| Health score | 87 / 100 (Good) |
| Issue types detected | 26 |
| Critical / warnings / opportunities / info | 7 / 96 / 180 / 43 |
| Audit date | October 4, 2026 |
What stood out
Overall assessment
bankofamerica.com responds quickly: only 2 URLs exceeded one second, and none by more than 26 ms. 61 of 67 analyzed pages carry self-referencing canonicals, and all nine AI crawlers are allowed.
The link findings point to template and campaign maintenance. The /mortgage/home-mortgage/ page links to a URL containing the literal text [secure-env], a placeholder that was not replaced, and it returns 404. Separately, links to bettermoneyhabits, info, promotions and other bankofamerica.com subdomains returned 404 from 55 pages.
SiteAuditLint flagged 5 critical items as personal data in URLs. The parameter is phone=, and the values are Bank of America call center numbers used for campaign tracking, not customer data. The heading structure is the other recurring pattern, with two or three H1s on 36 pages.
Audit methodology
SiteAuditLint started from the website's homepage and crawled up to 100 URLs by following discoverable internal links and the URLs listed in the XML sitemap. Results represent the URLs reached during the crawl and do not constitute a complete audit of the entire website.
| Starting URL | https://bankofamerica.com/ |
|---|---|
| Crawl limit | 100 URLs |
| URLs crawled | 100 (70 HTML) |
| Crawl date | October 4, 2026, 18:01 UTC |
| Crawl duration | 39s |
| Crawl method | Homepage start, internal link and sitemap discovery, robots.txt respected, raw HTML analysis |
| Tool | SiteAuditLint Desktop SEO Crawler |
| Scope | Publicly accessible URLs reached during the crawl |
Technical SEO scorecard
Scores are the category scores SiteAuditLint calculates as part of its Site Health Score.
| Area | Score | Key finding |
|---|---|---|
| Overall health | 87 | Good rating from SiteAuditLint |
| Technical | 88 | Placeholder URL returns 404, 32 redirects |
| Content | 97 | 2 product pages under 70 words |
| Performance | 96 | 2 slow responses, 3 pages over 500 KB |
| AEO | 98 | All 9 AI crawlers allowed, no llms.txt |
Major findings
1. Link containing an unreplaced placeholder
HighFinding: https://www.bankofamerica.com/mortgage/home-mortgage/ links to a URL whose path contains the literal text [secure-env]. The URL returns 404.
Why it matters: An unreplaced template variable produces a broken link on a high-intent mortgage page. See status codes.
| URL | Result |
|---|---|
https://www.bankofamerica.com/mortgage/home-mortgage/[secure-env]/applynow/initialize-workflow.go?requesttype=SNR&flow=DMPQWELCOME | HTTP 404 |
Recommended fix: Fix the variable substitution so the link resolves to the secure application environment.
2. Links to subdomain pages returning 404
HighFinding: 55 pages link to bankofamerica.com subdomain URLs that returned 404, including bettermoneyhabits.bankofamerica.com credit articles, info.bankofamerica.com campaign pages and promotions.bankofamerica.com resources.
Why it matters: These are Bank of America's own properties, so the broken links point to retired or moved content. See broken link checker.
| URL | Broken target |
|---|---|
https://www.bankofamerica.com/ | info.bankofamerica.com/en/investing-with-merrill [404] |
https://www.bankofamerica.com/auto-loans/ | promotions.bankofamerica.com/autoloans/electricvehicleresources [404] |
Recommended fix: Update or remove links to retired subdomain pages, starting with the bettermoneyhabits credit links that appear on 15 pages.
3. Phone numbers in application URLs
LowFinding: 5 mortgage and home equity pages link to application URLs that include a phone= parameter, such as phone=8662904674.
Why it matters: SiteAuditLint flags phone numbers in URLs as potential personal data. These values are Bank of America call center numbers used for routing, so no customer data is exposed. The flag is useful as a check that no customer values ever enter this parameter.
| URL | Parameter |
|---|---|
https://www.bankofamerica.com/home-equity/ | phone=8662904674 |
https://www.bankofamerica.com/mortgage/closing-costs-calculator/ | phone=8664676492 |
Recommended fix: No change needed if the parameter only ever carries call center numbers.
4. Multiple H1 headings
MediumFinding: 36 pages contain more than one H1: 25 with two and 8 with three. Most are auto loan and mortgage content pages.
Why it matters: A single H1 makes the primary topic clear.
| URL | Evidence |
|---|---|
https://www.bankofamerica.com/auto-loans/car-buying-process/ | 2 H1 tags |
https://www.bankofamerica.com/auto-loans/buying-new-or-used-cars/ | 2 H1 tags |
Recommended fix: Convert secondary H1s in the content templates to H2s.
5. Links to redirecting internal URLs
LowFinding: 63 pages link to internal URLs that 301 redirect, including /sitemap/hub/signin.go, /contactus/contactus.go and /online-banking/iphone-banking-app.go.
Why it matters: Legacy .go URLs that redirect add a hop on every click.
Recommended fix: Update shared footer and header links to their final URLs.
6. Images missing alt text
LowFinding: 33 pages contain images without alt attributes, including 4 of 33 on the homepage.
Why it matters: Alt text describes images to screen readers, which matters for an accessible banking site.
Recommended fix: Add alt text to content images and empty alt attributes to decorative ones.
What's working well
- Only 2 responses exceeded 1 second, by at most 26 ms.
- 61 pages carry self-referencing canonicals, and locale parameter URLs canonicalize to clean versions.
- No 5xx responses across 100 URLs.
- All nine AI crawlers are allowed.
- No missing titles or missing meta descriptions.
- No mixed content or missing HSTS.
Priority fixes
- Fix the [secure-env] placeholder linkMortgage application path. Pages affected: 1
- Clean up links to retired subdomain pages55 pages. Pages affected: 55
- Reduce extra H1s in content templates36 pages. Pages affected: 36
- Point shared links to final URLs63 pages. Pages affected: 63
- Add alt text to images33 pages. Pages affected: 33
Crawl data
| Metric | Result |
|---|---|
| URLs crawled | 100 |
| HTML pages | 70 |
| 2xx responses | 67 |
| 3xx redirects | 32 |
| 4xx responses | 1 |
| 5xx responses | 0 |
| Missing titles | 0 |
| Missing meta descriptions | 0 |
| Multiple H1s | 36 |
| Self-referencing canonicals | 61 |
| Noindex | 2 |
| Pages linking to broken external URLs | 55 |
| Pages with images missing alt | 33 |
| Slow responses (over 1,000 ms) | 2 |
| AI crawlers allowed | 9 of 9 |
On-page counts (titles, descriptions, headings, canonicals) are measured across the 67 URLs that returned an HTML page with a 200 status.
Audit limitations
The crawl was limited to 100 URLs and started from the homepage, so only URLs discovered through internal links and the XML sitemap are represented. A 100-URL crawl does not represent the entire website. Findings reflect the site at the time of the crawl on October 4, 2026. SiteAuditLint analyzed the HTML returned by the server, so content added later by JavaScript and responses that differ for automated clients may not match what a browser shows. This audit evaluates technical observations, not overall business or search performance.
SiteAuditLint reported no analytics or tag manager in the raw HTML. Tracking loaded by scripts after the initial response would not appear in this check, so that result is not treated as a finding here.
This is an independent SiteAuditLint analysis of publicly accessible pages. It was not requested or endorsed by Bank of America, and it does not imply that Bank of America uses SiteAuditLint.