When I log on to my Bank of America account I use
https://onlineid.bankofamerica.com/c...ller?state=TN. Notice that the URL begins with HTTPS, the S on the end is for a secure website. If it's not HTTPS I wouldn't log on, the next layer of security is your site picture. Sure looks like a phishing scam to me.