social media network

technology software

Swedish

gdpr_consent

euconsent

consent

_scid_r

_ScCbts

web_transaction_token

sc_cookie1

_gcl_au

_cfuvid

cookieconsent_status

gclid

_fbp

pubid_reference

_ga_14JYCHGYNE

_scid

You're looking at domain 'www.grantly.se' on the Swedish country-code top-level domain (.se); it also runs on subdomain 'www'. The registrable portion 'grantly' spans 7 characters split between 1 vowel and 6 consonants. Word splitting yields 2 words: grant, ly. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

html/4e/d7/4ed76994-54f1-4bd5-aac2-62c706818319_fallback.html.gz

Grantly | Privatlån

Loan-Amount

Loan-Period

email-2

phone-2

Accepts-Marketing-2

input-3

Ip-Form-Input

Web-Transaction-Token

User-Agent-Field

fbclid-2

gclid-2

param1

param2

param3

param4

param5

Country-Code

fbc-2

fbp-2

sc_click_id

wf-form-Step-1-Initial-Form-Submission

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef

default-src 'self' blob: *;script-src 'nonce-kWmQR9lo' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-K8s7PoHP' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-z1A5QITZ' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-f8MrtWKd' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-SvVnyATY' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-v0DegiIF' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

Blank

5d617d76b37c2cb83d9b874cef794c299236baae40bc39bf125a6599360c2a1f

2b51a2fde17d970821a0dd472517baf704cfcb2fa67260d77101e6f231134d64

01bbc5c91c95697e61fa17789154d8bc63886108e34fbc25f866d5dd796cf764

742e132f34053004ae03f7b294ac8fc991b847984157c68b6c9cc8cee99a61a1

cf4012855810edd80ff5404202e855e5c57f735d55131472105b51987d81cd35

81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee

9572466d3faec49458b8f12fea9c856d03965fcc1817853ec9abd7f6b5f03be4

9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26

7354456d6b977574c84f74bacaee86d1780139a7ff51150e1ba10b848662df82

4ed8d0055bf512f1f759505dd63573d93b7c99b6736b1a50c365f408ff7c1982

8ec4f6b9eb10c6262517c4167ae14bd1133da3372c5012574aa75d99b4dff5e2

25f11273a9efdebc9f9a95fe888bbccf2cefa254dd67f7423ee58b2f1cfb200b

e3d44906b1fc8b8d43eaaf73546a49446951bb2d6d962d85a0b6b77797f36a1b

25bdc482cf71a076f6ee20c49142257a88a6dd58b8950c277679589b84f639ea

5e01f8bcab09ec310ef89a663896e59c1c0be77edde95e8885d0b07a0d5630f7

ff5f4aba212f2be55c8816a2eb088fb5058fd27109b8d37b94c7d4032d132c70

3dc92a1a7dc80a2caf108540eef25300851607068d903777272f7ca22ec01b95

d7ba610864f55019010a006c2d14b01be139ce51d372894e7b992d5e7e9eaa62

f4509183327cfea771abd889bad6f2c5a0d7f2802a778dfa8aa8decbf7f2568f

1ec3e3f2fd9c3c68e0d8ac25d2a51d84f3f46e48acedad16f93bb8685c9d575f

1944d73d5dfefea0ff810a1ce71195c1ffb118acd01a5a26c23fdba9ab8b1424

577745da0e4c73531f12c67bbb7867c54dc6d1c95757a786d71688c95138c7f7

0f107f17de6c6dcf9b68c18cdfcbb262425c8d2422a8d78895fa95091de7b6a2

3a86bab4bfae8c36f178149c17fdac6f0eff943bb6f42a20eb8e303558c7ddd7

076f16f194b0b0bb8cd4bad4352aa9a7aa77476e76230547274df6564e5caf1f

e76d87dcfe33d130017d59a782c701ad6712f98c156369d4c6ab8ae7dce26721

Sveriges banker och långivare
Vi strävar efter att ge våra kunder de bästa möjliga förutsättningarna

Om konsumentlån
Ett konsumentlån är ett lån som du kan använda för det du själv vill. Det är ett lån

Låna upp till 600 000 kr. Ansök for ett lån idag. Det tar 2 minutter och du får besked samma dag.

description

twitter:card

viewport

WWqiBSPbYXCKwAHNZlnQ16vhUhHkcdEVepGq5F9wPf4

google-site-verification

generator

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

WebFont.load({  google: {    families: ["Merriweather:300,300italic,400,400italic,700,700italic,900,900italic"]  }});

!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o||o.DocumentTouch&&c instanceof DocumentTouch)&&(n.className+=t+"touch")}(window,document);

window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());gtag('set', 'developer_id.dZGVlNj', true);gtag('config', 'G-14JYCHGYNE');

!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';n.agent='plwebflow';n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,'script','https://connect.facebook.net/en_US/fbevents.js');fbq('init', '988865939067188');fbq('track', 'PageView');


/**
 * A/B Test Script for Form Sections
 * 
 * This script performs a 50/50 split test between two form sections:
 * - current_form (Control)
 * - sog_form (Variant)
 * 
 * The assignment is persisted based on web_transaction_token to ensure
 * users see the same form variant on return visits while the token is active.
 */

(function() {
    'use strict';

    // Configuration
    const CONFIG = {
        formIds: {
            current: 'current_form',
            sog: 'sog_form'
        },
        storageKey: 'grantly_ab_test_assignments',
        tokenTtl: 60 * 60 * 12 * 1000, // 12 hours in milliseconds (matching global.js)
        maxRetries: 50, // Maximum attempts to wait for token
        retryDelay: 100 // Milliseconds between retries
    };

    /**
     * Utility functions
     */
    const Utils = {
        /**
         * Get cookie value by name
         */
        getCookie(name) {
            const cookies = document.cookie.split(';');
            for (let cookie of cookies) {
                const [key, value] = cookie.trim().split('=');
                if (key === name) {
                    return value || '';
                }
            }
            return '';
        },

        /**
         * Get web_transaction_token from multiple sources
         * Compatible with the global.js token management system
         */
        getWebTransactionToken() {
            // Try URL parameter first
            const urlParams = new URLSearchParams(window.location.search);
            const urlToken = urlParams.get('web_transaction_token');
            if (urlToken) {
                return urlToken;
            }

            // Try cookie (primary source from global.js)
            const cookieToken = this.getCookie('web_transaction_token');
            if (cookieToken) {
                return cookieToken;
            }

            // Try localStorage (with expiration check)
            try {
                const storedToken = localStorage.getItem('web_transaction_token');
                const expiresAt = localStorage.getItem('web_transaction_token_expires_at');
                
                if (storedToken && expiresAt) {
                    const expirationTime = parseInt(expiresAt, 10);
                    if (expirationTime && expirationTime > Date.now()) {
                        return storedToken;
                    } else {
                        // Token expired, clean up
                        localStorage.removeItem('web_transaction_token');
                        localStorage.removeItem('web_transaction_token_expires_at');
                    }
                }
            } catch (e) {
                console.warn('⚠️ Failed to read token from localStorage:', e);
            }

            // Try sessionStorage (with expiration check)
            try {
                const storedToken = sessionStorage.getItem('web_transaction_token');
                const expiresAt = sessionStorage.getItem('web_transaction_token_expires_at');
                
                if (storedToken && expiresAt) {
                    const expirationTime = parseInt(expiresAt, 10);
                    if (expirationTime && expirationTime > Date.now()) {
                        return storedToken;
                    } else {
                        // Token expired, clean up
                        sessionStorage.removeItem('web_transaction_token');
                        sessionStorage.removeItem('web_transaction_token_expires_at');
                    }
                }
            } catch (e) {
                console.warn('⚠️ Failed to read token from sessionStorage:', e);
            }

            return '';
        },

        /**
         * Wait for web_transaction_token to become available
         * (in case global.js hasn't initialized yet)
         */
        async waitForToken() {
            let attempts = 0;
            
            while (attempts < CONFIG.maxRetries) {
                const token = this.getWebTransactionToken();
                if (token) {
                    return token;
                }
                
                attempts++;
                await new Promise(resolve => setTimeout(resolve, CONFIG.retryDelay));
            }
            
            console.warn('⚠️ web_transaction_token not found after waiting. Proceeding with empty token.');
            return '';
        },

        /**
         * Get all A/B test assignments from storage
         */
        getABTestAssignments() {
            try {
                const stored = localStorage.getItem(CONFIG.storageKey);
                if (stored) {
                    return JSON.parse(stored);
                }
            } catch (e) {
                console.warn('⚠️ Failed to read A/B test assignments:', e);
            }
            return {};
        },

        /**
         * Save A/B test assignment for a token
         */
        saveABTestAssignment(token, assignment, expiresAt) {
            try {
                const assignments = this.getABTestAssignments();
                
                // Clean up expired assignments
                const now = Date.now();
                Object.keys(assignments).forEach(key => {
                    if (assignments[key].expiresAt && assignments[key].expiresAt < now) {
                        delete assignments[key];
                    }
                });
                
                // Store new assignment
                assignments[token] = {
                    form: assignment,
                    expiresAt: expiresAt,
                    createdAt: Date.now()
                };
                
                localStorage.setItem(CONFIG.storageKey, JSON.stringify(assignments));
                console.log(`✅ Saved A/B test assignment for token ${token.substring(0, 20)}...: ${assignment}`);
            } catch (e) {
                console.warn('⚠️ Failed to save A/B test assignment:', e);
            }
        },

        /**
         * Get existing A/B test assignment for a token
         */
        getABTestAssignment(token) {
            if (!token) {
                return null;
            }

            const assignments = this.getABTestAssignments();
            const assignment = assignments[token];

            if (!assignment) {
                return null;
            }

            // Check if assignment is still valid
            if (assignment.expiresAt && assignment.expiresAt < Date.now()) {
                // Assignment expired, remove it
                try {
                    const assignments = this.getABTestAssignments();
                    delete assignments[token];
                    localStorage.setItem(CONFIG.storageKey, JSON.stringify(assignments));
                } catch (e) {
                    console.warn('⚠️ Failed to remove expired assignment:', e);
                }
                return null;
            }

            return assignment.form;
        },

        /**
         * Generate a random 50/50 assignment
         */
        generateRandomAssignment() {
            // Use token hash for consistent assignment if token exists
            // Otherwise use Math.random()
            return Math.random() < 0.5 ? 'current' : 'sog';
        },

        /**
         * Generate assignment based on token (deterministic)
         * This ensures the same token always gets the same assignment
         */
        generateAssignmentFromToken(token) {
            if (!token) {
                return this.generateRandomAssignment();
            }

            // Create a simple hash from the token
            let hash = 0;
            for (let i = 0; i < token.length; i++) {
                const char = token.charCodeAt(i);
                hash = ((hash << 5) - hash) + char;
                hash = hash & hash; // Convert to 32-bit integer
            }

            // Use hash to determine assignment (50/50 split)
            return Math.abs(hash) % 2 === 0 ? 'current' : 'sog';
        },

        /**
         * Show one form section and hide the other
         */
        showForm(formToShow) {
            const currentForm = document.getElementById(CONFIG.formIds.current);
            const sogForm = document.getElementById(CONFIG.formIds.sog);

            if (!currentForm && !sogForm) {
                console.warn('⚠️ Neither current_form nor sog_form found on page');
                return;
            }

            // Show the assigned form
            if (formToShow === 'current' && currentForm) {
                currentForm.style.display = '';
                currentForm.style.visibility = 'visible';
                console.log('✅ Showing current_form (Control)');
            } else if (formToShow === 'sog' && sogForm) {
                sogForm.style.display = '';
                sogForm.style.visibility = 'visible';
                console.log('✅ Showing sog_form (Variant)');
            }

            // Hide the other form
            if (formToShow === 'current' && sogForm) {
                sogForm.style.display = 'none';
                sogForm.style.visibility = 'hidden';
            } else if (formToShow === 'sog' && currentForm) {
                currentForm.style.display = 'none';
                currentForm.style.visibility = 'hidden';
            }
        }
    };

    /**
     * Main A/B Test Manager
     */
    const ABTestManager = {
        /**
         * Initialize the A/B test
         */
        async initialize() {
            console.log('🧪 Initializing A/B test for form sections...');

            // Wait for DOM to be ready
            if (document.readyState === 'loading') {
                document.addEventListener('DOMContentLoaded', () => this.runTest());
            } else {
                await this.runTest();
            }
        },

        /**
         * Run the A/B test
         */
        async runTest() {
            // Wait a bit for other scripts (like global.js) to initialize
            await new Promise(resolve => setTimeout(resolve, 100));

            // Get or wait for web_transaction_token
            const token = await Utils.waitForToken();

            if (!token) {
                console.warn('⚠️ No web_transaction_token available. Cannot assign A/B test variant.');
                // Still try to show one form by default (current_form)
                Utils.showForm('current');
                return;
            }

            // Get expiration time (12 hours from now, matching global.js)
            const expiresAt = Date.now() + CONFIG.tokenTtl;

            // Check if assignment already exists
            let assignment = Utils.getABTestAssignment(token);

            if (!assignment) {
                // Generate new assignment based on token (deterministic)
                assignment = Utils.generateAssignmentFromToken(token);
                
                // Save the assignment
                Utils.saveABTestAssignment(token, assignment, expiresAt);
                
                console.log(`🎲 New A/B test assignment: ${assignment} (50/50 split based on token)`);
            } else {
                console.log(`📋 Existing A/B test assignment retrieved: ${assignment}`);
            }

            // Show the assigned form
            Utils.showForm(assignment);
        }
    };

    // Initialize when script loads
    ABTestManager.initialize();

})();  


    window.dataLayer = window.dataLayer || [];    function gtag() {        dataLayer.push(arguments);    }    gtag("consent", "default", {        ad_personalization: "denied",        ad_storage: "denied",        ad_user_data: "denied",        analytics_storage: "denied",        functionality_storage: "denied",        personalization_storage: "denied",        security_storage: "granted",        wait_for_update: 500,    });    gtag("set", "ads_data_redaction", true);    gtag("set", "url_passthrough", false);

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-TVGMQCS3');


  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'G-14JYCHGYNE');



!(function(e,t,n){
  if(e.snaptr) return;
  var a=e.snaptr=function(){a.handleRequest?a.handleRequest.apply(a,arguments):a.queue.push(arguments)};
  a.queue=[];
  var s='script', r=t.createElement(s); r.async=!0; r.src=n;
  var u=t.getElementsByTagName(s)[0]; u.parentNode.insertBefore(r,u);
})(window,document,'https://sc-static.net/scevent.min.js');

snaptr('init', '636a9fd3-d1e0-407a-ba55-7108e213b4fe');  // no user_email
snaptr('track', 'PAGE_VIEW');



  // Auto-resize iframe based on content
  window.addEventListener('message', function(event) {
    if (event.data.type === 'EMBED_HEIGHT') {
      var iframe = document.getElementById('loan-form-iframe');
      if (iframe) {
        iframe.style.height = event.data.height + 'px';
      }
    }
  });


Requests	IP Address	Location	AS Autonomous System
38	104.18.160.117	Unknown	Unknown
12	35.190.43.134	Unknown	Unknown
12	142.250.181.227	Unknown	Unknown
9	104.18.161.117	Unknown	Unknown
8	142.250.185.104	Unknown	Unknown
8	157.240.0.35	Unknown	Unknown
5	216.239.34.36	Unknown	Unknown
5	185.158.133.1	Unknown	Unknown
4	157.240.0.6	Unknown	Unknown
2	127.0.0.1	Unknown	Unknown
119	56	-	-

Security Scan Report: www.grantly.se

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History