finance banking

real estate property

government public service

documentation technical

adult content

Swedish

stg_last_interaction

JSESSIONID

The domain name 'www.sbab.se' uses the Swedish country-code top-level domain (.se) with subdomain 'www'. The registrable portion 'sbab' spans 4 characters containing 1 vowel alongside three consonants. It segments into 2 words: s, bab. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

realEstateMarketValue

currentLoanAmount

isIncreasingLoanAmount

mortgage-refinance-form

html/81/ea/81ea9b6b-39ec-4829-8dca-1f2acca4ccf8.html.gz

default-src 'self'; child-src blob:; object-src 'none'; worker-src 'self' blob:; font-src 'self' data: sbab.containers.piwik.pro maxcdn.bootstrapcdn.com fonts.gstatic.com; connect-src 'self' *.sbab.se sbab.containers.piwik.pro sbab.piwik.pro *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net api.openweathermap.org sbab.boost.ai *.boost-ai-ck8s.com *.youtube.com *.youtube-nocookie.com api.teamtailor.com sbabpodden.libsyn.com *.pod.space translate.googleapis.com panelista.com *.scw.cloud *.contentsquare.net *.contentsquare.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' sbab.containers.piwik.pro track.adform.net *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net sbab.boost.ai *.boost-ai-ck8s.com code.jquery.com cdn.jsdelivr.net panelista.com *.scw.cloud *.contentsquare.net *.contentsquare.com cdn.samhub.io ; style-src 'self' 'unsafe-inline' bloggen.sbab.se sbab.containers.piwik.pro maxcdn.bootstrapcdn.com code.jquery.com fonts.googleapis.com panelista.com *.scw.cloud *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net ; img-src 'self' data: *.sbab.se sbab.containers.piwik.pro sbab.piwik.pro track.adform.net *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net bilder.hemnet.se *.egnahemsbolaget.se *.riksbyggen.se *.hemverket.se *.bosthlm.se *.boneo.se *.maklarringen.se *.jagholm.se cdn.maklarhuset.se cdn.objektpresentation.se dev.cdn-budid.se cdn-budid.se s3-kna1.citycloud.com *.blob.core.windows.net *.s3.eu-west-1.amazonaws.com panelista.com *.scw.cloud images.teamtailor-cdn.com cdn.hittamaklare.se *.contentsquare.net *.track.samhub.io ; frame-src 'self' blob: *.youtube.com *.youtube-nocookie.com *.pod.space *.libsyn.com panelista.com *.scw.cloud open.spotify.com csxd.sbab.se csxd.secure.sbab.se ; frame-ancestors 'self' *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net; report-uri https://2f3789b699fa5d9cd886dbb0df0debac.report-uri.com/r/t/csp/reportOnly

application/x-www-form-urlencoded; charset=utf-8

007717bb08c1fe3b800170302cf0a9c319cc07638cdd51f885e24df33924731d

d72e8ec07ef29cc242ffcad2750df467c90dcea357218839978bb3a855da1d48

a048af3a6ea1e8b5b5501583e7e4e9003f7b386823f110e557fc34950fb59c44

6229599d4ef01c052cf28b7973fdf1b42da9eaafed44616107cb4b286f17a104

4ff26ad6e99d6c04aba309e09429b177153791b65550121d4365ea54415f4bab

76612860fba352c816492af3e1990747737a8431fd09c62d2512f076283ac99c

44363e57edcc6209199609c22bbbc991e09c55bdd5a79bf2f781fdc56bf95247

8e7b2c4b6b7d639f72b2ad8e64155032f8492e053f47e900664600036d352027

d67ffca3f19007df11f93a810f72d868ffa6e6971ad62de664a05d8164888566

c2a66b700a36da308fd9f9b893ca064c14d62bacff615a2398c93e0c9bf37bbe

7fac840e3dfbbf62e5a2887e4ae869d9140985dc95398536a6aee2f98ca6cdf3

5309ca3e99da2e0fa0de2575ea750847db37fd4f4f1dbbda2a513268c702ace3

7c5b879cc68883c0c862e3b073607244b81c82504f601467500b7d383ee51774

71fd67a72ad0a14063b5a5a55d26c8b7cac249aacd7f8c763cf8301e624aacb5

3267329772df9a5cee63c3d3d3e9cf278eea127e0e078bdcc7083afeac6885c8

06734e9035b73ba5b7667598b880c0fb301b44bb011932a1bfab63094870d53a

8074d47b5fc9e9bdcb9656d4f775b9ce839efd9060c3640ed434bfa1f88ba94d

2ba54c034f366d04de231d6f9ff77bc221a3d99e4f8b0691d2235626ef7d720c

2ee13e9a3e096f8488a8dad8a7f35041828518a65009d828a9cea73ba46a55ab

51c781dda325c0ba5ba31b3d3e2657d9fa55996047e88ef6a4fe333cff43f700

8dcaab7dea8bd4f1056a820bf112272a694a87420a987e809989f1ee5db2ca21

866fad541f13ec7966b34344a74710adf8db5680c6e5ef33b50cce870f59f098

b982bb62b014f0ef65303ca6579cc31de096bd710dde4fa441f2c82d530b21f0

b92f0cf0c13cf20c9eed66e05bac988c6498cc1cf4aa5f394ff94d46a149e12c

ec81ccc463cb9e0ee46283d7d599acf481edca623d3f3a6a359cb771dd703035

07f414c7f37d5f7feaca6ef28db5f1cb476b7e9b698ac85f586686fc9ee67b81

2f441785f09485b06e90335d1a6451fe1d79b10a4a96003775ca592a6cdd6701

9fc4d48957cdc102572045ac4242e9fa44c8ca307854099a6f63239ab7cb83bf

306697d1b3f2364e32bf03752efbc86007b24d3beec890dec2ecd1775b1ad5e6

efe96d0185aef2e0867d34c5bdaf31a6061769b1011cf9a38abab02385f970dd

20214b8d588b9ff33fb3a938333d57c09ec96f6ac80e103570c68a079980bd6a

e69e641d3301805b5f5c6efba3bb613e488146a34438b0d5ea66784157afc75e

68a7e013d1721be15932c4d7db0a0d33f1a7cdea125338a60fcbe71c3e39dba3

1f72759d4fccd6bdda590b94797c66040e06a695f3941bf70cd09997a9fd0a1c

e033ed05d24bfe636927b73055f146d084a3e6b0414f90f78c3812bd598931dc

10cb63fbfe321a2ec3b9b521d9ea22f67596a7852dd08b66cf7d53b39caf2a13

9abd4cbc779767153f5d87a26c93d677b7d7486b73e80c748088317fcfb44c76

07e663ab6e14a630ce401d18ecd13ce6bf0a4049041f4c7f3dbf60d0daaed895

b06183031f2b1b3fdb0c8a729a57e4fa3ef576d65fd49532fa275ac9d8d645a0

bde41ddfcee61fbae4d18e0fe2b1d483a4aa6cf55142fa1d75121aa2eca52ac6

251b9e5af8366222e66e16235de729793694eedd73ac6f5bc00819ff9a694dd7

4e4c30ebf5e0d6896b14a66ce09534996e4edfb4040b4ee99f61bd5b41c6e6c3

099a6d614d4eecda6c1e2aca87cf4d4cbb4485cc4146d0e28450918609ce9861

1b1abccd9c92dded5a065d8da7a9445dedb1888c58823659bac7ea3410c7bbe3

d29fa7122a24c7593dae09aa74f13e1085f6c811305304adc838b898a052cae5

e6aff6ddaae97a8bbb6060e002796e0c55c5bc5639a89997b7ac9ee2f08e499f

c680f2f4e119b3cee47160351f3714220fcf30a76842df6329e4d851ee68f972

eed7c9c5b057578e48654edcc8db0c8bed5db059797bc2fcfbd43a215de16ae5

ca2090e3e4edb26f2866ad657b5015f4edb3fa09f3cac1487967a0a5074cfc81

a8e24435e6b5453aed172c2feae28b7d0ef960721d0a8677762506f8e29e4890

35d11e7dab661af1e38df4e44b0ba6c649794bbe49160b4350e55f2dee08992c

383ce1ca76643e24d940c6a1901164205d148e5491079adc9a2c35effdd3caba

06542037400a4dcc70db31095f6d32af2ed7e973d065807356296edbd3e09fab

robots

description

apiUrlConfig

width=device-width, initial-scale=1, minimum-scale=1, shrink-to-fit=no

viewport

dcterms.identifier

dcterms.language

dcterms.format

dcterms.type

h92aB8ePKMRuW7jOrDVorVNe4Kgc2p0tYcu_dwUs2-g

google-site-verification

apple-mobile-web-app-title

twitter:card

twitter:site

http://www.sbab.se/1/privat/lana/bolan/flytta_bolan.html

Bolån - Ansök om bolån och lånelöfte hos SBAB

twitter:title

twitter:description

https://www.sbab.se/essentials/og-1200x630.png

twitter:image

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

sbab.se

(function(c){c.add('sv-js');c.remove('sv-no-js');})(document.documentElement.classList)


_cmp_settings = {
	usePiwik: true,
	hideBodyUntilDomReady: true,
   hideBodyUntilDomReadyMaxDelay: 2500,
   hideBodyUntilDomReadyMinDelay: 100,
   blockIframesUntilConsent: true
};



        var $jq = jQuery.noConflict();
    


        $jq(document).ready(function () {
            var fixButtons = function (buttonClass) {
                $jq('span.' + buttonClass + ' a').addClass(buttonClass + ' btn');
                $jq('span.' + buttonClass + ' a')
                    .parent()
                    .removeClass(buttonClass);
            };

            fixButtons('btn-primary');
            fixButtons('btn-secondary');
            fixButtons('btn-tertiary');
        });
    


//@ts-check

/**
 * @typedef {object} Global
 * @property {{subscribe: function}} [_cmp_state] This object is added to window by consent-management-app
 */

(function () {
    /**
     * Checks the URL for a UTM_SOURCE parameter.
     * @return {string} Returns the current UTM_SOURCE
     */
    function getUtmSource() {
      if (!window.location || !window.location.search) return "";
      const utmSourceParameter = window.location.search
        .toLowerCase()
        .replace("?", "")
        .split("&")
        .filter((param) => /utm_source=/.test(param))[0];
  
      if (!utmSourceParameter || !utmSourceParameter.replace) return "";
      return utmSourceParameter.replace("utm_source=", "");
    }
  
    /**
     * Checks if the previously visited URL passed on a referrer.
     * @return {string} Returns the current referrer
     */
    function getReferrer() {
      const protocolRegex = /^.*:\/\//i;
      const pathRegex = /\/.*/i;
      const excludeRegex = /.*sbab\.se.*/i;
      if (!document.referrer || excludeRegex.test(document.referrer)) return "";
      return document.referrer.replace(protocolRegex, "").replace(pathRegex, "");
    }
  
    /**
     * Saves the last source to localStorage.
     * @return {void}
     */
    function saveLastNonDirectSource() {
      const value = getUtmSource() || getReferrer();
      if (!value) return;
      localStorage.setItem("lastNonDirectSource", value);
    }
  
    /**
     * Saves the source depending on the consent-management-app state.
     * @return {void}
     */
    function saveSourceOnConsent() {
      const w = /**@type {Global}*/ (window);
      if (!w._cmp_state || !w._cmp_state.subscribe) return;
      let isSubscribed = true;
      w._cmp_state.subscribe(({ state, consent }) => {
        if (isSubscribed && state === "IDLE" && consent.analytics) {
          isSubscribed = false;
          saveLastNonDirectSource();
        }
      });
    }
  
    /**
     * This function makes sure that the DOM is loaded before executing a callback.
     * @param {function} callback - The callback will run if/when the DOMContent is loaded.
     * @return {void}
     */
    function runAfterDOMContentLoaded(callback) {
      if (/complete|loaded|interactive/.test(document.readyState))
        return callback();
      addEventListener("DOMContentLoaded", () => callback());
    }
  
    try {
      runAfterDOMContentLoaded(saveSourceOnConsent);
    } catch (error) {
      // Do nothing...
    }
  })();



        $jq(document).ready(function () {
            $jq('.btn').on('click', function () {
                var url = window.location.pathname;
                dataLayer.push(
                    {event: 'customEvent', 'eventCategory': 'button', 'eventAction': $jq(this).text(), 'eventLabel': window.location.pathname}
                );
            });

            $jq('.group-figure a').on('click', function () {
                var text = $jq(this)
                    .find('h2')
                    .text();
                if (!text) 
                    return;
                
                var url = window.location.pathname;
                dataLayer.push(
                    {event: 'customEvent', 'eventCategory': 'group-figure', 'eventAction': text, 'eventLabel': window.location.pathname}
                );
            });
        });
    


   (function() {
      if (!window.localStorage) return;
      if (!window.dataLayer) window.dataLayer = [];
   })();



document.body.addEventListener('keydown', function(e) {
  if (e.key === 'Tab') {
    document.body.classList.add('using-keyboard');
  }
});



                                                      var path = window.location.pathname;
                                                      var filter = "PRIVATE";
                                                      if (
                                                      path.includes("/1/foretag") ||
                                                      path.includes("/1/brf") ||
                                                      path.includes("/1/fastighetsbolag")
                                                      ) {
                                                      filter = "ALL_CORPORATE";
                                                      }
                                                      window.openSearch = {
                                                      filter: filter, // ALL, PRIVATE, ALL_CORPORATE, CORPORATE, HOUSING_COOPERATIVE, REAL_ESTATE
                                                      boostCorporate: false
                                                      };
                                                   


                                                      // Load script instantly on user event, otherwise auto load after 2620ms
                                                      (function () {
                                                         var APP_NAME = "open-search";
                                                         var APP_VERSION = "2025_09_22__0";

                                                         var events = ["touchstart", "scroll", "mouseover", "keydown"];
                                                         function loadScript() {
                                                               if (document.querySelector("#" + APP_NAME + "-script")) 
                                                                  return;
                                                               for (var i = 0; i < events.length; i++) {
                                                                  window.removeEventListener(events[i], loadScript);
                                                               }
                                                               var script = document.createElement("script");
                                                               script.id = APP_NAME + "-script";
                                                               script.defer = true;
                                                               script.dataset.version = APP_VERSION;
                                                               script.src = "/static/" + APP_NAME + "/base.js?v=" + APP_VERSION;
                                                               document
                                                                  .body
                                                                  .appendChild(script);
                                                         }
                                                         if (localStorage.getItem("sbabOpenSearchLastVersion") === APP_VERSION) 
                                                               return loadScript();
                                                         for (var i = 0; i < events.length; i++) {
                                                               window.addEventListener(events[i], loadScript, {passive: true});
                                                         }
                                                         window.addEventListener("load", function onWindowLoad() {
                                                               setTimeout(loadScript, 2620);
                                                               window.removeEventListener("load", onWindowLoad);
                                                         });
                                                      })();
                                                   


(function () {
	// DOM Elements
	var sideNavBtn = document.getElementById("n-side-nav__btn"),
		sideNavBtnContent = document.getElementById("n-side-nav__btn-content"),
		navigation = document.getElementById("n-side-nav");
	// Event listener for 'click' events on sidebar menu button
	sideNavBtn.addEventListener("click", function() {
		navigation.classList.toggle("n-side-nav--open"),
			sideNavBtnContent.classList.toggle("n-side-nav__btn-content--open");
		var currentAriaExpanded = "true" === sideNavBtn.getAttribute("aria-expanded");
		sideNavBtn.setAttribute("aria-expanded", !currentAriaExpanded);
	});
})();



  (() => {
    function editDOM() {
      const chatbotDiv = document.querySelector(
        "div.sc-pQdCa.jqrPXB.bai-StyleReset",
      );
      if (chatbotDiv) {
        // Remove the role="dialog" attribute that is causing a11y issues
        chatbotDiv.removeAttribute("role");
      }
    }

    function waitForDOMThenRun() {
      if (document.querySelector("div.sc-pQdCa.jqrPXB.bai-StyleReset")) {
        editDOM();
      } else {
        setTimeout(waitForDOMThenRun, 100);
      }
    }

    document.addEventListener("DOMContentLoaded", () => {
      waitForDOMThenRun();
    });
  })();



    try {
      
    var _paq = _paq || [];
    (function () {
        var trackAnonymously = (function() { return window.sevenTag.getVariableValue('Piwik PRO Anonymization', 3) })()('analytics');
        if (trackAnonymously) {
            _paq.push(['setUserIsAnonymous', 1]);
            _paq.push(['disableCookies']);
        }
    }());

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[PiwikPRO] Analytics script" + ': ' + error.message)      
    }


    try {
      
    var _paq = _paq || [];
    _paq.push(['setTrackingSource', 'jstc_tm']);
    _paq.push(['setSessionIdStrictPrivacyMode', true]);
    _paq.push(['enableLinkTracking']);
    _paq.push(['setIpTracking', true]);
    _paq.push(['setDomains', ['sbab.se/', 'bloggen.sbab.se/', 'secure.sbab.se/']]);
    _paq.push(['setCookieDomain', '*.sbab.se']);
    _paq.push(['setCustomDimensionValue', 2, '?utm_source=booli&ap=booli&fk=200001&utm_medium=mail&utm_content=statisticsmail&utm_campaign=byt']);
    _paq.push(['setSecureCookie', 1]);
    _paq.push(['trackPageView']);
    _paq.push(['enableJSErrorTracking']);
    (function(p,i,w,ik) {
        var g=ik.createElement('script'),s=ik.getElementsByTagName('script')[0];
        _paq.push(['setTrackerUrl', p]);
        _paq.push(['setSiteId', w]);
        g.type='text/javascript';g.async=true;g.defer=true;g.src=i;s.parentNode.insertBefore(g,s);
    })('https://sbab.piwik.pro/ppms.php','https://sbab.containers.piwik.pro/ppms.js','fccb4319\u002D6dd3\u002D493b\u002Da869\u002D75c092a6d997',document)

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[PiwikPRO] Analytics script" + ': ' + error.message)      
    }


    try {
      
  // Store the current timestamp in localStorage
  localStorage.setItem('pp-session-start', new Date().getTime());

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[Script] Session timestamp" + ': ' + error.message)      
    }


    try {
      
    var _paq = _paq || [];

            _paq.push(["setCustomDimensionValue", 1, 'mortgage-refinance-app']);
            _paq.push(['trackEvent', 'transfer-mortgage', 'view', '1.interest-calculation', undefined]);

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[PiwikPRO] Event proxy" + ': ' + error.message)      
    }


    try {
      
    (function () {
        try {
            var goalID = 324411;
            window.kameleoonQueue = window.kameleoonQueue || [];
            kameleoonQueue.push(function() {
              Kameleoon.API.Goals.processConversion(goalID);
            });
            if (new URLSearchParams(window.location.search).has('_stg_debug')) {
              console.log("Kameleoon queued processing conversion for goal ID: " + goalID);
            }
        } catch (error) { }
    })();

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[Kameleoon] [Goal] [Mortgage Refinance] Step 1 - Räkna ut din ränta" + ': ' + error.message)      
    }


    try {
      
    var _paq = _paq || [];

        _paq.push(['trackEvent', '[Legacy] virtual-page-view', '\/2\/privat\/lana\/bytflodet_helt_enkelt\/entree.virt']);

    } catch (error) {
      console.error('Failed to evaluate tag - ' + "[PiwikPRO] [LEGACY] Virtual page view" + ': ' + error.message)      
    }

Bolån - Ansök om bolån och lånelöfte hos SBAB - SBAB

✅ Low Risk - https://www.sbab.se/1/privat/lana/bolan/flytta_bolan.html?utm_source=booli&ap=booli&fk=200001&utm_medium=mail&utm_content=statisticsmail&utm_campaign=byt

Requests	IP Address	Location	AS Autonomous System
11	164.40.178.128	Unknown	Unknown
11	164.40.178.130	Unknown	Unknown
11	185.24.134.203	Unknown	Unknown
11	164.40.181.23	Unknown	Unknown
11	188.95.229.161	Unknown	Unknown
58	5	-	-

Security Scan Report: www.sbab.se

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History