English

__cf_bm

_x_w

_helpkit_session

You're looking at domain 'paysera.freshdesk.com' on the commercial generic top-level domain (.com) with subdomain 'paysera'. The registrable portion 'freshdesk' spans 9 characters split between 2 vowels and 7 consonants. Breaking it apart gives two words: fresh, desk. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

utf8

authenticity_token

feedback

commit

html/ec/10/ec1034bc-f5f9-451b-9c04-4ae7ed24bf05.html.gz

default-src 'self'; connect-src 'self' *.freshconnect.io/ *.freshsales.io/ *.freshworks.com/ *.freshdesk.com/ *.freshworksapi.com/ *.qualtrics.com/ *.freshdeskusercontent.com/ *.freshdeskusercontent-euc.com/ *.freshdeskusercontent-in.com/ *.freshdeskusercontent-aus.com/ *.fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://*.freshworksapi.com/ wss://*.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.eu-central-1.amazonaws.com/production/ mec-freshcaller-attachments.s3.me-central-1.amazonaws.com/production/ eun-freshcaller-attachments.s3.me-central-1.amazonaws.com/production/ au-freshcaller-attachments.s3-ap-southeast-2.amazonaws.com/production/ in-freshcaller-attachments.s3.ap-south-1.amazonaws.com/production/ pubsub.rtschannel.com/ api.fdcollab.com/ wss://pubsub.rtschannel.com/ cloudflareinsights.com/ data: blob: api.appcues.net/ wss://api.appcues.net/ fast.appcues.com/ cdn.jsdelivr.net/npm/@freshworks/crayons-icon@next/dist/ translate.googleapis.com/translate_a/t translate.googleapis.com/element/log fast.wistia.net/ fast.wistia.com/ embed-cloudfront.wistia.com/deliveries/ app.inlinemanual.com/ client-api.auryc.com/ *.surveyserv.com *.freshsurvey.com *.freddybot.com *.freshreports.com rum.haystack.es/freshreports/analytics dsv27oefxtf0.cloudfront.net/ d259946rb8u125.cloudfront.net/ d26h8g5t9na1ph.cloudfront.net/ d3k2px406bziu5.cloudfront.net/ d3vemg63yfopge.cloudfront.net/ d18u0ykezz20xl.cloudfront.net/ d38bgnd74qpt7g.cloudfront.net/ *.userpilot.io/ wss://*.userpilot.io/; font-src 'self' *.freshdesk.com/ fonts.gstatic.com/ fonts.googleapis.com/ cdnjs.cloudflare.com/ajax/libs/font-awesome/4.2.0/fonts/ fast.wistia.net/ fast.wistia.com/ *.freddybot.com cdn.inlinemanual.com/inm/author/ d259946rb8u125.cloudfront.net/ d26h8g5t9na1ph.cloudfront.net/ d3k2px406bziu5.cloudfront.net/ d3vemg63yfopge.cloudfront.net/ d18u0ykezz20xl.cloudfront.net/ d38bgnd74qpt7g.cloudfront.net/ data:; frame-src 'self' https:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; object-src 'none'; script-src 'self' *.freshworksapi.com/ *.freshworks.com/ *.myfreshworks.com/ *.freshdesk.com/ *.freshchat.com/ *.freshcaller.com/ *.freshconnect.io/ *.freshcloud.io/ *.fconstage.io/ accounts.freshworks.com/ wchat.freshchat.com/js/ wchat.freshchat.com/widget/js/ *.siteintercept.qualtrics.com/SIE/ *.qualtrics.com assets.calendly.com/assets/external/widget.js d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ dcdu85ocrj5q6.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ app.getbeamer.com/js/beamer-embed.js analytics.inlinemanual.com/ cdn.inlinemanual.com/embed/ cdn.heapanalytics.com/ s3.amazonaws.com/assets.freshdesk.com/ cdnjs.cloudflare.com/ ajax.cloudflare.com/ static.cloudflareinsights.com/ js.chargebee.com/v1/chargebee.js js.braintreegateway.com/v1/braintree.js static.freshdev.io/ fast.wistia.net/ fast.wistia.com/ static.getbeamer.com/ calendly.com/ unpkg.com/@webcomponents/webcomponentsjs@2.4.3/custom-elements-es5-adapter.js unpkg.com/@webcomponents/webcomponentsjs@2.4.3/webcomponents-loader.js js-agent.newrelic.com/ www.googletagmanager.com/gtag/js static.asknice.ly/dist/standalone/asknicely-in-app-conversation.js www.dropbox.com/static/api/2/dropins.js js.live.net/v7.2/OneDrive.js apis.google.com/ asknice.ly bam.nr-data.net/ www.google-analytics.com/analytics.js maps.googleapis.com/ unpkg.com/@freshworks/crayons@v3/dist/crayons/crayons.esm.js unpkg.com/@freshworks/crayons@v3/dist/crayons/crayons.js s3.amazonaws.com/freshcaller-widget-loader/ in-freshcaller-widget-loader.s3.ap-south-1.amazonaws.com/ s3.eu-central-1.amazonaws.com/euc-freshcaller-widget-loader/ mec-freshcaller-widget-loader.s3.me-central-1.amazonaws.com/ eun-freshcaller-widget-loader.s3.me-central-1.amazonaws.com/ au-freshcaller-widget-loader.s3-ap-southeast-2.amazonaws.com/ www.dropbox.com/static/api/1/dropbox.js fast.appcues.com/ translate.google.com/translate_a/element.js translate.googleapis.com/_/translate_http/_/js/ translate-pa.googleapis.com/v1/supportedLanguages cdn.surveyserv.com/widget.min.js cdn.freshdev.io/assets/marketplace-heap.js cdn.freshcloud.io/assets/marketplace-heap.js cdn.freshdev.io/assets/marketplace-analytics.js cdn.inlinemanual.com/inm/author/ app.inlinemanual.com/ *.surveyserv.com *.freshsurvey.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.freddybot.com d3el5jsqgryo0a.cloudfront.net d259946rb8u125.cloudfront.net/ d26h8g5t9na1ph.cloudfront.net/ d3k2px406bziu5.cloudfront.net/ d3vemg63yfopge.cloudfront.net/ d18u0ykezz20xl.cloudfront.net/ d38bgnd74qpt7g.cloudfront.net/ accounts.google.com/ js.userpilot.io/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.freshworks.com *.myfreshworks.com/ *.freshchat.com/ d3h0owdjgzys62.cloudfront.net/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/ d259946rb8u125.cloudfront.net/ d26h8g5t9na1ph.cloudfront.net/ d3k2px406bziu5.cloudfront.net/ d3vemg63yfopge.cloudfront.net/ d18u0ykezz20xl.cloudfront.net/ d38bgnd74qpt7g.cloudfront.net/ fonts.googleapis.com/ app.getbeamer.com/styles/beamer-embed.css s3.amazonaws.com/assets.freshdesk.com/ *.freshdesk.com/ wchat.freshchat.com/ calendly.com/ unpkg.com/@webcomponents/webcomponentsjs@2.4.3/custom-elements-es5-adapter.js unpkg.com/@webcomponents/webcomponentsjs@2.4.3/webcomponents-loader.js static.asknice.ly/dist/standalone/asknicely-in-app-conversation.css fast.appcues.com/ asknice.ly *.surveyserv.com *.freshsurvey.com *.freddybot.com cdn.inlinemanual.com/inm/author/ 'unsafe-inline'; worker-src 'self' blob:

a176dd7ebef97f284cbe5f3aa5ded90d65c1405171949d75ce164374075461f7

24f088663826bdfa96c473ef12919c78a89955da56dfc14ce4c6dd7f6185bd9c

c075b531d5ff27f384bbd3c2f28b5f69c353a6ef3d4c96a96cf41f65e1c765cf

ebf9058114333c44b791e31e5a82d96e2724734c7ff1c141c1fdc1429220fcba

509e5fd23a967eb7e10e9f0fe86980caa9b726298f6faa12db4be109d0ee6486

9731d974fd4503f77b158eac0550bd40df7feec433c1cfae9590fbe1459cddef

6bd54bb40a3c3ee00aed1ada9e2bbde6ce36a28c1f63785117b9f31ec28714e5

2df201ab5ae586662dfee35a6c73bdf1076959b7bfd2f7ca48eb275627dba44c

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

e3c277ee536bcba9f267c00523e6545ade549fe62a682988f15404869f7a88e4

be8c8cc54a1f3ca3bc716bad9103cfcfcaccb4c0362fc2a17436918fab8c5001

00e0981bb8617a4278e29f3ead47043a38a53618432272d3c3abdf3ee814327a

853e523018abac0791b94e0b30b2e8a412aaf3546476c8643dc40b0744d5ee19

a6e49caadeba79dc6c791cfafe8ad3422f3fe13d0995fe332cc461082987a1ad

1d31e05eb652fe5060d78a0ef7ab6e314163ee17e87626cd1826b01314623522

csrf-param

ObZt94usran9R/qc6Snu2JS8AOkjJMJvoRpk6tIRb01gOe6Fx+xwerCBO77YCr0rvM8pjs01UF04PuYkz5e6+A==

csrf-token

description

author

https://paysera.freshdesk.com/support/custom_surveys/b81dc7dac54e24e7bc00b2d800f9b018/very_happy/new

https://s3.eu-central-1.amazonaws.com/euc-cdn.freshdesk.com/data/helpdesk/attachments/production/101057571838/logo/zF1b8GlxxEc_uEg3j0UoOAQ0zI9NLijGjg.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20260502%2Feu-central-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20260502T165544Z&amp;X-Amz-Expires=604800&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=b98e9910853060f99db8097f53433292eff4d053d78f38957568e6a088561235

twitter:title

twitter:url

twitter:image

twitter:card

width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

NameCheap, Inc.

FRESHDESK.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z


    window.cspNonce = "m+O9IiXUcxyefLnkSCGHRw==";
  


      window.store = {};
window.store = {
  assetPath: "/assets/cdn/portal/",
  defaultLocale: "en",
  currentLocale: "en",
  currentPageName: "csat_survey",
  portal: {"id":101000000920,"name":"Paysera","product_id":null},
  portalAccess: {"hasSolutions":false,"hasForums":false,"hasTickets":false,"accessCount":0},
  account: {"id":2075294,"name":"Paysera","time_zone":"Vilnius","companies":[]},
  vault_service: {"url":"https://vault-service-eu.freshworks.com/data","max_try":2,"product_name":"fd"},
  blockedExtensions: "exe,dll,sys,swf,scr,gzquar,js,jse,class,vb,com,bat,cmd,pif,img,iso,hta,html,msc,msp,cpl,reg,tmp,py,ps,msi,msp,inf,scf,ocx,bin,ws,sh,lnk,gadget,dmg,msh,apk,iqy,pub,jar",
  allowedExtensions: "",
  search: {"all":"/support/search","solutions":"/support/search/solutions","topics":"/support/search/topics","tickets":"/support/search/tickets"},
  portalLaunchParty: {
    enableStrictSearch: false,
    ticketFragmentsEnabled: false,
    homepageNavAccessibilityEnabled: false,
    channelIdentifierFieldsEnabled: false,
  },





    marketplace: {"token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwcm9kdWN0IjoiZnJlc2hkZXNrIiwiYWNjb3VudF9pZCI6IjIwNzUyOTQiLCJkb21haW4iOiJwYXlzZXJhLmZyZXNoZGVzay5jb20iLCJvcmdhbmlzYXRpb25faWQiOiIzNjMyNDg2MDUzODc4MzQ2MzEiLCJ0aW1lIjoxNzc4MTM4MTI3LCJpc3MiOiJmcmVzaGRlc2tfdmlzaXRvcl9wb3J0YWwifQ.EOsLTmlUkbOqrHD-GLW36jWqMnXCjgiEACWGbgPZ3Iw","data_pipe_key":"634cd594466a52fa53c54b5b34779134","region":"euc","org_domain":"paysera.myfreshworks.com"},

  pod: "eu-central-1",
  region: "EU",
};
  


//<![CDATA[

  surveyFeedbackI18n = {};
  surveyFeedbackI18n.thanksFeedback = "Thank you for your valuable feedback.";
  surveyFeedbackI18n.surveyFeedback = "Submitting Feedback...";
  surveyFeedbackI18n.portalMsg = "Redirecting to ticket page";
  surveyFeedbackI18n.thanksMessage = "Thank you for your valuable feedback.";

//]]>




    var isCommentable = 1;
    var isPreview = false
    var hasQuestandComments = false;



    jQuery(document).ready(function() {
      jQuery('.survey_option.unselected').hover(function(event) {
        var choice = jQuery(this).data('choice');
        jQuery(this).css('background-color', jQuery(this).data('bgColor'));
        jQuery(this).find('a').css('color', 'black');
        choiceHeader = jQuery('#survey_option_header_' + choice);
        choiceHeader.css('background-color', choiceHeader.data('bgColor'));
      }, function() {
        var choice = jQuery(this).data('choice');
        jQuery(this).css('background-color', 'lightgrey');
        jQuery(this).find('a').css('color', 'grey');
        choiceHeader = jQuery('#survey_option_header_' + choice);
        choiceHeader.css('background-color', 'grey');
      });
    });
  

X-UA-Compatible

Open-Graph-Protocol

Cloudflare Bot Management

HSTS

Envoy

Cloudflare

Customer Satisfaction Survey :

✅ Low Risk - https://paysera.freshdesk.com/support/custom_surveys/b81dc7dac54e24e7bc00b2d800f9b018/very_happy/new

Requests	IP Address	Location	AS Autonomous System
5	142.251.14.94	United States	AS15169Google LLC
3	142.251.13.95	United States	AS15169Google LLC
3	3.5.120.137	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
3	18.64.210.4	United States	AS16509Amazon.com, Inc.
3	172.66.0.145	United States	AS13335Cloudflare, Inc.
17	5	-	-

Security Scan Report: paysera.freshdesk.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History