This page is served from the Payra API host () so the processor field script can run. The Next.js portal uses a strict Content-Security-Policy and blocks eval, which that script relies on—loading it only inside this origin avoids that.