The portal uses cross-origin resource sharing (CORS) to communicate to back-end services directly from the browser. We are working with our partner teams to get a full list of URLs required to manage your resources in the portal. Here are a few known URLs:
Please let us know if we missed any.John James commented
I am seeing the same issue on portal.azure.com from behind the corporate firewall.