LeakIX - Host umyperformance.deloitte.com

Domain umyperformance.deloitte.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.55.76.246
Domain: umyperformance.deloitte.com
Port: 443
URL: https://umyperformance.deloitte.com

First seen 2025-10-14 21:18
Last seen 2026-02-04 06:29
Open for 112 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-04 06:29
Create report

Open service 20.55.76.246:443 · umyperformance.deloitte.com

2026-01-23 15:31

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 15:31:23 GMT
Location: https://login.microsoftonline.com/36da45f1-dd2c-4d1f-af13-5abe46b99921/oauth2/authorize?client_id=1c101599-9de2-4b3e-a6f6-c362f5dc1f55&redirect_uri=https%3A%2F%2Fumyperformance.deloitte.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639047790833803904.N2NlOTFkMWItOWVhZS00YzIxLWE4NGYtMmNlMTI3ZTMyZjIzMTBjNzE0NDktZWE4Ny00MTU2LWI5MTMtYmFhMmFhOWQyNmU5&state=CfDJ8FXAru1WtBZNnuvbciLiEZ0xlo-Kao5KfRBDiXqvvpkR9igym6WnKALvls_uJfUOfTs9vCJRf8LLgoQ4k9yc3YUbIonm6kmHAktUtRP4q5LaCrDldHcgysduxZ-mJYgF2ZvxesSY1K5eVxJV_zTbX7A6x4G3W6OKvzhmZFc5E-2RWlbiR0AK6vOZGUEfe9XrcJ9WZTWGbpzFfo-XLNRWyjXanWhZn6yk5JprikrrAI95Spd7VhyiSL13UwLgjruCffBs7nrENP3F26uXDG7vAPO2DIw_iNGhflmPfhFt1SiNboIP0ymTsEhz13xua3xSnA&x-client-SKU=ID_NET6_0&x-client-ver=6.21.0.0
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8FXAru1WtBZNnuvbciLiEZ3ftojVxcoaBKfAVDsor4mVZGo93TuELdGgo_ZiEg7PS_AgalCZSsBprz6pBBAtHLZoQtzwsFe6dvFoRJ6RoyXaEMuIje7xNQ5A-pwxhzRQMoMdFKlymKoTTQk5Zj8GXzNlQorPeqX4n75SrsNWDdumc-0nmV_QawgglS7754HlmtkLti3OZENQXAcaEYle_Ejyn75WWFovmfRCphpdMV8s8IrId2bEleEbZ6CohvSewlqBU0nGdnG4k4kGNjAxRzA=N; expires=Fri, 23 Jan 2026 15:46:23 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation.s7hwIyJ3nJGHHoQYnGpzKjC1BTXAoHC_UQqGAXrpPLk=N; expires=Fri, 23 Jan 2026 15:46:23 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;Secure;Domain=umyperformance.deloitte.com
Set-Cookie: ARRAffinitySameSite=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;SameSite=None;Secure;Domain=umyperformance.deloitte.com
Request-Context: appId=cid-v1:03d89648-943c-4704-858e-d08df74028f6
Content-Security-Policy: default-src 'self' data: https://login.microsoftonline.com https://deloitteus.demdex.net https://geolocation.onetrust.com https://papi.walkme.com https://cdn.walkme.com ;object-src 'none';style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com ;img-src 'self' data: https://sstats.deloitte.com https://cm.everesttech.net  https://cdn.cookielaw.org https://dpm.demdex.net https://cdn.ckeditor.com https://s3.walkmeusercontent.com https://ec.walkme.com;frame-ancestors 'none';connect-src 'self' wss: https://ec.walkme.com https://papi.walkme.com https://cdn.walkme.com https://dc.services.visualstudio.com https://dpm.demdex.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://sstats.deloitte.com https://cke4.ckeditor.com https://eastus-1.in.applicationinsights.azure.com https://login.microsoftonline.com ;script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://cdn.walkme.com https://assets.adobedtm.com https://az416426.vo.msecnd.net https://cdn.cookielaw.org https://login.microsoftonline.com https://cdn.ckeditor.com https://papi.walkme.com ;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains

Found 2026-01-23 by HttpPlugin

Create report

Open service 2a02:26f0:7100::687e:25a1:80 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Location: https://umyperformance.deloitte.com/
Content-Length: 0
Expires: Wed, 21 Jan 2026 23:26:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:26:13 GMT
Connection: close
Server-Timing: edge; dur=2
Server-Timing: origin; dur=93
Server-Timing: cdn-cache; desc=MISS
Akamai-GRN: 0.9d257e68.1769037973.3dce8c1a
Server-Timing: ak_p; desc="1769037973367_1753097629_1036946458_9482_9499_153_0_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2a02:26f0:7100::687e:25b9:80 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Location: https://umyperformance.deloitte.com/
Content-Length: 0
Expires: Wed, 21 Jan 2026 23:26:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:26:12 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=91
Server-Timing: origin; dur=5
Akamai-GRN: 0.b5257e68.1769037972.16c997e5
Server-Timing: ak_p; desc="1769037972858_1753097653_382310373_9614_9859_93_0_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.183.13:80 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Location: https://umyperformance.deloitte.com/
Content-Length: 0
Expires: Wed, 21 Jan 2026 23:26:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:26:12 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=89
Server-Timing: origin; dur=4
Akamai-GRN: 0.cd1d1002.1769037972.44983eb2
Server-Timing: ak_p; desc="1769037972424_34610637_1150828210_9247_5801_11_0_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2a02:26f0:7100::687e:25b9:443 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: https://login.microsoftonline.com/36da45f1-dd2c-4d1f-af13-5abe46b99921/oauth2/authorize?client_id=1c101599-9de2-4b3e-a6f6-c362f5dc1f55&redirect_uri=https%3A%2F%2Fumyperformance.deloitte.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639046347512962259.ODM1Zjg3YjQtNGU1YS00OTZlLThlYmMtYjkxYjU4NGMyY2Q5MzExNzQ2MTItMjNkMC00ODc5LWI2YzEtMDJjZDM1OTIxOWFj&state=CfDJ8FXAru1WtBZNnuvbciLiEZ0m0jCSAtDK_eVxffx75Jy4-FBU_ZXtKagyEUmUgXgTBXkMySsyWZ-oFgBWtkJRGI3SOWDEgtHZPmjex4VPH6lv0xG2r1jQ0qss5Lo5U3NJHmKKunf6b2Ra7dG-YQ7XKxFpx_AW7VTOz7INqIxFzLENe1NMw0A08o3pxhQa9s7dwGnR2X7dSZ6uDsRr6uhBbneOjQajGA6TTIOo-ZlJbP0IRMfhLNn7V2bpk4HD9tF2u30NkumiXOy8ZIzN9NErRfFYLwR4Ld61JUf4ymXjcP5vD6fgW4bmQor6sGefcdHdRg&x-client-SKU=ID_NET6_0&x-client-ver=6.21.0.0
Request-Context: appId=cid-v1:03d89648-943c-4704-858e-d08df74028f6
Content-Security-Policy: default-src 'self' data: https://login.microsoftonline.com https://deloitteus.demdex.net https://geolocation.onetrust.com https://papi.walkme.com https://cdn.walkme.com ;object-src 'none';style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com ;img-src 'self' data: https://sstats.deloitte.com https://cm.everesttech.net  https://cdn.cookielaw.org https://dpm.demdex.net https://cdn.ckeditor.com https://s3.walkmeusercontent.com https://ec.walkme.com;frame-ancestors 'none';connect-src 'self' wss: https://ec.walkme.com https://papi.walkme.com https://cdn.walkme.com https://dc.services.visualstudio.com https://dpm.demdex.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://sstats.deloitte.com https://cke4.ckeditor.com https://eastus-1.in.applicationinsights.azure.com https://login.microsoftonline.com ;script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://cdn.walkme.com https://assets.adobedtm.com https://az416426.vo.msecnd.net https://cdn.cookielaw.org https://login.microsoftonline.com https://cdn.ckeditor.com https://papi.walkme.com ;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Expires: Wed, 21 Jan 2026 23:25:51 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:25:51 GMT
Connection: close
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8FXAru1WtBZNnuvbciLiEZ0y80oCaznCsCYIc14RrQY7s0qkdig3_f71pm05vw6BoOEtvvCtsbAsW6qCPYhHiZ6O5ZavMIAlUqjP_RS8yMuZBCe3fSxNNyy4SUZ1UHtUmvs2EQl8c3W0xhW9cRVBeSPPlZxf6sRQpU7fmcggwwUd33nYdye1kE6aCnU7VTiiT8BZ9wyT1T1x4Ko_9fEI0n1k03ppP0EopZ9JTjsuVWZJjLvygqwVUAOnbgKOejAyoZ1LZj1pWolkrfT-SBFJZuE=N; expires=Wed, 21 Jan 2026 23:40:51 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation._eELiVh9ciGwnx0TIz_EzlltAwV63DtvTTrk6kskxPU=N; expires=Wed, 21 Jan 2026 23:40:51 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;Secure;Domain=umyperformance.deloitte.com
Set-Cookie: ARRAffinitySameSite=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;SameSite=None;Secure;Domain=umyperformance.deloitte.com
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=87
Server-Timing: origin; dur=28
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.b5257e68.1769037951.16c94958
Server-Timing: ak_p; desc="1769037951082_1753097653_382290264_11447_10652_153_157_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.183.13:443 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 200 OK
Content-Length: 193579
Content-Type: text/html
ETag: "87254add5bfd177cc2e40a02c10d863d:1738956824.031626"
Content-Security-Policy: default-src 'self' 'unsafe-inline'; object-src 'none'; script-src 'none';img-src 'self' data:;form-action 'none'; report-to csp-endpoint; frame-ancestors 'self';
X-Content-Type-Options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
Strict-Transport-Security: max-age=2628000 ; includeSubDomains
Expires: Wed, 21 Jan 2026 23:25:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:25:50 GMT
Connection: close

Page title: Access Denied

<!DOCTYPE html>
<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Access Denied</title>
    <style>
        body {
            margin: 0;
            padding: 0;
            font-family: Arial, sans-serif;
            background-color: #f4f4f4;
        }
        .container {
            color: #555;
            margin: 10% auto;
            max-width: 900px;
            padding: 20px;
            background-color: #ffffff;
            border: 1px solid #ccc;
            border-radius: 5px;
            box-shadow: 0px 0px 10px rgba(0, 0, 0, 0.1);
            display: flex;
            flex-direction: row;
            justify-content: space-between;
        }
        .center-cls {
            width: 100%;
            padding: 20px;
        }
        .no-copy {
            user-select: none; /* Prevent text selection */
            -webkit-user-select: none;
            -moz-user-select: none;
            -ms-user-select: none;
        }

        .right-side {
            width: 40%;
            background-image: url('data:image/png;base64,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

Found 2026-01-21 by HttpPlugin

Create report

Open service 2a02:26f0:7100::687e:25a1:443 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: https://login.microsoftonline.com/36da45f1-dd2c-4d1f-af13-5abe46b99921/oauth2/authorize?client_id=1c101599-9de2-4b3e-a6f6-c362f5dc1f55&redirect_uri=https%3A%2F%2Fumyperformance.deloitte.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639046347507642186.OWRjNjFkZGItMTUxMS00MzY4LTlmMTAtNWRmNzcwMGFmZTM0YmFlOTkwYmQtNjAzZi00YzdlLThmODItZDdmZmExNTFiM2Qx&state=CfDJ8FXAru1WtBZNnuvbciLiEZ1rfatVdQV5ovmDJxtBnwOvwy6N4nsCqMaEnCtXAAkdm6nGWB-RQ812HtOtEQv2PB--iN_3UTnQxlz_YgOj2AqFoCiyPhvcXNokWCMQ_H2tkexX0qp25CEP2n21hohAWf8JP3wZ-3yr1dVo6CJdXhsteU3asDC_OfvfLQcPdspZ3rRbrxz-K4Pmj6xCy7SmD-7bEmV7qzCgm29W2XD0uADFYuTigRIr1k1cUT5GoYUmj4iIPywmSQq8YrAQF7QL8JLrRzYiLfBwmVYQfNgYkgzpQ8h9JaVkvjENtnR_CK-B7w&x-client-SKU=ID_NET6_0&x-client-ver=6.21.0.0
Request-Context: appId=cid-v1:03d89648-943c-4704-858e-d08df74028f6
Content-Security-Policy: default-src 'self' data: https://login.microsoftonline.com https://deloitteus.demdex.net https://geolocation.onetrust.com https://papi.walkme.com https://cdn.walkme.com ;object-src 'none';style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com ;img-src 'self' data: https://sstats.deloitte.com https://cm.everesttech.net  https://cdn.cookielaw.org https://dpm.demdex.net https://cdn.ckeditor.com https://s3.walkmeusercontent.com https://ec.walkme.com;frame-ancestors 'none';connect-src 'self' wss: https://ec.walkme.com https://papi.walkme.com https://cdn.walkme.com https://dc.services.visualstudio.com https://dpm.demdex.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://sstats.deloitte.com https://cke4.ckeditor.com https://eastus-1.in.applicationinsights.azure.com https://login.microsoftonline.com ;script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://cdn.walkme.com https://assets.adobedtm.com https://az416426.vo.msecnd.net https://cdn.cookielaw.org https://login.microsoftonline.com https://cdn.ckeditor.com https://papi.walkme.com ;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Expires: Wed, 21 Jan 2026 23:25:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:25:50 GMT
Connection: close
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8FXAru1WtBZNnuvbciLiEZ219NcRBgequk9CNQrM1y2GWuzLQN_sR6POJqb01gU6AF73siVmXAYB_IlpTYQvJ7Rug3T6FdA48gEPX8psQoRqp0DWOliCvOwtp7UyGBfyifB6E1b9rcEwX5lyriQ2WxK0n5_GwqGN9JIZj4y4vWw8KtKCQm5U8_mktRKnYn1arfPR9W0yi5afjghd-eeZabfCRQL0J2lhH9B6d312ldLKHjSBwDvJRICz95n5OCXukEBnubZaRyd4Omgf_0fLYIQ=N; expires=Wed, 21 Jan 2026 23:40:50 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation.f7CuLfjreDTmlFQvVAorHk_47xfUP_jm2zPYNWgfuLQ=N; expires=Wed, 21 Jan 2026 23:40:50 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;Secure;Domain=umyperformance.deloitte.com
Set-Cookie: ARRAffinitySameSite=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;SameSite=None;Secure;Domain=umyperformance.deloitte.com
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=274
Server-Timing: origin; dur=106
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.b5257e68.1769037950.16c94621
Server-Timing: ak_p; desc="1769037950506_1753097653_382289441_37995_9966_16_36_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.183.14:80 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Location: https://umyperformance.deloitte.com/
Content-Length: 0
Expires: Wed, 21 Jan 2026 23:26:12 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:26:12 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=89
Server-Timing: origin; dur=3
Akamai-GRN: 0.ce1d1002.1769037972.50beee0a
Server-Timing: ak_p; desc="1769037972871_34610638_1354690058_9226_5419_98_0_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.183.14:443 · umyperformance.deloitte.com

2026-01-21 23:25

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: https://login.microsoftonline.com/36da45f1-dd2c-4d1f-af13-5abe46b99921/oauth2/authorize?client_id=1c101599-9de2-4b3e-a6f6-c362f5dc1f55&redirect_uri=https%3A%2F%2Fumyperformance.deloitte.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639046347506748259.NDQwNGMzMzYtYmU1NS00ODA3LWJjYWItOGFiYTE2OTc0NWExMDI5NGNmMDctNzg4Ny00ZTUyLTg4NGYtNzYwNTUwYjJiZDQ1&state=CfDJ8FXAru1WtBZNnuvbciLiEZ2E2etkEkISqEOksy2drFtJRvXNtLvu3Z-bBKDXI7wUFpSak45GoMrC8Hxllp9c5IQ36Im4WyuAgNNDjJDMKFOa3ubUsfNja6obSTYix1oUg-rA8vX3DJAnv8YJUuH7tkPfKHRP61UjLJYfJDXn3GLcaN-xLs_NzNIqRzBvA3v3Wm3W1r7Etj5fcfrpJ8RxAK8AQ669TXGulbyHcwD4essrgnc5G8zh4IFonM5hKCNp0Jh9tVwVhtVVr3y3XcFhdbaI288oZNFAx76DLN8ysQ_V7B5TJsJKrBvajdqeSaZEbQ&x-client-SKU=ID_NET6_0&x-client-ver=6.21.0.0
Request-Context: appId=cid-v1:03d89648-943c-4704-858e-d08df74028f6
Content-Security-Policy: default-src 'self' data: https://login.microsoftonline.com https://deloitteus.demdex.net https://geolocation.onetrust.com https://papi.walkme.com https://cdn.walkme.com ;object-src 'none';style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com ;img-src 'self' data: https://sstats.deloitte.com https://cm.everesttech.net  https://cdn.cookielaw.org https://dpm.demdex.net https://cdn.ckeditor.com https://s3.walkmeusercontent.com https://ec.walkme.com;frame-ancestors 'none';connect-src 'self' wss: https://ec.walkme.com https://papi.walkme.com https://cdn.walkme.com https://dc.services.visualstudio.com https://dpm.demdex.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://sstats.deloitte.com https://cke4.ckeditor.com https://eastus-1.in.applicationinsights.azure.com https://login.microsoftonline.com ;script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://cdn.walkme.com https://assets.adobedtm.com https://az416426.vo.msecnd.net https://cdn.cookielaw.org https://login.microsoftonline.com https://cdn.ckeditor.com https://papi.walkme.com ;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Expires: Wed, 21 Jan 2026 23:25:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 21 Jan 2026 23:25:50 GMT
Connection: close
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8FXAru1WtBZNnuvbciLiEZ3CkA3KhKqvBucpL9NSnLvqmQQDx6y6fL5rufCqk3dMUCaEIbGko9u4n2FYwqHw1x-SRw1izWkdaCI9ekYsHrJMTJ57-uSIwW_IzeOkReMAGzGZ9nuRqmrLX45ENVNXOqbfDNFO9YJS6bXhB-TipTyLh1QorUMpXNqA_IMi_ke_3-W_v8yKGMFBc1GmsHKdmyJSg2SU7K_pIrPFf5u8MnCEpP5-0EkcMQJjUw42J7cJ2au8MX_se_J1xAQD66GHRvU=N; expires=Wed, 21 Jan 2026 23:40:50 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation.OwqpDG2LliGBjsO3KAkz0HMcnR2QEJefabnyOAgR1Dk=N; expires=Wed, 21 Jan 2026 23:40:50 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;Secure;Domain=umyperformance.deloitte.com
Set-Cookie: ARRAffinitySameSite=877831193d83b9ea8d5b30232c1b94856f102beb0b38810dde176a2cf3a0a3fc;Path=/;HttpOnly;SameSite=None;Secure;Domain=umyperformance.deloitte.com
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=191
Server-Timing: origin; dur=17
Alt-Svc: h3=":443"; ma=93600
Akamai-GRN: 0.ce1d1002.1769037950.50be1200
Server-Timing: ak_p; desc="1769037950507_34610638_1354633728_20723_9065_8_14_-";dur=1

Found 2026-01-21 by HttpPlugin

Create report

Open service 20.55.76.246:443 · umyperformance.deloitte.com

2026-01-10 02:10

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 02:10:45 GMT
Location: https://login.microsoftonline.com/36da45f1-dd2c-4d1f-af13-5abe46b99921/oauth2/authorize?client_id=1c101599-9de2-4b3e-a6f6-c362f5dc1f55&redirect_uri=https%3A%2F%2Fumyperformance.deloitte.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639036078459521896.M2M2ZjdkNjktMWNlNC00MjUwLWE5OWQtY2U1YmM4ZGJkMzU1OTBiNGZiMzQtNGNhMy00ZTZhLTgwMjUtNjZjNjFmYjQ2MzU0&state=CfDJ8M9aOX4GqX1Eqg82A_TZceivQPr4_bdAnrpg08SZf7DII9r563lzR7rhT-sgJPi2ZGfT2TxfSgGpLGruwLwHKr8KU5rZMy2T2xFxEN89aOfIBo5BVIJn5CmcXNb9lZKmJS-tC5kfE3yLEwQ8mSgoIE1zZeoFl2_rS982ZsEgzqaz_eoEJPNsnlCG-TczUmX4TSX_Tr3rCyLXJU40F7s_4YAHShERQSug1Y1Okq133RoHQ0WfKf6Nbzz8Q21c9ivuzzF46aYcmHDwKC-xUVU5JcjwHLjscd9Cm9pKHEdzms_2hb-FR2lE6jDGlpD2NNp17A&x-client-SKU=ID_NET6_0&x-client-ver=6.21.0.0
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8M9aOX4GqX1Eqg82A_TZcehdsW2OfZOdZUa-Lan3r-i3MVzSTSiDzEKN6jar-4m_bMr0SMBq52xTFtiK9IAoruQNsbwyGeu3YFvyJTk7K8b-s99ct33OOfTNuziP3suL-NHD3pisIsSAe-5r3XoXV2XJJQsI6xI1yi2jCcDQ8pKQhBQY2peTQjihYNs5Q_NR5tjU3_5D9Wk1AzWO1NJd59lRZYeZ_yD2pIotOkE-btuLQAPfd3ABL_AYtFC2t7eSXaIXfsNnMOJOaPDJUF11kL8=N; expires=Sat, 10 Jan 2026 02:25:45 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation.PeI0BecjNZKRbJvVxG9hZR93VzDb0UqKuW_6LbP9DJg=N; expires=Sat, 10 Jan 2026 02:25:45 GMT; path=/signin-oidc; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=c0a474dda9e6a641cdfd87da4dd63e5da7fcfd28c61c218522d3eed85b01333a;Path=/;HttpOnly;Secure;Domain=umyperformance.deloitte.com
Set-Cookie: ARRAffinitySameSite=c0a474dda9e6a641cdfd87da4dd63e5da7fcfd28c61c218522d3eed85b01333a;Path=/;HttpOnly;SameSite=None;Secure;Domain=umyperformance.deloitte.com
Request-Context: appId=cid-v1:03d89648-943c-4704-858e-d08df74028f6
Content-Security-Policy: default-src 'self' data: https://login.microsoftonline.com https://deloitteus.demdex.net https://geolocation.onetrust.com https://papi.walkme.com https://cdn.walkme.com ;object-src 'none';style-src 'self' 'unsafe-inline' https://cdn.ckeditor.com ;img-src 'self' data: https://sstats.deloitte.com https://cm.everesttech.net  https://cdn.cookielaw.org https://dpm.demdex.net https://cdn.ckeditor.com https://s3.walkmeusercontent.com https://ec.walkme.com;frame-ancestors 'none';connect-src 'self' wss: https://ec.walkme.com https://papi.walkme.com https://cdn.walkme.com https://dc.services.visualstudio.com https://dpm.demdex.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://sstats.deloitte.com https://cke4.ckeditor.com https://eastus-1.in.applicationinsights.azure.com https://login.microsoftonline.com ;script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://cdn.walkme.com https://assets.adobedtm.com https://az416426.vo.msecnd.net https://cdn.cookielaw.org https://login.microsoftonline.com https://cdn.ckeditor.com https://papi.walkme.com ;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains

Found 2026-01-10 by HttpPlugin