Yes, you will need to allow CORS

Access-control-allow-origin permissions in your web server. Follow my guide:

https://orangepill.dev/nostr-guides/guide-to-verify-nostr-profile-nip05-identifier-with-your-domain/