Oh sorry. I can help later. You just need to Google NIP-05 ID and go to the GitHub link and read the NIP-05 technical information. I don't believe it mentions CORS though. He'll need to enable CORS headers for NGINX or Apache, or whatever his webhost supports.