From the http response headers it says your using a platform called "hostinger".
If thats true this might help https://support.hostinger.com/en/articles/6320787-do-you-support-cors
There is a note at the bottom that says the .htaccess file needs to be at the "origin source" which im presuming they mean put it at "public_html/.htaccess" and not in the ".well-known" folder.