Access Control Header Not Working

I have set an Access-Control-Allow-Origin header to a https://www.ocday-data.com, but the https://www.ocday-data.com is still disallowed. Moreover if I do an inspect headers test, access-control-allow-origin is listed under the Missing Headers section?

The page I need help with: [log in to see the link]