Oh, now I see where the problem is. You’ve specified Domain Control and any requests which arrives from another domain are blocked.
Regards, Vlad