by my experience it is usually caused by the other error that throws for example 500 error… thus the OPTION request does not work properly and browser thinks it is the cors error…
if you have private kmd/algod/indexer there is setting to set up the cors so that the requests can be handled only from your website
by my experience the public servers usually does not have cors setup