We need to include the x-requested-by header as allowed header in the server, but I'm not quite sure why is not included right now:
Access to XMLHttpRequest at 'https://peer-ap1.decentraland.zone/lambdas/profiles' from origin 'https://marketplace-qka1jpxj2-decentraland1.vercel.app/' has been blocked by CORS policy: Request header field x-requested-with is not allowed by Access-Control-Allow-Headers in preflight response.
We need to include the x-requested-by header as allowed header in the server, but I'm not quite sure why is not included right now: