diff --git a/src/registrar/config/settings.py b/src/registrar/config/settings.py
index 2a0a205ea..37c661e16 100644
--- a/src/registrar/config/settings.py
+++ b/src/registrar/config/settings.py
@@ -300,7 +300,7 @@ CSP_FORM_ACTION = allowed_sources
 # Sets clients that allow access control to manage.get.gov
 # TODO: remove :8080 to see if we can have all localhost access
 CORS_ALLOWED_ORIGINS = ["http://localhost:8080", "https://beta.get.gov"]
-CORS_ALLOWED_ORIGIN_REGEXES = [r"https:\/\/[\w-]+\.sites\.pages\.cloud\.gov"]
+CORS_ALLOWED_ORIGIN_REGEXES = [r"https://[\w-]+\.sites\.pages\.cloud\.gov"]
 
 # Content-Length header is set by django.middleware.common.CommonMiddleware