Thanks! The issue with really with the htaccess.. somehow there was some duplication of expiration configuration there.. Strange..
But thanks, I worked it all out.
I gave up and disabled the Live Traffic and WordFence cookies features, and the request I was seeing isn’t happening any more. Yay!
Update: this is happening ONLY on the FRONT PAGE of the site, that is, https://hakolmutzar.co
Also, the site is hosted on bluehost, is a sub-site of another wordpress site. Does this affect anything?
Thanks!