Hi Bruce.
There’s nothing set up on this host other than what I detailed in my first post. It’s a fresh server, only Nginx, PHP, DB, and UFW installed (with a full exception made for Nginx). Where would such a ‘page setting’ be coming from?
EDIT: Aha! This is, of course, my own fault. Back on Pantheon, I wrote an mu-plugin that set security headers in an attempt to make the API accessible to another project as a data source for documentation. I disabled that plugin and stats are working.
Thanks.