your confidence in your answer allowed me to take another look:
Selected APIs:
- Geocoding API
- Geolocation API
- Maps Embed API <—— this API was not enabled.
- Maps JavaScript API <—– this API is what I thought it used.
- Maps Static API
- Places API
Added… and now it is working… WOW!!!!!!!!!!
hope this helps someone else.
Used the singularity and combination of both. with the www and non-www with wildcards * and without.
also tried IP restrictions, Regular IP and nslookup to get the proxy IP’s and use IPs instead, all of which failed.
Just to add this is the closest solution.. with no real meaning on how to add the headers. https://community.cloudflare.com/t/protect-your-google-api-key-on-cloudflare/221280/2