[orf]

I assume they make a preflight HEAD request the same as CORS, in which case they would have to be very sloppy to make that count towards the stats.

[realityking]

Nope. There's no preflight for X-Frame-Options, as it was designed as a click jacking prevention.