Seeing this, it looks as if there could be a simple workaround to protect anybody who thinks they might be infected, by getting their webserver / proxy to block

Seeing this, it looks as if there could be a simple workaround to protect anybody who thinks they might be infected, by getting their webserver / proxy to block all incoming http requests with any of these headers.