Expresse remova o X-Powered-By

app.disable('x-powered-by');
Silly Swiftlet