TCP Service Fingerprinting with CORS-Denied HTTP Requests 🡪