On the other hand, if there is anything in the response (probably the body) to improve the fingerprint would be awesome. Fingerprinting having into account only the response code can easily lead to false positives