missing-browser-headers
Standard browser headers absent (Accept, Accept-Language, etc.)
cloud-provider-asn
Traffic originates from cloud infrastructure (AWS/GCP/Azure)
suspicious-accept
Accept header pattern inconsistent with browser requests
header-order-anomaly
Request headers in alphabetical or non-browser order