If you can look closer at the HTTP requests, it may still be distinct. For example, the header order may not match any legitimate browser, or some other header

If you can look closer at the HTTP requests, it may still be distinct. For example, the header order may not match any legitimate browser, or some other header doesn't make sense in the context of that UA.