yes they are sent on a secure sever

We use ip filtering and the internal traffic has its own report suite we can view.

An abnormal spike coupled with Typed/Bookmarked referrals (i.e. direct traffic) and also with unusually large bounce rate sounds suspiciously like bot traffic. If these are bots, then they wouldn't normally save any cookies, let alone Adobe's visitor ID cookie. As a result, every hit is essentially a "new" visit. And since bots also normally don't send any document.referrer data, AA would then classify them as Typed/Bookmarked referrals.

Hi there, The s_fid cookie is set on the basis of the Tracking Server information. Now, if you have any of the below cookies set then the identification is not done by s_fid cookie and can be ignored:s_viAMCVs_ecid Basically, this s_fid is set in every server call regardless of what user identification cookie is set on the site.