The source is "Direct" when any of the below occurs:

- User entered the site URL in browser address bar itself
- User visited the site by a browser-maintained bookmark
- User visited the site as first page in the window/tab
- User clicks on a link in an e-mail from Outlook or Thunderbird or similar desktop software
- User clicks on a link in Skype or other desktop messengers
- User clicks on a link in a PDF, DocX, ODF, XLSX or a different type of document
- User clicks on a link in a mobile app
- User clicks on a link from a secured site (https://something) to your non-secured site (just http://something)
- User clicks through a URL-shortener or in a different scenario where certain JS is being used (rare)
- User clicks on a link in any desktop software in general
- User has security software installed (antivirus/firewall/etc) which strips the referrer from all requests
- User is behind a proxy which strips the referrer from all requests.
- User visited the site programmatically (like, curl) without setting the referrer header (searchbots!)