Hi @nijanthane, thanks for getting in touch.
Wordfence ?wordfence_syncAttackData=... query string URLs may load a page on your site when there’s no data pending to sync. The reason that can be bad though, is if Wordfence detects that syncs aren’t always happening, and regular visitors are triggering them. Page caching could be serving the same link to multiple users after a sync is done, hence why you’ve seen this in your analytics. I’ve noticed however that ?wordfence_lh=x&hid=... query strings also trigger your homepage whereas the expected behavior is to return a blank page. This can point to a theme or redirection plugin configuration issue where ALL non-pages are being told to default to your homepage rather than perform default actions such as return a 404 error etc.
I recommend clearing/purging any caches such as Advanced Caching plugin and/or server-side ones you may have to clear out the chance of this URL being served by mistake. I would also suggest that you contact your theme provider if this continues as invalid/not found pages should not be auto-redirecting as it always results in this kind of issue.
I notice you have several critical plugin update warnings from your Wordfence scan, so would also strongly suggest updating all of those as we can’t properly diagnose site issues when they may originate from a plugin/theme that has since been patched.
I hope that helps you out.
Thanks,
Peter.
