Can someone tell me how these pageview statistics are even happening?

Also, just because you didn’t tell anyone about doesn’t mean it’s not discoverable.

For instance if you search for your domain in certificate transparency logs you’ll find the hostname of the site in question.