but it didn’t came from those who have purchased it.
How do you know this? Do you personally know every person that purchased it? Did you maybe download some files yourself? Could it be that one of the buyers decided to re-download the project, or whatever reason?
Paid projects have to be approved by an admin to be indexed, so maybe an admin downloaded it. Not sure if that would show up in the analytics.