Domain Name Canonical

Site URL: https://www.norskved.co.uk/

Whilst reviewing analytical data for the website found that Analytics is reporting the following  4 x URLs bringing traffic to the website:

/
https://www.norskved.co.uk/home?noredirect=true
https://www.norskved.co.uk/www.norksved.co.uk
/home
This is in effect suggesting to Google duplicate content as each URL serves up the home page of the website.
The configuration within SquareSpace looks correct when reading through support literature. However, there is a feeling here that somewhere the site is able to ping out this information yet there doesn't seem to be any settings found that would correct this action. Has anyone else experienced this in their SquareSpace site and what have they done to ensure that the site does serve up the primary canonical address and that being the primary only which is https://www.norskved.co.uk and of course report that one and only domain in Analytics as / which would be the desired result, and Google not pick up on the others.