and what gives
db hosts show |grep www
I am pretty sure you have:
www.securitywarehouse.co.uk=host
some information about apache and apache log
on apache logs (what awstat uses) the domain name you see at the very beginning is the Virtualhost ServerName, whether you use an alias or the virtualhost name as a match it will only display the virtualhost ServerName. (SME put all matching host as serveralias in the virtualhost for servername directive)
in apache configuration file, if you get multiple matches for the same thing it has a really complexe way of solving this depending on in what type of context it is encountered (file, virtualhost, alias...) but for virtualhost it has tendency to merge them and with a serveralias matching another ServerName, there are chance that this is the first occurrence in the file that will win.
and again comes my question for the third time, and i will try to rephrase again :
why in the world would you need to have the www accounted separetly when it points to the exact same content ?