Query log detail does not know source if it is a www. domain

Nebulo treats www.example.com and example.com as the same hosts and only imports the latter. When a query for www.example.com is received it is properly blocked, but the query log detail can't find the rule source as it tries to search for a direct match for www.example.com.