set +e
C=/www/server/panel/vhost/cert
echo "=== [B2] 证书目录实际文件 ==="
ls -la "$C/alotbuy.com/" 2>/dev/null | head -12
echo "--- 证书信息（取第一个 pem） ---"
for f in "$C/alotbuy.com"/*.pem; do [ -f "$f" ] && { echo "FILE: $f"; openssl x509 -in "$f" -noout -subject -issuer -dates 2>/dev/null; openssl x509 -in "$f" -noout -ext subjectAltName 2>/dev/null | tail -3; break; }; done
echo "=== [A2] alotbuy.com.conf 的 443 段 ==="
awk '/listen 443/,0' /www/server/panel/vhost/nginx/alotbuy.com.conf 2>/dev/null | grep -vE "set_real_ip_from|^$" | head -45
echo "=== [C2] 活动 lib/web 里 alotbuy 具体行 ==="
grep -rn "alotbuy" /opt/dshs/lib /opt/dshs/web 2>/dev/null | head -12
grep -n "alotbuy" /opt/dshs/package.json 2>/dev/null | head -4
echo "=== [D] ai1net 命中 ==="
grep -rl "ai1net" /opt/dshs 2>/dev/null | head -8
echo "=== [E] /etc/dshs.env 全部键名（只报键，不报值） ==="
grep -oE "^[A-Za-z_][A-Za-z0-9_]*" /etc/dshs.env 2>/dev/null | sort -u | tr '\n' ' ' | head -c 1200
echo
grep -inE "domain|origin|portal|cookie|url" /etc/dshs.env 2>/dev/null | sed 's/=.*/=<值已隐藏>/' | head -12
echo "=== [F] BT DNS 凭据存在性 ==="
for p in /www/server/panel/data/dns_accounts.json /root/.acme.sh/account.conf /www/server/panel/config/panel.json; do
  [ -f "$p" ] && echo "存在: $p ($(wc -c < "$p") B)" || echo "不存在: $p"
done
echo "=== [G] relay-direct.conf server_name ==="
grep -nE "server_name|listen|proxy_pass" /www/server/panel/vhost/nginx/relay-direct.conf 2>/dev/null | head -12
echo "=== [H] dsh.alotbuy.com.conf 是否仍在生效 ==="
grep -nE "server_name|listen|proxy_pass|root " /www/server/panel/vhost/nginx/dsh.alotbuy.com.conf 2>/dev/null | head -14
echo "=== [I] nginx -T 里 alotbuy 出现次数 ==="
nginx -T 2>/dev/null | grep -c "alotbuy"
echo "=== [J] 80/443 监听 ==="
ss -lntp 2>/dev/null | grep -E ":443 |:80 " | head -6