diff --git a/install.sh b/install.sh
index 74c9968..e2b1bbd 100755
--- a/install.sh
+++ b/install.sh
@@ -159,6 +159,17 @@ if [ "$HAS_APACHE" -eq 1 ] && [ -z "$APACHE_LOG" ]; then
             /var/log/apache2/other_vhosts_access.log /var/log/httpd/access.log; do
     [ -r "$_p" ] && { APACHE_LOG="$_p"; break; }
   done
+  # Panel-Hoster (KeyHelp, Plesk, cPanel) legen PRO DOMAIN eigene Logs an.
+  # Dann reicht der globale Pfad nicht — Glob deckt alle VHosts ab.
+  if [ -z "$APACHE_LOG" ]; then
+    for _d in /var/log/apache2 /var/log/httpd /home/*/logs /var/log/keyhelp; do
+      [ -d "$_d" ] || continue
+      if ls "$_d"/*access*.log "$_d"/access_log >/dev/null 2>&1; then
+        APACHE_LOG="$_d/*access*.log"
+        break
+      fi
+    done
+  fi
   if [ -z "$APACHE_LOG" ]; then
     # Aus der Config lesen (KeyHelp/Plesk setzen eigene Pfade)
     _cl="$(grep -rhoE '^\s*CustomLog\s+\S+' /etc/apache2/ /etc/httpd/ 2>/dev/null \