—
Total Orders
—
Active Services
—
Pending
—
Open Tickets
—
Est. Monthly Revenue
—
Failed / Needs Attention
🚨
4 Unpaid InterServer Invoices — $104.90 Due
VPS vps2334819 ($96/mo) and vps2789125 ($6/mo) may be suspended if not paid. Login pin: 433409
Revenue by Service Type
Loading...
Orders by Status
Loading...
Recent Orders
| Customer | Plan | Amount | Status | Date | Actions |
|---|---|---|---|---|---|
| Loading... | |||||
All Orders
| Customer | Plan | Billing | Amount | Status | Date | Actions |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Active Services
| Customer | Plan | Type | Domain / Username | Status | Control Panel | Actions |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Support Tickets
| Customer | Subject | Priority | Status | Date | Actions |
|---|---|---|---|---|---|
| Loading... | |||||
Provisioning Jobs
| Order ID | Service Type | Status | Attempts | Error | Date | Actions |
|---|---|---|---|---|---|---|
| Loading... | ||||||
💳
4 Unpaid Invoices — Total: $104.90
Pay immediately to avoid VPS suspension. Use Call-in Pin: 433409 if calling support.
📊 Account Summary
Account NameWilliam Berry
Emailwilliam@assistaboss.com
Call-In PIN433409
Prepay Balance$0.00
Unpaid Invoices4 invoices
Amount Due$104.90
Open Support TicketVBC-404-71314
🌐 Web Hosting Accounts
tyte-hosting.com✅ Active
Control PanelWHM Panel →
WHM Usertytehost
Server IP162.250.122.132
tyte-comp.com✅ Active
New Account IP162.250.124.218
WHM Hostnamewebhosting2010.is.cc
🔐 Licenses (3 Active)
72.239.40.90Active
208.73.203.109Active
208.73.203.109Active
🏦 Synology NAS
ModelRS2414rp+
DSM7.1.1
Public IP38.59.20.111
DSM Port5000
Admin Userhome
DSM Status✅ Online
⚡ VPS Servers
2 active / 5 canceled| ID | Server Node | Hostname | IP Address | Package | Cost/mo | Status | Action |
|---|---|---|---|---|---|---|---|
2334819 |
KVM432 | vps2334819 | 208.73.203.109 |
KVM Linux VPS — 32 Slices | $96.00 | Active | Manage |
2789125 |
KVM436 | vps2789125 | 162.250.120.204 |
KVM Linux VPS — 2 Slices | $6.00 | Active | Manage |
2327439 | OpenVZ76 | server.tyte-hosting.com | — | Virtuozzo VPS | $60.00 | Canceled | — |
2349314 | KVM313 | vps2349314 | — | KVM Windows VPS | $80.00 | Canceled | — |
2349321 | KVM313 | vps2349321 | — | KVM Windows VPS | $80.00 | Canceled | — |
2349328 | KVM313 | vps2349328 | 67.211.223.28 |
KVM Windows VPS | $100.00 | Canceled | — |
2349335 | KVM313 | vps2349335 | 66.45.230.25 |
KVM Windows VPS | $80.00 | Canceled | — |
💰 Monthly Infrastructure Cost
🖥️ VPS Costs
vps2334819 (32 slices)$96.00/mo
vps2789125 (2 slices)$6.00/mo
VPS Total$102/mo
🏠 Web Hosting
tyte-hosting.com reseller~$25/mo
tyte-comp.com account~$5/mo
Hosting Total~$30/mo
📊 Summary
Total Infrastructure~$132/mo
Break-even customers~18 customers @ $7.99
Current unpaid$104.90
Portalmy.interserver.net →
💡 These are services you can add to tyte-hosting.com right now — sourced from your InterServer account. Each shows your cost, suggested retail price, and margin. Mark as active when you add them to the pricing page.
⚡ VPS / Cloud Hosting
InterServer KVM — $3/slice cost
NEW
🟢
Linux VPS Starter
1 vCPU · 2GB RAM · 40GB SSD · 2TB transfer. Self-managed KVM. Perfect entry-level VPS.
Sell at $9.99/mo
Your cost: $3.00/mo (InterServer 1 slice)
📈 Margin: ~233% / $6.99 profit per customer
NEW
🔵
Linux VPS Standard
2 vCPU · 8GB RAM · 160GB SSD · 8TB transfer. Great for small apps & dev environments.
Sell at $24.99/mo
Your cost: $12.00/mo (4 slices)
📈 Margin: ~108% / $12.99 profit
🔥 HOT
⚡
Linux VPS Pro
4 vCPU · 16GB RAM · 320GB SSD · 16TB transfer. Managed support included. Ideal for growing sites.
Sell at $49.99/mo
Your cost: $24.00/mo (8 slices)
📈 Margin: ~108% / $25.99 profit
NEW
🚀
Linux VPS Business
8 vCPU · 32GB RAM · 640GB SSD · 32TB transfer. Managed support. High-traffic production ready.
Sell at $119.99/mo
Your cost: $48.00/mo (16 slices)
📈 Margin: ~150% / $71.99 profit
🪟 Windows VPS
Windows Server + RDP — high margin niche
NEW
🪟
Windows VPS Basic
1 vCPU · 2GB RAM · 40GB SSD. Windows Server + Remote Desktop. Perfect for SMB Windows apps.
Sell at $19.99/mo
Your cost: ~$5.00/mo (InterServer Windows 1 slice)
📈 Margin: ~300% / $14.99 profit
🔥 HOT
💼
Windows VPS Pro
2 vCPU · 8GB RAM · 160GB SSD. RDP included. QuickBooks, accounting software, business apps.
Sell at $44.99/mo
Your cost: ~$20.00/mo (4 slices)
📈 Margin: ~125% / $24.99 profit
NEW
🏢
Windows VPS Enterprise
4 vCPU · 16GB RAM · 320GB SSD. RDP + managed support. For SQL Server, ERP, and enterprise apps.
Sell at $89.99/mo
Your cost: ~$40.00/mo (8 slices)
📈 Margin: ~125% / $49.99 profit
🖥️ Dedicated Servers
On-demand from InterServer — zero hardware overhead
NEW
🖥️
Dedicated Starter
Entry-level bare metal. 4 cores, 16GB RAM, 1TB HDD. Full root access, 10Gbps port.
Sell at $129.99/mo
Your cost: ~$79/mo (InterServer rapid deploy)
📈 Margin: ~64% / $50.99 profit
NEW
💪
Dedicated Pro
8 cores, 32GB RAM, 2TB SSD. Full management available. For high-traffic sites & databases.
Sell at $249.99/mo
Your cost: ~$159/mo
📈 Margin: ~57% / $90.99 profit
NEW
🎮
GPU Dedicated Server
GPU-equipped bare metal. AI/ML workloads, video rendering, high-performance computing.
Sell at $499.99/mo
Your cost: ~$299/mo
📈 Margin: ~67% / $200.99 profit
🎮 Gaming Servers
High-margin niche — few local competitors
🔥 HOT
⚔️
Minecraft Server
2 vCPU · 4GB RAM · SSD. Runs on your KVM VPS. Up to 20 players. Java & Bedrock editions.
Sell at $14.99/mo
Your cost: ~$6.00/mo (2 slices)
📈 Margin: ~150% / $8.99 profit
NEW
🎯
Game Server Pro
4 vCPU · 8GB RAM. Valheim, ARK, CS2, Rust, Palworld. DDoS protection included.
Sell at $29.99/mo
Your cost: ~$12.00/mo (4 slices)
📈 Margin: ~150% / $17.99 profit
NEW
🏆
Game Server Elite
8 vCPU · 32GB RAM. 100+ player servers, multiple game instances, DDOS-protected 10Gbps.
Sell at $79.99/mo
Your cost: ~$36.00/mo (12 slices)
📈 Margin: ~122% / $43.99 profit
📧 Private Email Hosting
Resell InterServer mailboxes at 3x margin
✅ LIVE
📧
Business Email — Starter
5 mailboxes · 25GB each · Webmail + SMTP. Already running on tyte-hosting.com cPanel.
Sell at $4.99/mo
Your cost: ~$1.50/mo
📈 Margin: ~233%
✅ LIVE
🏢
Business Email — Pro
25 mailboxes · 50GB each · SMTP/IMAP · Spam filtering. WHM cPanel email only plan.
Sell at $14.99/mo
Your cost: ~$4.00/mo
📈 Margin: ~275%
NEW
📬
Premium Email — Enterprise
Unlimited mailboxes · 100GB storage · 24/7 support · Custom domain routing. High-value upsell.
Sell at $29.99/mo
Your cost: ~$8.00/mo
📈 Margin: ~275%
☁️ Synology Cloud / NAS Storage
Already provisioned — zero additional cost
✅ LIVE
☁️
Cloud Storage — Personal
100GB NAS space · Synology Drive app · Shared folders · Auto-provisioned on RS2414rp+.
Sell at $4.99/mo
Your cost: ~$0.50/mo (storage only)
📈 Margin: ~900%+
✅ LIVE
🏢
Cloud Storage — Business
500GB NAS space · Priority access · Custom folder structure · Synology C2 backup option.
Sell at $14.99/mo
Your cost: ~$2.00/mo
📈 Margin: ~650%
💰 Revenue Potential — If You Add All Packages
📊 Scenario: 5 Customers Each
Linux VPS (5×$24.99)$124.95
Windows VPS (5×$44.99)$224.95
Game Servers (5×$29.99)$149.95
Email (10×$14.99)$149.90
Potential MRR$649.75
🔑 Quick Wins — Start Here
1. Windows VPSHighest margin
2. Game ServersLow competition
3. Linux VPS bundlesHigh volume potential
4. Email upgradesAlready running
Pay invoices first!$104.90 due now
🚨
Security Audit Completed — Apr 26, 2026 8:04 PM ET
42 accounts scanned. Active backdoor campaign detected on advertising.menu. 16 malicious files neutralized. 8 require manual deletion. 6 IPs blocked at .htaccess level. All attacks on tyte-hosting.com itself were blocked (404).
42
Accounts Scanned
16
Files Neutralized
8
Need Manual Delete
6
IPs Blocked
1,012
Attacks Blocked (Apr)
1
Compromised Account
🕐 Action Timeline — TyTe Brian Automated Response
| Time (ET) | Action | Target | Result |
|---|---|---|---|
| Apr 26 · 8:04 PM | SCAN | All 42 cPanel accounts — public_html recursive file scan | COMPLETE |
| Apr 26 · 8:05 PM | SCAN | Apache access logs — POST uploads, webshell probes, LFI attempts | COMPLETE |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 168.144.109.49 (webshell scanner) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 2.26.252.141 (LFI/pearcmd RCE attacker) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 107.172.163.237 (WP brute force) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 154.37.82.204 (WP brute force) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 52.161.59.100 (LFI /etc/passwd probe) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — IP block: 45.94.31.229 (zwso.php scanner) | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — xmlrpc.php blocked server-wide | BLOCKED |
| Apr 26 · 8:06 PM | BLOCK | .htaccess — FilesMatch rule blocks shell/wso/c99/r57/b374k/alfa by name | ACTIVE |
| Apr 26 · 8:08 PM | NEUTRALIZE | [ppnchats] assets/phpinfo.php — overwrote with 403 response | DONE |
| Apr 26 · 8:08 PM | NEUTRALIZE | [ppnchats] assets/init.php — overwrote with 403 response | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] about.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] defaults.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] ex.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] goods.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] inputs.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] mah.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] pages.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] product.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] radio.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] search.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] test.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] test123Cp.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] unzip.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] well-knownedit.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] wp-anita.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] wp-login.php — overwrote with 403 | DONE |
| Apr 26 · 8:09 PM | NEUTRALIZE | [advertising] uploaded_script.php — overwrote with 403 | DONE |
⚠️ MANUAL ACTION REQUIRED — 8 Files in Protected Directories (CageFS)
These files exist inside the advertising.menu account's CageFS jail — the reseller API cannot overwrite them. You must log into that cPanel account directly and delete them via File Manager.
🗑️ /home/advertising/public_html/assets/wp-log1n.php
🗑️ /home/advertising/public_html/assets/task.php
🗑️ /home/advertising/public_html/assets/inc.php
🗑️ /home/advertising/public_html/assets/index.php
🗑️ /home/advertising/public_html/images/index.php
🗑️ /home/advertising/public_html/images/item.php
🗑️ /home/advertising/public_html/images/plugins.php
🗑️ /home/advertising/public_html/images/product.php
Login: tyte-hosting.com:2083 → switch to account "advertising" → File Manager
🌐 Attack Traffic Summary (Apr 2026)
Total POST-to-script hits1,012
Successfully blocked (404)1,007
Legitimate (your WHM admin)5
xmlrpc.php attacks440
wp-login.php attacks232
Webshell scan attempts26
LFI attempts6
phpMyAdmin probes11
🚨 Confirmed Compromised Account
Accountadvertising (advertising.menu)
Files found25 suspicious PHP files
Neutralized17 files
Still need deletion8 files
Infection datesApr–Jul 2025
ActionDelete remaining + change cPanel password
🔒 Protections Now Active
168.144.109.49Blocked (webshell scanner)
2.26.252.141Blocked (LFI attacker)
107.172.163.237Blocked (WP brute force)
154.37.82.204Blocked (WP brute force)
52.161.59.100Blocked (LFI probe)
45.94.31.229Blocked (shell scanner)
xmlrpc.phpBlocked server-wide
Shell filenamesFilesMatch rule active
🚨
Security Audit — availabletradeinternational.com — Apr 26, 2026 8:32 PM ET
9 accounts scanned on second server. CRITICAL: Live API credentials, full database exports, server recon scripts, and AI config were publicly accessible at root. All data removed from web-accessible paths. 10 files relocated to private directory.
9
Accounts Scanned
7
CRITICAL Exposures
10
Files Secured
4
WP Installs w/ Injected File
5
Suspended Accounts
2
Active & Clean
🚨 CRITICAL — Files That Were Publicly Accessible (Now Secured)
| File | Risk | Action Taken | Status |
|---|---|---|---|
| credentials.txt | Live API keys exposed Streamline API, Modal-X API, shipcsx.com password |
Content wiped → moved to private_data/ | SECURED |
| orders.json | Full TMS database export — customer orders | Wiped → moved to private_data/ | SECURED |
| quotes.json | Full TMS database export — customer quotes | Wiped → moved to private_data/ | SECURED |
| orders_result.json | Extended order dataset — 2.1MB exposed | Moved to private_data/ | SECURED |
| quotes_result.json | Extended quotes dataset — 1.4MB exposed | Moved to private_data/ | SECURED |
| whoami.php | Server recon — exposed server path (DOCROOT) | Neutralized → moved to private_data/ | SECURED |
| llm_config.py | AI config — LLM provider settings & structure | Moved to private_data/ | SECURED |
| v2_api_endpoints_spec.php | Full API blueprint — internal routes exposed | Moved to private_data/ | SECURED |
| orders_export.php / quotes_export.php | DB export scripts — could re-dump live data | Neutralized (403) → moved to private_data/ | SECURED |
| avail_amd.sql | Raw SQL dump — full database schema + data | Apache blocks .sql extension (403) | BLOCKED |
🕐 Action Timeline — TyTe Brian Automated Response
| Time (ET) | Action | Target | Result |
|---|---|---|---|
| Apr 26 · 8:32 PM | SCAN | All 9 cPanel accounts — file & directory enumeration | COMPLETE |
| Apr 26 · 8:33 PM | CRITICAL | credentials.txt — live API keys (Streamline, Modal-X, shipcsx) detected as public | CONFIRMED |
| Apr 26 · 8:33 PM | CRITICAL | orders.json / quotes.json — full TMS database exports publicly accessible | CONFIRMED |
| Apr 26 · 8:33 PM | HIGH | whoami.php — live recon tool returning server DOCROOT path | CONFIRMED |
| Apr 26 · 8:35 PM | HIGH | class-wp-matchesmapregex.php — non-standard file injected into wp-includes on 4 accounts (riskprox, bizopstech, mtnpayments, optiopps) | FLAGGED |
| Apr 26 · 8:38 PM | SECURE | credentials.txt — content wiped, file moved to /home/avail/private_data/ | DONE |
| Apr 26 · 8:38 PM | SECURE | orders.json, quotes.json, orders_result.json, quotes_result.json — moved to private_data/ | DONE |
| Apr 26 · 8:38 PM | SECURE | whoami.php, llm_config.py, orders_export.php, quotes_export.php, v2_api_endpoints_spec.php — moved to private_data/ | DONE |
| Apr 26 · 8:40 PM | VERIFY | All 10 files confirmed returning 0 bytes or HTTP 403/404 | CLEAN |
📋 Account Status
avail (availabletradeinternational.com)⚠️ Active — Secured
shipati (ship-ati.net)✅ Clean
fire (fireantsupplies.com)✅ Clean
shipjcl (ship-jcl.com)✅ Clean
elevatedcontract✅ Suspended — Clean
riskprox (riskprox.com)🚨 Suspended — Injected file
bizopstech (bizops-tech.com)🚨 Suspended — Injected file
mtnpayments (mtnpayments.com)🚨 Suspended — Injected file
optiopps (optiopps.com)🚨 Suspended — Injected file
⚠️ Manual Actions Required
The following require action via SSH or cPanel File Manager:
1. ROTATE EXPOSED API CREDENTIALS IMMEDIATELY
• Streamline API key — XXXA432 / vMxTOZbeCwu44MNpLlRC
• Modal-X API key — N49K5XD3... and N49CJHSJ...
• shipcsx.com password — 1029E / nqLQ@s)@
⚡ These were publicly readable — rotate all now
• Modal-X API key — N49K5XD3... and N49CJHSJ...
• shipcsx.com password — 1029E / nqLQ@s)@
⚡ These were publicly readable — rotate all now
2. Remove injected file from 4 suspended WP accounts
/wp-includes/class-wp-matchesmapregex.php
Accounts: riskprox, bizopstech, mtnpayments, optiopps
Accounts: riskprox, bizopstech, mtnpayments, optiopps
3. Add .htaccess via SSH (API blocked by LiteSpeed)
ssh root@availabletradeinternational.com
nano /home/avail/public_html/.htaccess
# Add: Options -Indexes + IP blocks
nano /home/avail/public_html/.htaccess
# Add: Options -Indexes + IP blocks
4. Remove large backup files from public webroot
Multiple BACKUP_*.zip and .zip files in /public_html
Largest: SALI_SERVER_DEPLOY.zip (~32GB) — publicly accessible path
Largest: SALI_SERVER_DEPLOY.zip (~32GB) — publicly accessible path
📢 What Was Exposed & For How Long
credentials.txt — Created Apr 13, 2026. Was publicly accessible for ~13 days before this audit. Contains API keys for 3 external services.
orders.json / quotes.json — Created Sep 11, 2025. Exposed for ~7 months. Full TMS dataset (~375KB orders, ~667KB quotes).
orders_result.json / quotes_result.json — Created Sep 12, 2025. Exposed for ~7 months. Extended exports (2.1MB + 1.4MB).
whoami.php — Created Nov 16, 2025. Exposed server path for ~5 months.
avail_amd.sql — Oct 23, 2025. Apache blocked .sql extension — never directly accessible. ✅
class-wp-matchesmapregex.php — Non-standard file in wp-includes on 4 suspended accounts. Accounts are suspended so not currently exploitable, but should be cleaned before reactivating.
orders.json / quotes.json — Created Sep 11, 2025. Exposed for ~7 months. Full TMS dataset (~375KB orders, ~667KB quotes).
orders_result.json / quotes_result.json — Created Sep 12, 2025. Exposed for ~7 months. Extended exports (2.1MB + 1.4MB).
whoami.php — Created Nov 16, 2025. Exposed server path for ~5 months.
avail_amd.sql — Oct 23, 2025. Apache blocked .sql extension — never directly accessible. ✅
class-wp-matchesmapregex.php — Non-standard file in wp-includes on 4 suspended accounts. Accounts are suspended so not currently exploitable, but should be cleaned before reactivating.