Professional GSM Unlock Platform

EASY-GSM — The Ultimate CMS for Unlock Services

100% compatible with DHRU Fusion. Run as a server or connect to providers. Full admin panel, mobile app, payments, and automation — all in one platform.

Try Live Demo Sales & Activation Developer Login Register

Languages

Payment Gateways

API Protocols

DHRU + EasyGSM API

Platforms

Android & Windows now · iOS soon

See EASY-GSM in action

Explore the full admin and user panel with sample data — no signup required.

Launch Demo

Main Features

Everything you need to run and scale your unlock service business.

Service Management

IMEI, SERVER, REMOTE, and FILE service types. Groups, pricing per client group, custom fields, and bulk operations.

Order Management

Automatic statuses, auto-processing, full and partial refunds, retries, and full order history with search and filters.

Admin Panel

Dashboard with stats, revenue charts (1d to 1y), quick actions, users, services, orders, providers, and settings.

User Panel

Service catalog, order history, deposits, API keys with IP whitelist, profile, and security (2FA, password).

Multi-Currency

Multiple currencies, configurable exchange rates, base currency, and automatic conversion for pricing and balance.

Multi-Language

11 languages: Spanish, English, Portuguese, French, German, Russian, Chinese, Arabic, Turkish, Vietnamese, and Bengali — with RTL support for Arabic.

Communication: Server, Client & EasyGSM API

EASY-GSM works as a Server (expose your services via DHRU API), as a Client (connect to multiple DHRU providers), and via the EasyGSM API (real-time webhooks between CMS servers).

Server Mode

Expose your catalog and accept orders through the 100% DHRU Fusion–compatible API. Full control over services and pricing.

Client Mode

Connect to multiple DHRU providers. Automatic catalog sync, priority-based order routing, and balance tracking per provider.

EasyGSM API

NEW

Our proprietary real-time communication protocol between CMS servers. Features HMAC-SHA256 signed requests, instant webhooks for order updates, automatic catalog sync events, balance notifications, circuit breaker protection, and intelligent rate limiting. The next evolution beyond DHRU polling.

Multi-provider support • Automatic sync • Configurable priorities • Selective group sync

Protocol Comparison

EasyGSM API vs DHRU Standard

Compare the CMS-to-CMS communication protocols. EasyGSM API is our next-generation protocol built for real-time operations and security.

Feature

DHRU Standard

EasyGSM API

Order placement

Status polling

Catalog sync

Manual

Auto + Events

Real-time webhooks

HMAC-SHA256 security

Replay protection

Nonce + Timestamp

Balance notifications

Pricing change events

Circuit breaker

Intelligent rate limiting

60 req/min

Idempotent orders

Auto re-handshake

Score

3 / 12

12 / 12

Both protocols are supported. EasyGSM API is recommended for CMS-to-CMS connections for optimal performance and security.

See the full CMS in action

Every admin and user screen, one at a time. Explore 21 reference sections below.

Reference only. The sections below are a preview for reference — they do not show 100% of the CMS. The full product includes more screens, options, and features.

Also in the CMS (not all shown here): License management, SSL / Let's Encrypt, Telegram bot config, Landing page builder, Network debug logs, 2FA for users, Deposit history, Settings (General, Appearance, Telegram, Landing), API documentation, Admin notifications (in-app and Telegram), Client groups and pricing, Currencies, Activity logs, Payment gateways, DHRU providers, and more.

Or try the live demo instead

1. Admin Dashboard

Users

1,248

Orders today

Pending

Revenue

$342.50

Services

Orders & revenue chart

Recent orders

#ORD-8821Done

#ORD-8820Pending

Your balance

$125.00

Total orders

Today

Completed

Pending

Recent orders

#ORD-8818Completed

#ORD-8817Pending

Recent transactions

Deposit+$50.00

Order-$12.00

IMEI~5 min

iPhone IMEI Unlock

Carrier unlock by IMEI

$8.99

SERVER~15 min

Samsung Server Unlock

Server-based unlock

$12.50

REMOTE~30 min

Android FRP Remove

Remote service

$15.00

Reference	User	Service	IMEI	Price	Status
#ORD-8822	client1	iPhone IMEI Unlock	351234567890123	$8.99	Pending
#ORD-8821	reseller_x	Samsung Server	—	$25.00	Completed
#ORD-8820	john_doe	Android FRP	358001234567890	$15.00	Completed

Username	Email	Balance	Group	2FA
reseller_gold	gold@example.com	$1,240.00	Gold
client_abc	abc@mail.com	$85.50	Default	—
silver_shop	shop@store.com	$320.00	Silver

Provider Alpha

https://api.alpha-dhru.com

ConnectedBalance: $450

Provider Beta

https://beta.unlocks.com

ConnectedBalance: $1,200

MercadoPago

Checkout Pro · Sandbox off

Active

NOWPayments

150+ cryptos · IPN

Active

Binance Pay (C2C)

QR · HMAC-SHA256 polling

Active

QvaPay

USD hosted checkout

Active

S-PayWay

Hosted · HMAC-SHA256

Active

Manual Payment

Bank · WU · Zelle · proof upload

Active

Name	Type	Group	Price	Status
iPhone IMEI Unlock	IMEI	iPhone	$8.99	Active
Samsung Server Unlock	SERVER	Samsung	$12.50	Active
Android FRP Remove	REMOTE	Android	$15.00	Active

Available balance

$125.00

Select payment method

MercadoPago

Binance Pay

Amount (USD)

Recent deposits: #DEP-101 $50 · #DEP-100 $25

eg_••••••••••••••••••••••••k9x2Active

IP whitelist: 192.168.1.0/24 · Last used: 2 min ago

eg_••••••••••••••••••••••••m4p1Active

No IP restriction · Last used: 1 day ago

Service

iPhone IMEI Unlock

IMEI · ~5 min · $8.99

IMEI

Total$8.99

Primary color

Secondary color

Font

Inter

Logos

Logo

Dark

Favicon

Date	User	Type	Amount	Ref
2025-02-15 14:32	client1	Deposit	+$50.00	#DEP-102
2025-02-15 14:28	reseller_x	Order	-$25.00	#ORD-8821
2025-02-15 13:10	john_doe	Deposit	+$100.00	#DEP-101

Order completed

#ORD-8821 completed successfully.

2 min ago

New order

Order #ORD-8822 is pending.

5 min ago

Balance credited

Deposit #DEP-102 credited to client1.

10 min ago

Name	Display order	Status
Gold (Reseller)	1	Active
Silver	2	Active
Default	3	Active

Pricing per group · Used for reseller tiers

Code	Symbol	Rate	Base
USD	$	1.00	Yes
EUR	€	0.92	—
BRL	R$	4.98	—

#ORD-8822iPhone IMEI Unlock

Pending

#ORD-8821Samsung Server Unlock

Completed

#ORD-8820Android FRP Remove

Completed

John Doe

john_doe · john@example.com

LanguageEnglish

TimezoneUTC-5

CurrencyUSD

2FAEnabled

Time	User	Action	Details
2025-02-15 14:35	admin	Login	IP 192.168.1.1
2025-02-15 14:32	client1	Deposit	+$50.00
2025-02-15 14:28	reseller_x	Order placed	#ORD-8821

GeneralAppearanceLandingTelegramSSL

Site name

EASY-GSM Shop

Site URL

https://myshop.com

Support contact

wa.me/myshop

Allow registrationYes

DashboardBlocksAllowlistEventsSessionsConfig

Blocked now

128

Blocks 24h

412

Allowlist

Cache age

Recent blocksauto-refresh 10s

IP	Reason	Source	Expires
203.0.113.42	scanner UA (sqlmap)	auto	in 2h 11m
198.51.100.7	honeypot /.env	auto	in 47m
192.0.2.99	manual (abuse report)	manual	permanent

Integrations

Six payment gateways, four unlock providers, Telegram, and SSL — all integrated out of the box.

EasyGSM API

NEW

Real-time webhooks, HMAC-SHA256 security, automatic catalog sync, balance updates, pricing events, circuit breaker, and rate limiting. The modern alternative to DHRU polling.

DHRU Fusion

100% compatible API, catalog sync, automatic order processing, and status checks.

MercadoPago

Checkout Pro, webhooks with HMAC validation, sandbox and production modes.

Binance Pay (C2C)

QR-based C2C deposits with HMAC-SHA256 verification against the Binance Pay merchant API. Admin uploads QR + API credentials.

NOWPayments

Accept 150+ cryptocurrencies with instant conversion, IPN callbacks signed with HMAC-SHA512, and auto-deposits.

QvaPay

Hosted USD checkout with double verification — webhook signature plus active GET re-check before crediting balance.

S-PayWay

Hosted checkout with HMAC-SHA256 signed webhooks. Tolerates clock drift and ships parity-tested against the official PHP SDK.

Manual Payment

Bank transfer, Western Union, Zelle, MoneyGram — any off-platform method. User uploads receipt (re-encoded JPEG, EXIF stripped); admin reviews and approves.

Chimera Tool & Octoplus Box

Native clients for Chimera Tool and Octoplus Box providers, beyond DHRU and EasyGSM API. Endpoints hardcoded for SSRF safety.

Telegram Bot

Real-time admin notifications, /addcredits command, multi-admin chat IDs, and optional security alerts on critical events.

Let's Encrypt SSL

Bundled certbot/ACME — automatic certificate issuance, auto-renewal 30 days before expiry, and HTTPS enforcement.

REST API

DHRU endpoints, mobile API, webhooks for payments and order feedback.

Security

Enterprise-grade security to protect your platform and your users. For the dedicated admin operations panel, see Cybersecurity Center.

2FA

TOTP via Google Authenticator with anti-reuse and bcrypt-hashed recovery codes.

AES-256

Encryption for sensitive data and payment credentials, plus HMAC-SHA256 webhook signing.

Anti-DDoS

Progressive IP blocking with cross-worker Redis sync and configurable rate limiting.

Hardening

SQL injection, XSS, path traversal and null-byte protection; honeypot tarpits; strict CSP and HSTS headers.

NEW

Cybersecurity Center

A dedicated admin panel under /admin/security to operate the firewall in real time: block IPs, manage allowlists, watch live events, revoke sessions, and tune rate limits — all from one consolidated UI.

Real-time Dashboard

KPIs auto-refreshed every 10 seconds via HTMX: blocked now, blocks in 24h and 7d, allowlist size, and IP-cache health.

Progressive IP Blocking

Fail2ban-style escalation with exponential backoff (capped at 4h), Redis-replicated across workers, allowlist short-circuit, and per-IP block history.

Live Security Events

Server-Sent Events stream with severity, type, IP and user filters. CSV export. Bulk-block up to 1000 IPs at once with one-click undo.

Login Lockout per (User, IP)

Anti-DoS for accounts: Redis counter with DB fallback, configurable threshold and lockout duration. Admins can release lockouts from the panel.

Sessions & Revocation

List of admins with last login, last IP and token version. Revoke a single user's sessions or every admin at once (with typed confirmation).

Recovery Shell

Standalone CLI (run.py --admin-recovery) that talks straight to Postgres without booting FastAPI or Redis. Last-resort unblock and session reset if you ever lock yourself out.

Recent hardening pass added a deduplication layer so that legitimate bursts (payment webhook retries, NAT-shared mobile clients) no longer trip the abuse tracker — the panel stays accurate without blocking real users.

Multi-Platform Apps

Your clients can manage services, place orders, and track their wallet from any device. Android and Windows are available now; iOS is on the way — all from one Flutter codebase.

Flutter · Material 3 Android · Available Windows · Available iOS · Coming Soon

Dashboard with balance and recent orders
Services with search, filters (group, type), pagination
Place orders with custom fields and quantity
Orders list and detail with result copy
Wallet and transaction history
Profile, language, and custom server URL
Desktop app with sidebar navigation and split views
Windows native .exe with auto-update support

EASY-GSM App

Automation

Set it up once and let EASY-GSM handle the rest.

Order processing

Automatic send to providers and status checks

Catalog sync

Automatic sync from DHRU providers on schedule

Auto-refund

Refund balance when provider rejects order

SSL renewal

Let's Encrypt automatic certificate renewal

Deposit verification

Automatic verification for crypto deposits

Scheduled tasks

APScheduler for configurable intervals per provider

Customization

Make the CMS look and feel like your brand.

Light / Dark themes Custom colors (full palette) Google Fonts Custom logos Custom CSS Landing page builder Hero carousel

Built With

Python FastAPI SQLAlchemy PostgreSQL Redis TailwindCSS DaisyUI Alpine.js HTMX SSE Flutter Dart Nuitka Let's Encrypt

Full Feature Overview

Category	Features
Services	IMEI, SERVER, REMOTE, FILE • Groups • Custom fields • Pricing per group • Sync from providers • Visibility controls
Orders	Auto-processing • Refunds • Retries • Status checks • Search & filters • Notifications
Users	Client groups • Balance (Numeric 14,4) • 2FA + recovery codes • API keys • IP whitelist • 11 languages • Timezone
Payments	MercadoPago • NOWPayments (150+ cryptos) • Binance Pay (C2C) • QvaPay • S-PayWay • Manual Payment with proof upload • Multi-currency • Encrypted credentials • Webhooks
Providers	DHRU Fusion (100% API compatible, server & client mode) • EasyGSM API (real-time webhooks, HMAC-SHA256) • Chimera Tool • Octoplus Box • Multi-provider • Auto sync • Priority • Balance per provider
Admin	Dashboard • Users • Services • Orders • Providers • Gateways • Currencies • Settings • Logs • License • Backups • Reports • Tickets
Security	2FA + recovery codes • AES-256 • IP blocklist (manual + auto) • Allowlist • Login lockout per (user, IP) • Live events SSE • Sessions revocation • Recovery CLI • Anti-DDoS • Rate limiting • Honeypots • HSTS + CSP
Mobile	Android (Available) • Windows (Available) • iOS (Coming Soon) • Flutter • Desktop sidebar • Split views • Dashboard • Services • Orders • Wallet • Profile • 11 languages

Ready to get started with EASY-GSM?

For sales, activations and business reach us on WhatsApp. For tech support and bug reports, contact our developer on Telegram.

Try Live Demo Sales & Activation Developer: @lordlock Support group

wa.me/5352592013 · t.me/lordlock · t.me/easygsmcms