Service Management
IMEI, SERVER, REMOTE, and FILE service types. Groups, pricing per client group, custom fields, and bulk operations.
Professional GSM Unlock Platform
EASY-GSM — The Ultimate CMS for Unlock Services
100% DHRU Fusion compatible. Run as a server or connect to 5 provider protocols. Admin panel, 4 premium themes, landing builder, shopping cart, mobile apps, payments and automation — all in one self-hosted platform.
11
Languages
6
Payment Gateways
5
Provider Protocols
DHRU · EasyGSM · Fusionpro · Chimera · Octoplus
3
Platforms
Android & Windows now · iOS soon
See EASY-GSM in action
Explore the full admin and user panel with sample data — no signup required.
Main Features
Everything you need to run and scale your unlock service business.
Order Management
Automatic statuses, auto-processing, full and partial refunds, retries, and full order history with search and filters.
Admin Panel
Dashboard with stats, revenue charts (1d to 1y), quick actions, users, services, orders, providers, and settings.
User Panel
Service catalog, order history, deposits, API keys with IP whitelist, profile, and security (2FA, password).
Multi-Currency
Multiple currencies, configurable exchange rates, base currency, and automatic conversion for pricing and balance.
Multi-Language
11 languages: Spanish, English, Portuguese, French, German, Russian, Chinese, Arabic, Turkish, Vietnamese, and Bengali — with RTL support for Arabic.
Premium Themes
4 selectable premium themes (Nova, Aurora, Carbon, Prisma) plus an exclusive per-license theme option. Dark & light modes.
Shopping Cart
Built-in cart in the user panel: queue multiple services and check out in one order flow.
Landing Page Builder
Visual drag-and-drop builder (GrapesJS) with 15 block types, per-language pages and a media manager with automatic image optimization.
Global Search
Instant search across services, orders and users from anywhere in the panel.
Backups & Auto-Update
Encrypted automatic backups to the license portal and self-updating .exe — always on the latest version.
Communication: Server, Client & EasyGSM API
EASY-GSM works as a Server (expose your services via DHRU API), as a Client (connect to multiple providers), and via the EasyGSM API (real-time webhooks between CMS servers).
Server Mode
Expose your catalog and accept orders through the 100% DHRU Fusion–compatible API. Full control over services and pricing.
Client Mode
Connect to multiple providers over DHRU Fusion, Fusionpro v1, Chimera Tool and Octoplus Box. Automatic catalog sync, priority-based order routing, and balance tracking per provider.
EasyGSM API
NEWOur proprietary real-time communication protocol between CMS servers. Features HMAC-SHA256 signed requests, instant webhooks for order updates, automatic catalog sync events, balance notifications, circuit breaker protection, and intelligent rate limiting. The next evolution beyond DHRU polling.
Multi-provider support • Automatic sync • Configurable priorities • Selective group sync
Protocol Comparison
EasyGSM API vs DHRU Standard
Compare the CMS-to-CMS communication protocols. EasyGSM API is our next-generation protocol built for real-time operations and security.
Feature
DHRU Standard
EasyGSM APIEG
Order placement
Status polling
Catalog sync
Manual
Auto + Events
Real-time webhooks
HMAC-SHA256 security
Replay protection
Nonce + Timestamp
Balance notifications
Pricing change events
Circuit breaker
Intelligent rate limiting
60 req/min
Idempotent orders
Auto re-handshake
Score
3 / 12
12 / 12
Both protocols are supported. EasyGSM API is recommended for CMS-to-CMS connections for optimal performance and security.
See the full CMS in action
Every admin and user screen, one at a time. Explore 21 reference sections below.
Reference only. The sections below are a preview for reference — they do not show 100% of the CMS. The full product includes more screens, options, and features.
Also in the CMS (not all shown here): License management, Edge TLS (Caddy, hot certificate renewal), 4 premium themes, Shopping cart, Global search, Telegram bot config, Landing page builder, Network debug logs, Provider error diagnostics, Unified log, 2FA for users, Deposit history, Settings (General, Appearance, Telegram, Landing), API documentation, Admin notifications (in-app and Telegram), Client groups and pricing, Currencies, Activity logs, Payment gateways, DHRU providers, and more.
4 Premium Themes — Your Brand, Your Look
Each installation chooses its theme and customizes it — colors, fonts, logos, and custom CSS.
Nova
Dark-first premium UI with deep indigo gradients and glass accents.
Aurora
Fresh emerald-and-teal palette with a light, airy feel.
Carbon
Industrial charcoal grays sharpened by a bold orange accent.
Prisma
Vivid blues and multicolor highlights for a bright storefront.
Exclusive theme: a fully custom, license-gated theme available for your instance — ask sales.
Landing Page Builder
Design your storefront visually — no code needed.
15 Block Types
Hero, pricing, FAQ, testimonials, gallery, video and more — drop them in and edit inline.
Drag & Drop Editing
Visual editing powered by GrapesJS — move, restyle and rearrange blocks right on the page.
Per-Language Pages
Publish a different landing for every locale your store speaks.
Media Manager
Uploads are optimized automatically; video embeds just work.
Draft → Publish
Preview changes safely, publish in one click, and roll back instantly.
Code Mode
Full HTML control when you want to go beyond the visual editor.
Integrations
Six payment gateways, five provider protocols, Telegram, and edge TLS — all integrated out of the box.
EasyGSM API
NEWReal-time webhooks, HMAC-SHA256 security, automatic catalog sync, balance updates, pricing events, circuit breaker, and rate limiting. The modern alternative to DHRU polling.
DHRU Fusion
100% compatible API, catalog sync, automatic order processing, and status checks.
Fusionpro v1
Native client for the Fusionpro v1 reseller protocol (Bearer + JSON): catalog sync, order dispatch and status webhooks.
MercadoPago
Checkout Pro, webhooks with HMAC validation, sandbox and production modes.
Binance Pay (C2C)
QR-based C2C deposits with HMAC-SHA256 verification against the Binance Pay merchant API. Admin uploads QR + API credentials.
NOWPayments
Accept 150+ cryptocurrencies with instant conversion, IPN callbacks signed with HMAC-SHA512, and auto-deposits.
QvaPay
Hosted USD checkout with double verification — webhook signature plus active GET re-check before crediting balance.
S-PayWay
Hosted checkout with HMAC-SHA256 signed webhooks. Tolerates clock drift and ships parity-tested against the official PHP SDK.
Manual Payment
Bank transfer, Western Union, Zelle, MoneyGram — any off-platform method. User uploads receipt (re-encoded JPEG, EXIF stripped); admin reviews and approves.
Chimera Tool & Octoplus Box
Native clients for Chimera Tool and Octoplus Box providers, beyond DHRU and EasyGSM API. Endpoints hardcoded for SSRF safety.
Telegram Bot
Real-time admin notifications, /addcredits command, multi-admin chat IDs, and optional security alerts on critical events.
Caddy Edge TLS
Embedded Caddy edge server with automatic HTTPS: Let's Encrypt with ZeroSSL fallback, hot certificate renewal with zero restarts, and HTTP/3 support.
REST API
DHRU endpoints, mobile API, webhooks for payments and order feedback.
Built for Production
Operations-grade tooling your provider business can rely on.
Provider Error Diagnostics
Every failed provider call is classified by phase (DNS, TCP, TLS, HTTP) with CloudFlare WAF and rate-limit detection — you see WHY it failed, instantly.
Unified Log
One log for the whole stack (app, PostgreSQL, Redis, provider wire traffic) with polling dedup — forensics without the noise.
Zero-Restart TLS
Caddy edge terminates HTTPS and renews certificates in place. Your store never goes down for a certificate.
Self-Healing Runtime
Embedded PostgreSQL and Redis supervised under a Windows Job Object; watchdogs revive anything that dies.
Offline Grace
Signed offline grace period keeps your licensed CMS running through portal outages.
Headless & Multi-Worker
Runs as a Windows Server service (Session 0) with leader election for background jobs.
Security
Enterprise-grade security to protect your platform and your users. For the dedicated admin operations panel, see Cybersecurity Center.
2FA
TOTP via Google Authenticator with anti-reuse and bcrypt-hashed recovery codes.
AES-256
Encryption for sensitive data and payment credentials, plus HMAC-SHA256 webhook signing.
Anti-DDoS
Progressive IP blocking with cross-worker Redis sync and configurable rate limiting.
Hardening
SQL injection, XSS, path traversal and null-byte protection; honeypot tarpits; strict CSP and HSTS headers.
NEW
Cybersecurity Center
A dedicated admin panel under /admin/security to operate the firewall in real time: block IPs, manage allowlists, watch live events, revoke sessions, and tune rate limits — all from one consolidated UI.
Real-time Dashboard
KPIs auto-refreshed every 10 seconds via HTMX: blocked now, blocks in 24h and 7d, allowlist size, and IP-cache health.
Progressive IP Blocking
Fail2ban-style escalation with exponential backoff (capped at 4h), Redis-replicated across workers, allowlist short-circuit, and per-IP block history.
Live Security Events
Server-Sent Events stream with severity, type, IP and user filters. CSV export. Bulk-block up to 1000 IPs at once with one-click undo.
Login Lockout per (User, IP)
Anti-DoS for accounts: Redis counter with DB fallback, configurable threshold and lockout duration. Admins can release lockouts from the panel.
Sessions & Revocation
List of admins with last login, last IP and token version. Revoke a single user's sessions or every admin at once (with typed confirmation).
Recovery Shell
Standalone CLI (run.py --admin-recovery) that talks straight to Postgres without booting FastAPI or Redis. Last-resort unblock and session reset if you ever lock yourself out.
Recent hardening pass added a deduplication layer so that legitimate bursts (payment webhook retries, NAT-shared mobile clients) no longer trip the abuse tracker — the panel stays accurate without blocking real users.
Multi-Platform Apps
Your clients can manage services, place orders, and track their wallet from any device. Android and Windows are available now; iOS is on the way — all from one Flutter codebase.
Flutter · Material 3
Android · Available
Windows · Available
iOS · Coming Soon
- Dashboard with balance and recent orders
- Services with search, filters (group, type), pagination
- Place orders with custom fields and quantity
- Orders list and detail with result copy
- Wallet and transaction history
- Profile, language, and custom server URL
- Desktop app with sidebar navigation and split views
- Windows native .exe with auto-update support
EASY-GSM App
Automation
Set it up once and let EASY-GSM handle the rest.
Order processing
Automatic send to providers and status checks
Catalog sync
Automatic sync from DHRU providers on schedule
Auto-refund
Refund balance when provider rejects order
TLS renewal
Caddy renews certificates in-place — zero restarts, Let's Encrypt + ZeroSSL
Deposit verification
Automatic verification for crypto deposits
Scheduled tasks
APScheduler for configurable intervals per provider
Backups
Automatic encrypted backups uploaded to the license portal
Customization
Make the CMS look and feel like your brand.
Light / Dark themes
4 premium themes (Nova · Aurora · Carbon · Prisma)
Custom colors (full palette)
Google Fonts
Custom logos
Custom CSS
Landing page builder
Visual builder with 15 block types (GrapesJS)
Hero carousel
Built With
Python
FastAPI
SQLAlchemy
PostgreSQL
Redis
TailwindCSS
Alpine.js
HTMX
SSE
Flutter
Dart
Nuitka
Caddy
GrapesJS
Full Feature Overview
| Category | Features |
|---|---|
| Services | IMEI, SERVER, REMOTE, FILE • Groups • Custom fields • Pricing per group • Sync from providers • Visibility controls |
| Orders | Auto-processing • Refunds • Retries • Status checks • Search & filters • Notifications |
| Users | Client groups • Balance (Numeric 14,4) • 2FA + recovery codes • API keys • IP whitelist • 11 languages • Timezone |
| Payments | MercadoPago • NOWPayments (150+ cryptos) • Binance Pay (C2C) • QvaPay • S-PayWay • Manual Payment with proof upload • Multi-currency • Encrypted credentials • Webhooks |
| Providers | DHRU Fusion (100% API compatible, server & client mode) • EasyGSM API (real-time webhooks, HMAC-SHA256) • Fusionpro v1 • Chimera Tool • Octoplus Box • Multi-provider • Auto sync • Priority • Balance per provider |
| Themes & Branding | 4 premium themes • Exclusive per-license theme • Custom colors & fonts • Custom logos • Custom CSS • Landing builder (15 blocks, multi-language, media manager) |
| Admin | Dashboard • Users • Services • Orders • Providers • Gateways • Currencies • Settings • Logs • License • Backups • Reports • Tickets |
| Operations | Unified log • Provider error diagnostics (DNS/TCP/TLS/CloudFlare WAF phases) • Auto-update • Encrypted backups to portal • Headless Windows Server mode • Multi-worker leader election |
| Security | 2FA + recovery codes • AES-256 • IP blocklist (manual + auto) • Allowlist • Login lockout per (user, IP) • Live events SSE • Sessions revocation • Recovery CLI • Anti-DDoS • Rate limiting • Honeypots • HSTS + CSP |
| Mobile | Android (Available) • Windows (Available) • iOS (Coming Soon) • Flutter • Desktop sidebar • Split views • Dashboard • Services • Orders • Wallet • Profile • 11 languages |
Simple, Transparent Pricing
One license per server. Every plan includes the full CMS — no feature tiers, no hidden fees.
Most popular
EasyGsm 1 Year
1-year license
$250.00
USD
- Full CMS — every feature included
- Android & Windows client apps
- 5 provider protocols & 6 payment gateways
- Automatic updates while active
- Support via WhatsApp & Telegram
EasyGsm 1 Month
1-month license
$25.00
USD
- Full CMS — every feature included
- Android & Windows client apps
- 5 provider protocols & 6 payment gateways
- Automatic updates while active
- Support via WhatsApp & Telegram
Activation is instant after purchase. Prices in USD.
Frequently Asked Questions
Is the server mine or hosted by you?
Yours, 100% self-hosted: a single .exe on your own Windows Server/VPS with embedded PostgreSQL and Redis. Your data never leaves your machine.
What do I need to run it?
A Windows Server VPS (2+ cores, 4 GB RAM recommended) and a domain. The installer handles everything else, including HTTPS.
Is it really 100% DHRU Fusion compatible?
Yes — wire-format parity verified against real DHRU source: your existing resellers and clients connect without changes.
Can I migrate from my current DHRU site?
Yes: import your service catalog from any DHRU-compatible provider, and your resellers keep using the same API format.
Are updates included?
Yes, the CMS self-updates from the portal while your license is active.
Is there a demo?
Yes, a full live demo with sample data at demo.easygsmpro.com — no signup required.
Which payment gateways are supported?
MercadoPago, NOWPayments (150+ cryptos), Binance Pay, QvaPay, S-PayWay, and manual payments with receipt upload.
How is the license activated?
Instantly from the license portal after purchase; one license per server, with transparent machine binding.
Does it survive internet or portal outages?
Yes, a signed offline grace period keeps the CMS running; orders and data are always local.
Ready to get started with EASY-GSM?
For sales, activations and business reach us on WhatsApp. For tech support and bug reports, contact our developer on Telegram.
wa.me/5352592013 · t.me/lordlock · t.me/easygsmcms