The definitive solution against Blum Panel, Cipher, and modern obfuscated backdoors.
Current Version: v5.1 (Updated 20/04/2026)
Status: 🟢 Active & Detecting
FiveM servers are currently under attack by sophisticated malware families like Blum Panel, Cipher, and more. These aren't just simple "force op" scripts anymore. They utilize:
- XOR Encryption & Hex Obfuscation to hide deep inside legitimate resources.
- Remote Code Execution (RCE) to hijack your VPS.
- Supply Chain Attacks (viruses hidden in leaked scripts).
Many server owners realize they are infected and try to pay the backdoor creators for a "whitelist" or to be "removed" from the panel. This is a trap.
- They still have access: You are giving money to the people who hacked you. They keep the backdoor in your files.
- You are being farmed: They can revoke your "whitelist" anytime and ask for more money.
- Security Risk: Giving them money doesn't patch the vulnerability. Your server remains wide open.
Don't negotiate with threat actors. Neutralize them.
We provide an advanced cleanup service and proprietary tools that go far beyond what standard paid or free scanners can do.
A dedicated, regularly updated heuristic scanner designed to unpack and detect:
- Comprehensive Database: Detects Blum, Cipher, and previously unknown private backdoors.
- Anti-Obfuscation Engine: Automatically unpacks and analyzes heavily encrypted code layers to find malicious logic hidden underneath.
- High-Risk Behavior Analysis: Identifies scripts attempting to execute system commands (RCE), reverse shells, or unauthorized network connections.
- Zero-Day Readiness: Already updated to detect the newest self replicating variants that attempt to regenerate themselves within your system.
- ✨ NEW: Surgical Auto-Cleaner: Automatically extracts malicious backdoor patterns from your scripts without breaking the original code.
- ✨ NEW: Auto-Manifest Fix: If a deeply infected file is completely wiped, the scanner automatically removes its reference from your
fxmanifest.luaor__resource.lua.
Test new scripts before they ever touch your VPS. Included with your scanner purchase is exclusive role-based access to our Discord Bot:
- 100% Clean and Private: Upload a
.zipresource directly in our Discord channel. Your uploaded files are not stored in order to protect your files, and your scan report is sent completely privately to your screen. - Zero VPS Infection: Because the file never touches your server's hard drive, it is physically impossible to trigger a backdoor, execute malicious code, or leak your VPS data.
Cleaning the files is step one. Ensuring they can never connect back to the hacker is step two. We implement a massive, proprietary 1.64GB Network Blocklist:
- 500 Million+ Domains: Blocks every known C2 (Command & Control) server used by FiveM malware.
- Zero Lag: Works at the network/hosts level. 0% MS impact on your server performance.
- Instant Neutralization: Even if a script inject a backdoor, it cannot "call home". The backdoor becomes useless.
- ✨ NEW: Updated: Expanded the blocklist with the latest malicious IP addresses and domains linked to Blum Panel to counter new threats.
We don't offer a broken free version. We offer professional security for serious projects.
| Tier | Service | Price | Details |
|---|---|---|---|
| Tier 1 | iDevScanner v5.1 | 20.00€ | Full access to the v5.1 Scanner with Auto-Cleaner + Exclusive Access to the Discord Scanner Bot. Detects Blum, RCE, Reverse Shells, and obfuscated payloads. |
| Tier 2 | Full Security Suite | 50.00€ | Includes Tier 1 Scanner and Bot + The "Black Hole" Database (1.64GB Blocklist). |
Note: The Full Security Suite guarantees a secured VPS and FiveM Server within 48 hours.
We operate exclusively through our Discord to ensure secure transactions and direct support.
- Join the Discord: Click Here to Join
- Open a Ticket: Go to the support channel and open a ticket.
- Get Protected: We will deploy the scanner, grant you bot access, or perform the full cleanup service immediately.
The iDevScanner engine is built to recognize specific signatures that others miss:
- Advanced Logic Analysis: Identifies complex XOR structures and variable manipulation used by the Blum family, even when heavily obfuscated.
- Deep Decryption Search: Detects and decodes custom encryption keys specifically associated with private and undocumented backdoors.
- Heuristic NodeJS Scans: Detects dynamic payload injection and potential RCE (Remote Code Execution) vectors disguised as standard library calls.
- Web Asset Integrity: Scans UI files (
.html,.js) for hidden "call-home" triggers, client-side data exfiltration, and malicious external connections.