Why does the Zidoo reach out to casinogratis.io during library matching?

Discussion in 'HDD Media player(RTD 1619DR)' started by Jimbo Randy, Feb 9, 2025.

  1. Jimbo Randy

    Jimbo Randy Active Member

    I just noticed that Zidoo reaches out to casinogratis.io when you run matching on your library. Why is this? This looks like a gambling website, not a metadata source website?

    @Markswift2003 sorry for ping but this one seems a bit conerning. Do you know why this is being pinged as part of the metadata search? Was this an old metadata website that got repurposed/redirected into a gambling site or something? I can reproduce it every time by running matching on a library. It gets pinged along with the other scraping domains.
     
    Last edited: Feb 9, 2025
  2. Jimbo Randy

    Jimbo Randy Active Member

    It appears to be coming from guessit.io, which gets redirected to casinogratis.io, which then gets redirected to d2dbet888.io....

    So yea....looks like this might have been an source for matching metadata? It is now straight up spam. I blocked all 3 of these on my network.

    Just an fyi to everyone.
     
    JohnG likes this.
  3. Markswift2003

    Markswift2003 Well-Known Member SUPER Administrator Beta test group Contributor

    My guess is that this is due to a cloudflare advertising redirect but I just did a Wireshark trace and you can bet your ass (on casinogratis.io if you like) that I'll be asking about this on Monday!!!
     
    jra85, JS_racer and Jimbo Randy like this.
  4. Jimbo Randy

    Jimbo Randy Active Member

    Let me know if you hear anything! I don't know how long this has been going on. Potentially for a while. I just randomly noticed it today. It's definitely the guessit.io domain that starts the redirect chain. Good luck!
     
  5. Markswift2003

    Markswift2003 Well-Known Member SUPER Administrator Beta test group Contributor

    Ok - it looks like the Guessit website has been hacked or more likely just expired and bought cheaply by a gambling website - whether this is permanent or not we don't know, but it's a third party library for information extraction from a filename (or was!).

    It will be removed from the next version, but in the meantime it can't cause any harm.
     
    Jimbo Randy likes this.
  6. Jimbo Randy

    Jimbo Randy Active Member

    Thanks for the update! Yea, seems like it won't cause harm. It's just spam. Of course I wouldn't recommend going to that website and gambling on it :p. I went ahead and blocked all 3 domains (guessit, casinogratis, and that bet URL) for good measure. Glad to hear it'll be fixed on the next version. Are there still firmware updates being made for the Z9X OG?
     
  7. Markswift2003

    Markswift2003 Well-Known Member SUPER Administrator Beta test group Contributor

    I've not been told of any plans for any.
     
  8. Jimbo Randy

    Jimbo Randy Active Member

    Is there a way to remove that URL from the lookup list via the Zidoo config files or something? I looked through the folders via my network share on the Zidoo but didn't see anything listing the URLs. That would be a better solution than blocking the URLs on my network.
     
  9. Markswift2003

    Markswift2003 Well-Known Member SUPER Administrator Beta test group Contributor

    Nope.

    Honestly wouldn't worry about it.
     
    Jimbo Randy likes this.
  10. Jimbo Randy

    Jimbo Randy Active Member

    Dude I just won a million dollars on Casinogratis.io!! CLICK HERE TO SEE HOW YOU CAN TOO!

    I'm jk. Yea I'm not gonna worry about it, lol. Funny how you notice these random things when you just happen to glance at your Pihole log :p.
     
    Markswift2003 likes this.
  11. Markswift2003

    Markswift2003 Well-Known Member SUPER Administrator Beta test group Contributor

    I try not to glance at my PiHole too much.
     
    Jimbo Randy and rozel like this.
  12. JS_racer

    JS_racer Member

    :D
     

Share This Page