Based on common patterns for such URLs (especially those containing id.codevn.net and chplay ), this appears to be a designed to: