Record what a visitor can see
Capture the public page URL, visible title, observation time and surrounding offer. Distinguish a playable stream or downloadable file from a page that merely advertises one. Avoid opening unknown executables.
Compare release details
Match the suspected copy to an identifiable edition, language, cut or build. Check the release calendar and permitted territories. Record how you recognized the material and whether anyone verified access.
Group related observations
Keep one record per location, then group shared file hosts or mirrors. Recheck individual URLs after a response. A disabled listing, an inaccessible file and a removed search result describe different changes.