Piracy mirrors routinely run scripts that scrape IP addresses, regional locations, and browser cookies, logging user metadata to sell directly to third-party telemarketing pools.
The addition of the word "verified" to a search query like "Gunaah Filmyzilla verified" is a tactic used by both users and cybercriminals: