Announcing the Dark Funnel Detective Campaign

How would it be determined whether or not a download button is unauthorized? Is it as simple as seeing whether or not the download pulls directly from only mozilla org?