Bear with me here, people.
Isn’t it awfully convenient that the first leaks showed up right as Korra interest was starting to die down? How the leaks almost always come out on Fridays, Saturdays, and Sundays, around the same time of day? How the leaker hasn’t been arrested yet, despite putting the biggest goddamn watermark ever all over every single leak?
So we know that a) the leaks follow a schedule of some sort and b) the leaks are at least partially used to get the Avatar fandom - undoubtedly Nick’s largest and most active fanbase - to visit the Winx fansite. Winx, I might remind you, is a new show also airing on Nick.
The leaker has said that he’ll be posting new clips and screenshots at regular intervals to “get people pumped about the show”. That seems an odd thing for a leaker to say - why hasn’t he just uploaded the full episode yet? What’s the point of stretching it out? There isn’t one (unless he just enjoys the attention, which is certainly possible), but if it’s actually a Nick employee, suddenly that makes sense.
What do we know now?
a) Leaks follow a schedule
b) Leaks attempt to draw attention to Winx, another new Nickelodeon show
c) Leaker is trying to pump up the fanbase without revealing the entire episode
Of course, most of this is speculation - but now, we move onto the more compelling evidence.