One way that could work (I have not tried, just came up with it, so I'm not sure) is to use the Browser plugin to check the domain name on which the game runs. Supposing you know where you're going to host it, you can have an array which contains a list of allowed domains. On layout start, check if the current domain belongs to that list. If it does not, that means the game is stolen, you can do what you feel like: prevent the game from continuing, display a warning message, redirect to your original host, force the browser to close the tab...
The downside is that you have to plan ahead where it will be hosted. If you want to host it on a new site, you'd have to update the list of domain and recompile.
Edit: You could have the list of domains in a separate xml file that you'd import with an ajax request, that would be easier to update, but it would defy the purpose, since you would have to host it with your game (no cross domain ajax!), so anyone who grabs your game, will grab this list too and can edit it.