It looks like bootleg.games does have port 443 (HTTPS) open, but it uses some sort of weird certificate that's not only expired, but also doesn't match the domain:
$ openssl s_client -connect bootleg.games:443
Connecting to 23.229.205.73
CONNECTED(00000003)
depth=0 CN=old.scarlettscott.com
verify error:num=18:self-signed certificate
verify return:1
depth=0 CN=old.scarlettscott.com
verify error:num=10:certificate has expired
notAfter=May 19 06:28:13 2022 GMT
verify return:1
depth=0 CN=old.scarlettscott.com
notAfter=May 19 06:28:13 2022 GMT
verify return:1
---
Certificate chain
 0 s:CN=old.scarlettscott.com
   i:CN=old.scarlettscott.com
   a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: May 19 06:28:13 2021 GMT; NotAfter: May 19 06:28:13 2022 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN=old.scarlettscott.com
issuer=CN=old.scarlettscott.com
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: rsa_pss_rsae_sha256
Peer Temp Key: X25519, 253 bits
---
SSL handshake has read 1813 bytes and written 1637 bytes
Verification error: certificate has expired
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Protocol: TLSv1.2
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: A21AE00720E48B0352D5381CC17C5FB2FF3DC77E0F92D108C45CC1EF379A3AE4
    Session-ID-ctx:
    Master-Key: F8D89B0A63FA22443D0310996C168DBF8D82823235683DCF7ADD0B21F1CE143EC6FADB88913AB427E3700D689CF5469A
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 80 c6 01 90 e4 6d 80 be-a2 8c 25 40 6e 5d 4f 18   .....m....%@n]O.
    0010 - 68 32 d1 84 aa d3 a8 20-65 c7 9f 3d 37 da 09 a3   h2..... e..=7...
    0020 - e1 ec 88 3c 9a 41 28 db-e9 da 49 48 0d e4 3b 07   ...<.A(...IH..;.
    0030 - b7 8b 69 fb b5 89 da db-22 9e 64 95 95 12 26 58   ..i.....".d...&X
    0040 - 21 e5 b6 29 e9 52 43 14-4e 93 a2 3f 52 14 cb 46   !..).RC.N..?R..F
    0050 - 06 7b 90 56 59 85 2e f4-8c 96 9a b5 74 a8 49 7a   .{.VY.......t.Iz
    0060 - 77 82 c5 c3 53 51 10 35-19 32 9b 8b af ba 69 bb   w...SQ.5.2....i.
    0070 - a2 fe 10 3c 7e 2c c9 04-23 84 78 ca 93 fe a2 e0   ...<~,..#.x.....
    0080 - 48 cf 42 de 42 ef 7a 81-c8 ed d4 17 ad 31 9c ae   H.B.B.z......1..
    0090 - 56 4d a9 2b ff 0e d2 c6-4b 03 34 ed 04 a1 2c bd   VM.+....K.4...,.
    00a0 - cd 00 69 81 1f 52 c4 08-74 93 83 8b 6e b0 d9 32   ..i..R..t...n..2
    00b0 - 0e 63 64 93 13 ca 25 5c-45 7e 81 e9 59 21 53 67   .cd...%\E~..Y!Sg

    Start Time: 1762602451
    Timeout   : 7200 (sec)
    Verify return code: 10 (certificate has expired)
    Extended master secret: yes
---

But still, I do not get why this is not a higher priority issue for the forums. It takes only one MITM'd connection for someone to sniff out your session token or your login details and compromise your account, and also setting up HTTPS is free and pretty easy these days (with Let's Encrypt and ACME clients like certbot)

You're welcome. Thanks for helping dump these. I'll be sure to reach out again if I wind up with more undumped MD/SFC carts

Thanks a lot for going out of your way to share your games, awesome stuff

Recently I sent some cartridges out fellow BGC member Azathoth to be dumped. Some carts yielded ROMs that did not work in emulators during testing, but one of Azathoth's contacts (Eke) was able to crack some of them. Here is a list of what is included and some notes on them regarding any potential issues they may have

1. Rockman X3: This was dumped from an original Taiwan cart of the game. Specifically the release that says "Rockman X3" on the sticker, not the X3X3X3X3 release. Dumps of this game already exist but which release of the game they came from is unknown. They are suspected of having originated from a multicart but this is unconfirmed. More details on this can be found on BGW. Cracked by Eke as the raw dump does not work in emulators. As always, cracked versions may have inaccuracies to how the game plays on cartridge

2. Sun Green Sichuan Mahjong: Previously undumped. Cracked by Eke as the raw dump does not work in emulators. As always, cracked versions may have inaccuracies to how the game plays on cartridge

3/4. Dance 2000 Volumes  1 and 4: Games intended for use with a dance mat accessory by BBD (same one that made GBC games). None of the four volumes of this were dumped previously. This game however requires the usage of a non-standard controller, so while the game works in emulators, there is no way to play it because emulators don't have support for the dance mat

5/6. NewStar Basic and English Professor: Education software designed around usage of a keyboard controller. Some emulators may support controller options for these but most do not

7. Top Gear 2: A while ago on Taobao I encountered a listing for a Top Gear 2 cartridge. It had the Glorysun logo and the text Shaking on the sticker. The listing specified that it came from the capital, or in other words, Beijing (where Glorysun is from). There is documentation of a "Shaking" controller by Glorysun, so it may be possible that this cart was intended for use with that controller. As far as I can tell though the game appears to just work normally

Thank you for providing it. I managed to identify every Famicom/NES ROM within the code (sifting through loads of junk data), mainly done by just searching for common .nes file sizes (e.g. 25k, 41k). Games of particular note include the following:

*Three uncommon Inventor hacks: Air Raider, Dream Rapid, and a variant of Rush Hour featuring motorcycles (whereas the prior known version uses cars). The early version of Boat Race mentioned a few posts back is also present here in working order.
*Anger Bird, Khresna, and Upin & Ipin Adventure 3, three hacks which are affiliated with the "Play Vision Portable" systems.
*The 8-bit version of Waixing's Explorer (AFAIK, the last remaining undumped VT02 game in the set), as well as an MMC3-based version of Tank. Unfortunately, both ROMs do not run standalone; I assume this is initialization-related, though I could not determine a fix at a cursory glance.

Some additional technical notes that I found interesting:

*As mentioned in MAME's notes, remnants of what appears to be a Linux system are scattered across the SD card; with the NES ROMs haphazardly thrown in alongside the Linux data.
*Every ROM contains space for an iNES header, though in some cases it is overwritten with other data, presumably used by the VT02 menu system.
*Some of the games are duplicated multiple times across the SD card contents. While some duplicates are merely unaltered ROMs, others seem to be in varying states of removing the games' copyright information.
*All of the games are either NROM or MMC3, without support for CHR-RAM; which is to be expected of a VT02 console, but still a bit jarring given its SD card compatibility. There are quite a few MMC3 conversions on here as a result, including some games that are not commonly converted (e.g. Kero Kero Keroppi 1, Tetsuwan Adam).
*The ROM of Fish War features a Nature Color Game copyright, but it was blanked out via PRG (because of course it was). I did attempt to restore the notice, but it required more guesswork than usual...
*The ROM of Bolt Action is massively overdumped, and inexplicably, appears to have overwritten the data of "Mechanical Invader", a Nice Code game that is almost completely undocumented. The CHR is largely intact, though no portions of the PRG are present.

I have attached the most notable games below. I will likely compile the mapper hacks at a later date; if not a full release of the extracted contents. _{(Also note that with all of that, I still have no idea what "Video Player" was supposed to be...)}