Security Scan Report: datanodes.to

Redirected to:
https://datanodes.to/download
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 13 domains to perform 47 HTTP transactions. The main domain is datanodes.to and was registered 4 years 6 months ago.

Submitted URL: https://datanodes.to/is8q053blvm8/The_Legend_of_Zelda_Tears_of_the_Kingdom_Switch_XCI_Base_Game.rar

Effective URL:
https://datanodes.to/download
Redirected

The Cisco Umbrella rank of the primary domain is #519,539 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

DataNodes file-host page offering a pirated 16.3 GB Zelda Switch ROM via an ad-heavy premium-paywall gateway. No phishing forms, impersonation, malware or threat-intel hits found — risk is from illegal content and unverified downloads.

Risk Factors (3)
Distribution of pirated/copyrighted Nintendo game software (illegal content offering)
Ad-heavy download gateway with self-declared pop-up ads and premium-paywall pressure — deceptive download prompts are a common malware lure
Downloaded 16.3 GB archive is unverified and could contain bundled malware; page only offers a 'preliminary check' and tells users to scan themselves
Safety Factors (4)
Site displays its own brand 'DataNodes' which matches the domain (no brand impersonation)
No password, payment or credential-capture fields on the page
No threat-intelligence matches, no JavaScript hunting rule malware patterns, no known phishing kit
Cloudflare Turnstile bot protection present; domain ranks inside Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

Download The Legend Zelda Tears the Kingdom Switch XCI Base Game rar

Scan Type

public

Domain Name Analysis

Within the .to country-code top-level domain, 'datanodes.to' is registered with no subdomain. Its registrable label 'datanodes' stretches across 9 characters holding 4 vowels versus 5 consonants. Segmentation suggests 2 words: data, nodes. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

A DATA MODES Home” Upload” "App Pricing” Login [=] The Legend of;Zeldajrears of, the Kingdom Switch)xCl Base Gamer:ral, CO CGmimmD CamemeD oC | Seep ‘Verified and ready to download ) The Legend...

Page Load Overview

6.91s
Total Load Time
778 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:35%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,230 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media42% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
42%
documentation technical
37%
technology software
32%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.26.15.76Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
213.33.50.176Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
2142.251.127.155Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
213.227.47.41Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4723--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF1309356714053A219347E9FBE8BB58B23B9287F01BE8A4F3BD91515FC2DE159309E0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:SyutFsHNUdAGD7Hazb4GaLsDCqK/x1tLDi/z7HOEnXj1x/z:SJvAHoXej1x/z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43262:IAGAAQAmIA6AQVkm0w2aJhQgkyHTUYlQBqgUEoBRQeA0ukjqQQAxkAISknSQKJEIQQKIRlBAFEAAEAMEEUCWQIAySIYLMg0M

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fd818181ffffffff
Perceptual Hash:eb6bd2d4d0d8d0d0
Difference Hash:7103232380f0cccc
Wavelet Hash:fd000101fe7e7e66
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data