sure there are the nds-fire.nokia.com images still (if you can find them). Those are obviously meant for Nokiasuite and particularly for Nokia Service Points and Care Centers using Phenix service software. Probably this is also the reason why nobody been able to find the flasher-3.5 anywhere there, and it's anybody's guess how long those nds-fire.nokia.com images are still available. Nokia rather sooner than later will wrap up this end of their business as well.

I just wonder if the unconfirmed gossip been correct which rumored that Nokia stopped tabletsdev.maemo.org "because of security issues", and if those security issues been related in any way with Harmatten and the N9 which supposedly is capable to use some of the unrestricted flasher-3.5 functions and probably even the N900 MLO/xloader 1st stage bootloader to bypass the aegis fundament trustzone/HS. Just mere wild guessing.
[edit] I found this very interesting, looks amazingly similar to what flasher-3.5 does while talking to NOLO, and for sure is what N900 linux CPU is talking to BB5 modem when updating the modem firmware. Also might shed some light on N9 certs (R&D cert etc)