# Deep Research: yym.me
## Buy Now listing at $20, claimed "10 years old"

## Executive Summary

**yym.me is actively used as a personal infrastructure dashboard** by a Chinese-speaking operator running a multi-VPS proxy/network setup. It is **absolutely unsuitable** for a clean email host.

---

## WHOIS

| Field | Value |
|-------|-------|
| Creation | **2015-04-24** (~10 years old) |
| Expiry | 2027-04-24 |
| Registrar | NameCheap |
| Privacy | Withheld for Privacy ehf (Iceland) |
| DNS | Cloudflare (jim.ns, lisa.ns) |
| DNSSEC | Unsigned |

---

## Current Live Site Analysis

The domain **actively serves a webpage** (HTTP 200, nginx, Last-Modified: 2024-12-24).

### Page Title
```
v24.12.22 _Oracle.KR......wc_  _srtp 12-24
```

### Page Purpose
A **personal startpage/dashboard** (Chinese UI, Microsoft YaHei font) linking to:
- Search engines (Bing, Google, Baidu, Gemini)
- Gmail, Dropbox, Twitter, YouTube
- **Cloudflare dashboard** (account ID: `f9cecafcbb1e76a91aeadc73d384662e`)
- **Namecheap** (registrar)
- **Tailscale** (mesh VPN)
- **NNR.moe** (Chinese proxy/VPN service)
- **t66y.com** (well-known Chinese adult forum)

### Infrastructure Exposure
The page contains **hardcoded links to the operator's private infrastructure**:

| Link | What It Is |
|------|-----------|
| `http://10.0.0.1/` | Local router/gateway |
| `http://10.0.0.6:5000/` | Internal service (likely NAS or app) |
| `http://10.0.0.6:5244/` | Internal service (likely AList or file manager) |
| `http://10.0.0.88/` | Internal device |
| `http://100.66.233.140:5000/` | **Tailscale** mesh IP (100.x.x.x range) |
| `http://100.66.233.140:5244/` | Tailscale internal service |
| `http://192.168.11.1/` | LAN router |
| `http://192.168.6.1/` | LAN router |

### Public VPS Endpoints Listed
The dashboard references **at least 8 public VPS IPs** the operator manages:

| IP | Provider / Region |
|----|-------------------|
| `152.67.209.219` | **Oracle Cloud** (yym.me itself) |
| `8.217.200.82` | Alibaba Cloud (Hong Kong) |
| `45.62.124.181` | Unknown |
| `74.48.64.131` | Unknown |
| `89.185.28.195` | Unknown |
| `142.171.33.77` | Unknown |
| `154.12.179.127` | Unknown |
| `103.103.245.60` | Unknown |

Each IP has a `/ip/` path for IP-checking.

### Associated Domains
- `bakme.com` — linked via `bb.bakme.com`, `cc.bakme.com`, `oo.bakme.com` (image hosting)
- `qre.us` — linked via `tgi.qre.us/admin/` (some admin panel)
- `h.bakme.com` — linked as "Hugo.CF"

### Cloud Storage & Services
- Dropbox with files: `VPS_info.xlsx`, `Sagitar_all.xlsx`
- Backblaze B2, Synology C2, Qiniu, Aliyun HK
- Multiple Nextcloud instances on: webo.hosting, nl.tab.digital, opsone-cloud.ch, qloud.my, thegood.cloud, woelkli.com, teracloud.jp
- MyQNAPCloud

### SSL Certificate History
Multiple wildcard certs issued in rapid succession (2026) from:
- ZeroSSL (Feb, Apr)
- Sectigo (Jan, Mar)
- Google Trust Services (Jan, Mar)

All certs cover `*.yym.me` + `yym.me`. This suggests automated certificate rotation for multiple subdomains.

---

## Reputation

| Check | Result |
|-------|--------|
| Disposable email blocklist | Not listed |
| Barracuda BRBL (IP) | Clean |
| Spamhaus / URIBL / CBL / Spamcop | Query-refused |
| Wayback Machine | No snapshots |
| URLhaus (malware) | No hits |
| Current content | **Active personal dashboard** |

---

## Verdict

### 🚫 DO NOT BUY

**yym.me is not a blank slate.** It is a **live, actively maintained personal infrastructure hub** for someone running a multi-node VPS/proxy network. Buying it would mean:

1. Taking over a domain with **publicly documented private IP infrastructure**
2. Inheriting a history linked to **proxy/VPN services (NNR)** and adult content references
3. Conflicting with an active operator who likely has the domain configured across multiple systems
4. Starting with **zero email trust** — Gmail/Outlook would see a domain historically tied to a personal dashboard on a Chinese-language stack installer (OneinStack)

### The "extensions taken = 21" signal is misleading
This reflects the domainer registering `yym` across multiple TLDs, not organic brand demand.

### The listing is suspicious
The domain is actively serving content but listed for sale. Either:
- The owner forgot the listing is active
- It's an automated portfolio listing
- The owner is selling but the DNS hasn't been repointed yet

In any case, taking it over would cause immediate operational disruption for the current operator, and the domain's history is **tainted by personal/infrastructure use**.

---

## Recommendation

**Abandon yym.me.** Return to the auction list (`Namecheap_Market_Sales.csv`) and filter for:
- **Registered before 2016** (genuine 10+ year history)
- **Price < $10**
- **No active website** (null A record or parked page)
- **No MX history**
- **No certificate transparency logs** (no prior SSL use)

The Buy Now list is a domain farm. The auction list has actual aged inventory.