Reputation is for sale, but the sourced price is $105 a seat, not $7M

The figure to be careful with here is $7 million. None of the supplied material -- Namecheap's own auction documentation, two Palo Alto Networks Unit 42 research posts, a WHOIS-feature detection paper, and two copies of an unrelated drift-detection abstract -- records aggregate spending on expired domains ^[18]. What the material does price is the other side of the trade: the cost of a seat.

Namecheap charges $5 per year for the Market subscription that bidding requires ^[1], and holds a $100 minimum account balance which it says keeps unverified bidders out and stops winners defaulting ^[2]. That is $105 of setup before a first bid ^[5]. New users need $1,000 on deposit to bid $10,000 or more ^[3]. Bidding itself is proxy-based: enter a maximum, and the system bids the minimum plus one increment on your behalf until someone passes your ceiling ^[19].

What that $105 buys access to is age, and age is load-bearing in detection. Unit 42 notes that domains registered in advance sometimes take longer to detect once they turn malicious, because they have accumulated benign reputation, and that phishing and black hat SEO operators exploit the same effect ^[6][7]. Its detector pulls about 30,000 domains a day that sat quiet for months or years then jumped more than 10.3 times in traffic within one day ^[8]; 22.27% of those are malicious, suspicious or not safe for work, a rate it puts at more than three times that of newly registered domains ^[9] -- roughly 6,700 domains a day ^[10]. Palo Alto advises blocking newly registered domains for 32 days ^[11], a window an aged domain clears by construction ^[12]. The SolarWinds command-and-control domain avsvmcloud[.]com was registered in 2018, stayed dormant two years, and saw passive DNS traffic rise around 165 times from March 2020 ^[13].

Meanwhile a 2026 Frontiers study reports that adding WHOIS attributes -- domain age, registration date, privacy -- measurably improved every classifier metric, concluding registration details are highly significant ^[14]; its best configuration reached an F1 of 0.988 ^[15]. Models that reward registration date reward whoever buys it.