AllAboutCookies.org: A $9,000 Expired Domain Sold for $5.2M Fourteen Years Later — a Solo-Run, AdSense-Only Site at 92% Margin and ~$400 RPM

In the website-flipping world, “expired domains” are treated almost as a byword for speculation, but one case shows how far the best-case scenario can reach. It is AllAboutCookies.org, an explainer site about browser cookies. According to the deal report published by Flippa, the marketplace that brokered the sale, the site began as an expired domain won at auction for $9,000 in 2008, grew into an AdSense property earning an average of $56,800 a month at a 92% profit margin, and sold for $5.2M, precisely $5,239,952. That is 578 times the acquisition cost.

The seller is an anonymity-requesting retiree in New Zealand, a former taxi driver. No organization, no team, a literally solo operation. The stated plans for the proceeds: developing an island in Vanuatu, and retirement. Every figure in this piece rests on Flippa’s announcement. We could not find independent reporting, a caveat that matters for how to read the case, as discussed below.

The numbers in order

What was sleeping inside a $9,000 domain

AllAboutCookies.org originally belonged to a European media-privacy company. When it expired, it went to auction. Bidding started at $60 and closed at $9,000. In 2008, “explaining cookies” was as unglamorous a topic as they come, and early revenue was small. RPM was only about $5 as late as 2011.

The turning point came from the market side. The wave of privacy regulation, GDPR foremost, produced a surge of advertisers in cookie-consent and compliance products, and this site’s readers became exactly the audience those advertisers would pay to reach. Page RPM at the time of sale: about $400, with CPMs consistently above $300 per thousand pageviews. That is tens of times what a typical content site earns (single-digit to low-double-digit dollar RPMs), an outlier in B2B ad pricing converted directly into revenue. Traffic, at 267,000 monthly pageviews, is far smaller than the $56,800 monthly figure would suggest. The essence of this site is not “growing pageviews” but “standing where the value of a single pageview keeps rising.”

The other asset was the link profile. The 50.8 million backlinks from 321,000 referring domains are the result of domains like The New York Times, LinkedIn, Spotify, and Samsung continually citing this site as the place to explain “what is a cookie”, a product of the topic’s definitional character, not of link-building campaigns. A domain authority ranking in Moz’s top 500 was likely priced into the valuation as a moat around its search positions. As cases where the domain itself lifted the price, the sale of Honeymoons.com and the business built on reviving defunct domains to $15K a month make good comparisons.

The precarious bridge of AdSense-only

The revenue structure is almost defiantly simple: nearly 100% Google AdSense. With no employees and costs limited to roughly content and hosting, the margin reaches 92%. But Flippa’s report also records the crisis this single leg produced. Citing invalid traffic flowing in from spammy sites, Google suspended the site’s AdSense account multiple times. The final ban was overturned only after the owner proposed a traffic-control fix in appeal. If the ads stop, this site’s revenue is literally zero. The flip side of a 92% margin is a structure in which one Google ruling erases all income.

Divide the sale price by monthly profit (~$52,000) and you get a multiple of about 100x monthly, a little over 8x annual profit. That is on the high end for content-site deals, and reads as the US publisher pricing in “revenue-optimization headroom”: ad networks beyond AdSense, affiliate additions, and so on. The same dynamic, a buyer’s monetization capability lifting the valuation, appears in the Investor Junkie exit, the large sale of a personal-finance media site.

What didn’t work, and the caveats

The provenance of the numbers comes before anything else: they rest solely on the announcement of Flippa, a party to the transaction that earns fees from it. We could not corroborate them through independent reporting. Deal reports are marketing material for a marketplace, and the choice and framing of figures should be read with that discount. Then there is the traffic, which was reportedly in decline, masked by rising ad prices. With privacy regulation propping up ad rates, changes in the regulatory environment or search algorithms strike directly at the revenue premise. Cookie technology itself, meanwhile, is in a transition toward deprecation and change, so the topic “explaining cookies” carries structural uncertainty about its lifespan. The seller’s decision to lock in a 578x gain is the mirror image of that uncertainty.

What transfers, and what doesn’t

A few mechanisms would work the same way on another domain. The value of an expired domain lies not in the name but in the inherited backlinks and a topic that keeps getting cited. Revenue is pageviews × RPM, and regulation- and compliance-adjacent topics change the order of magnitude on the RPM side. And a high margin from a single revenue source is at once the charm at sale time and the fragility at operating time.

The limits are even clearer. Picking up this domain for $9,000 in 2008 owes less to foresight about privacy regulation than to the luck of having held it for 14 years. A tailwind like GDPR cannot be designed, and the “definitional content” position that draws organic links from the NYT is one a latecomer can almost never take on the same topic. What this case teaches is not the expected value of expired-domain investing, but the ceiling reached when a low-cost structure you can hold for years meets a well-judged moment to sell.