I couldn't agree more it is so easy to let people know a particular domain is bad, if you are buying it for black hat purposesnno domain is worth more than $75.
If he does end up phishing with it again it will be really easy to get the domain suspended as namecheap is a us registrar.
In short, xflat is dumb as a rock.