Benoit Panizzon wrote: [..]
So what's the best option to get those hosts down?
Locally register that domain in your recursive DNS servers and point NS records for it to a box you monitor. Then any customer trying to resolve it is most very likely infected / trying to get to the bad stuff...
Greets, Jeroen