[ErroraBorealis]

You don't need $400+ a month to pay for hosting. Look at the charts on abuse.ch
Not a lot of them you see are fastflux
People would not rattle an abundant mount of money out of their pockets when the servers could be closed the next day or posted on a tracket
Though if you seriously pay $400+ a month I would suspect there is some stupidity put in here

This. As long as the botnet isn't too big, I'd use shared hosting with godaddy or a big host like that. Also, login pages that don't look like something for a botnet can lower detection.