Vawtrak (aka Tepfer), most of them seem to be active:
Some of these domains are associated with the email address firstname.lastname@example.org.
You could block the sites individually, but because the sites are not isolated, I would personally recommend using the following blocklist:
The 188.8.131.52/24 range is allocted to "Cherepanova" in Russia. 184.108.40.206/27 is Redstation in the UK.