499b56f3809508fc3f06f0d342a330bcced94c040e84843784998f1112c78422 calls the legitimate service ipapi[.]com to get the IP associated with josephine71.alabarda[.]ru through the following URL: hxxp://ipapi[.]com/csv/josephine71.alabarda.ru.