We have a 4th number. I like the idea that this could be an ip address (159.65.85.240). It appears to be Google if you put that in a browser, but actually it's serving a page that redirects to google with a meta tag:
(16:14) bfoster:~$ curl -i 159.65.85.240
HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Thu, 19 Jul 2018 20:14:06 GMT
Content-Type: text/html
Content-Length: 71
Last-Modified: Thu, 19 Jul 2018 19:56:44 GMT
Connection: keep-alive
ETag: "5b50ecfc-47"
Accept-Ranges: bytes
<meta http-equiv="refresh" content="0; url=https://www.google.com/" />
The last line is the response body. Also note that according to the last-modified header, this page was modified today, shortly before Freddy's last tweet.
If we do a reverse DNS lookup on that ip address, we find that it points to hammern.com.
(16:14) bfoster:~$ dig +short -x 159.65.85.240
hammern.com.
I'm not sure what to make of that.