I'm trying to understand better the different network-query tools such as
nslookup and at the same time a bit more about the architecture of internet requests, servers, and the like (NIC, A Record, MX) whilst already knowing a little about TCP, nameservers, domain registrars, packet sniffers, HTTP headers, and IP addresses. That's my background, here's my question.
whois let's say www.valgrind.org (or valgrind.org) I get at least two different IP answers: 18.104.22.168 and 172.16.0.23#53.
$ nslookup valgrind.org Server: 172.16.0.23 Address: 172.16.0.23#53 Non-authoritative answer: Name: valgrind.org Address: 22.214.171.124
Trying to browse to either of these in
chromium leads to a
403 Forbidden error. Furthermore I'm not sure which one to navigate to, but
ping is somehow able to figure it out! If I
ping valgrind.org (or
ping www.valgrind.org) it chooses
$ ping valgrind.org PING valgrind.org (126.96.36.199) 56(84) bytes of data. 64 bytes from 188.8.131.52: icmp_req=1 ttl=50 time=80.2 ms
How did it know to do that? And what other tool should I be using to find out how my browser goes from
valgrind.org and loads something?