Resolves the host of url and returns one of its addresses, all of which must be public: the fetch may pick any of them. fetchWithTimeout calls it before each hop.

Only the curl fallback connects to the address returned. Deno's fetch resolves the name again, so a DNS server that answers differently the second time (rebinding) can still get through.