Resolves hostnames and validates the resulting IP addresses against allow/deny CIDR ranges. Inspired by Stripe's smokescreen, intended for defending outbound HTTP calls against SSRF and access to private/loopback ranges.