If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?
One example is when I ping the domain, I use the IP on shodan and see that it's a cloudfront hostname. I'm guessing this means I'm reaching the cloudfront endpoint and not the web-app?