extracting `hosts` for stricter non-address check