These two detectors has verbose description if your hosts file is being detected as modified.

Do keep in mind that the only detections we care about here are:

"Hosts File Modified" and a "/data/adb/modules/bindhosts/system/etc" mount.
If you have other detections, it likely is NOT our problem.

You can get them here
https://github.com/reveny/Android-Native-Root-Detector/releases
https://github.com/RabehX/Securify/releases