Hosting-control.cc removal: stop the pop-ups and redirects

Brendan Smith
Brendan Smith - Cybersecurity Analyst
3 Min Read
Hosting-control.cc popup redirects removal guide featured image

Hosting-control.cc is a browser-based scam page that pushes fake alerts, pop-ups, and redirect loops. It usually is not a full system infection, but it can drag you into phishing pages, shady downloads, and recurring notification spam.

Hosting-control.cc follows the same playbook as Chesstop7.xyz, Grs-protect.co.in, Zravonira.com, and Some-othertag.cc: a misleading page asks you to click Allow, then turns that permission into nonstop alerts.

Threat name Hosting-control.cc
Type Browser hijacker / notification abuse
Primary behavior Fake alerts, redirect loops, push notification spam
Risk level Medium – phishing and scam exposure
Quick stop: close the tab without clicking any buttons, then reopen the browser. If the alert returns right away, the trigger is likely a notification permission or a rogue extension.

How it spreads: the most common entry points are fake CAPTCHAs, bundled freeware, and sketchy download pages. Once notifications are allowed, the site can spam alerts even when no tab is open.

How to remove Hosting-control.cc

Step 1 – Remove notification permissions. Use the steps below to revoke notification access for Hosting-control.cc and any other unfamiliar sites.

If hosting-control.cc keeps showing unwanted pop-ups, you likely granted it permission to send notifications. To stop them, you need to revoke that permission in your browser settings.

Google ChromeSafariMozilla FirefoxMicrosoft EdgeBraveOpera
Google Chrome
  1. Copy and paste this into the address bar: chrome://settings/content/notifications
  2. Scroll down to the Allowed to send notifications list.
  3. Find hosting-control.cc.
  4. Click the three dots (...) next to it and select Remove (or Block).
Safari
  1. Open Safari and go to Settings (or Preferences).
  2. Click the Websites tab and select Notifications on the left.
  3. Find hosting-control.cc in the list on the right.
  4. Select it and click Remove (or change "Allow" to "Deny").
Mozilla Firefox
  1. Copy and paste this into the address bar: about:preferences#privacy
  2. Scroll down to Permissions and click Settings... next to Notifications.
  3. Type hosting-control.cc in the search bar or find it in the list.
  4. Select the site and click Remove Website.
Microsoft Edge
  1. Copy and paste this into the address bar: edge://settings/content/notifications
  2. Look under the Allow section.
  3. Find hosting-control.cc.
  4. Click the three dots (...) next to it and select Remove (or Block).
Brave
  1. Copy and paste this into the address bar: brave://settings/content/notifications
  2. Scroll to the Allowed to send notifications list.
  3. Find hosting-control.cc.
  4. Click the three dots (...) and select Remove (or Block).
Opera
  1. Copy and paste this into the address bar: opera://settings/content/notifications
  2. Check the Allowed to send notifications list.
  3. Find hosting-control.cc.
  4. Click the three dots next to it and select Remove.

Step 2 – Remove suspicious extensions. Unwanted add-ons can keep the redirect loop alive. Use the built-in removal steps below and disable anything you did not install on purpose.

Google ChromeSafariMozilla FirefoxMicrosoft EdgeBraveOpera
Google Chrome
Extension Manager
  1. Launch Chrome.
  2. Click the three dots (...) in the top right corner.
  3. Select Extensions > Manage Extensions.
  4. Click Remove next to the extension you want to delete.

Quick Access: Type chrome://extensions/ in the address bar.

Safari
Settings > Extensions
  1. Open Safari.
  2. In the menu bar, click Safari and select Settings (or Preferences).
  3. Click on the Extensions tab.
  4. Select the extension and click Uninstall.
Mozilla Firefox
Add-ons and Themes
  1. Click the menu button, select Add-ons and themes.
  2. Go to the Extensions tab.
  3. Click the three dots (...) next to the extension and select Remove.

Quick Access: Type about:addons in the address bar.

Microsoft Edge
Browser Extensions
  1. Launch Microsoft Edge.
  2. Click the three dots (...) in the top right corner.
  3. Select Extensions.
  4. Find the extension and click Remove.

Quick Access: Type edge://extensions/ in the address bar.

Brave
Shields and Extensions
  1. Launch Brave browser.
  2. Click the menu icon > Extensions.
  3. Find the extension and click Remove.

Quick Access: Type brave://extensions/ in the address bar.

Opera
Extension Management
  1. Launch Opera.
  2. Click the Opera logo in the top left corner.
  3. Select Extensions > Extensions.
  4. Click the X or Remove button next to the extension.

Quick Access: Type opera://extensions/ in the address bar.

Step 3 – Reset browser settings. If the redirects keep returning, reset the browser to its default state. This clears hidden settings and restores normal behavior without deleting saved passwords.

Google ChromeSafariBraveMozilla FirefoxMicrosoft EdgeOpera
Google Chrome
Full Browser Reset
  1. Tap on the three dots (...) in the top right corner and Choose Settings. Choose Settings
  2. Choose Reset and Clean up and Restore settings to their original defaults. Choose Reset and Clean
  3. Tap Reset settings. Fake Virus Alert removal

Quick Access: Type chrome://settings/reset in the address bar.

Safari
Clear History and Cache
  1. Open Safari.
  2. In the menu bar, click Safari > Clear History.
  3. Select all history and click Clear History.
  4. Go to Safari > Settings (or Preferences).
  5. Click the Privacy tab and select Manage Website Data... > Remove All.
  6. In the Advanced tab, check Show features for web developers.
  7. In the menu bar, select Develop > Empty Caches.
Brave
Restore Factory Settings
  1. Launch Brave browser.
  2. Click the menu icon in the top right corner and select Settings.
  3. Click Additional settings > Reset settings.
  4. Tap Restore settings to their original defaults.
  5. Confirm by clicking Reset settings.

Quick Access: Type brave://settings/reset in the address bar.

Mozilla Firefox
Refresh Browser State
  1. In the upper right corner tap the three-line icon and Choose Help. Firefox: Choose Help
  2. Choose More Troubleshooting Information. Firefox: Choose More Troubleshooting
  3. Choose Refresh Firefox... then Refresh Firefox. Firefox: Choose Refresh

Quick Access: Type about:support and click Refresh Firefox.

Microsoft Edge
System Reset
  1. Tap the three dots. Microsoft Edge: Fake Virus Alert Removal
  2. Choose Settings. Microsoft Edge: Settings
  3. Tap Reset Settings, then Click Restore settings to their default values. Disable Fake Virus Alert in Edge

Quick Access: Type edge://settings/reset in the address bar.

Opera
Reset and Clean Up
  1. Launch the Opera browser.
  2. Click the Opera menu button in the top left corner and select Settings.
  3. Scroll down to the Advanced section in the left sidebar and click Reset and clean up.
  4. Click Restore settings to their original defaults.
  5. Click Reset settings to confirm.

Quick Access: Type opera://settings/reset in the address bar.

After reset, verify that hosting-control.cc is no longer set as your default search engine or homepage.

Step 4 – Remove suspicious apps. If you see unfamiliar programs installed around the time the pop-ups began, remove them using the steps below.

If you see any suspicious applications that you don't remember installing, you should remove them as well.

WindowsMacAndroid
Windows 10/11
  1. Right-click the Start button and select Installed Apps (or Apps & Features).
  2. Scroll through the list to find suspicious app or any other unfamiliar program.
  3. Click the three dots (...) next to it and select Uninstall.
Mac OS
  1. Open Finder and go to the Applications folder.
  2. Locate suspicious app or any app you don't recognize.
  3. Drag it to the Trash.
  4. Empty the trash to remove it permanently.
Android 11+
  1. Go to Settings > Apps > See all apps.
  2. Find suspicious app or any suspicious app in the list.
  3. Tap on it and select Uninstall.

Step 5 – Scan if it keeps coming back. Persistent pop-ups can signal adware or a hijacker that reinstalls itself. Run a full scan and remove anything flagged. If you want a guided cleanup, use the removal instructions below.

After manual cleanup: reboot Windows and run a full scan to check startup entries, scheduled tasks, bundled apps, and hidden files that may restore the threat.
If you see "Managed by your organization" in the browser: A policy is forcing settings behind the scenes. This often means a hijacker added policy keys related to hosting-control.cc that keep re-applying the same homepage, search engine, or extension after you reset. In that case, remove the unknown policy entries first, then repeat the steps above so the changes stick.
Windows (Registry)Mac (Profiles)Internal Browser Check
Windows (Registry Editor)
  1. Press Win + R, type regedit, and hit Enter.
  2. Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
  3. Look for folders named Google, BraveSoftware, or Microsoft (under Edge).
  4. If you see a Policies subfolder with unknown keys inside, right-click and Delete it.
  5. Repeat for: HKEY_CURRENT_USER\SOFTWARE\Policies\

Warning: Be careful when editing the registry. Deleting the wrong key can cause system issues.

macOS (Configuration Profiles)
  1. Click the Apple menu > System Settings (or System Preferences).
  2. Search for Profiles. If the icon isn't there, no profiles are installed.
  3. Select any suspicious profile (e.g., "Chrome Settings", "Admin Profile").
  4. Click the minus (-) button to remove it.
Internal Policy Page

Open the built-in policy page to see rules that hosting-control.cc may have applied:

  • Chrome: chrome://policy
  • Brave: brave://policy
  • Edge: edge://policy

Look for policies with names like ExtensionInstallForceList or HomepageLocation.

Persistence is common: if the redirects return after a reboot, a hidden policy or startup item is reapplying the same settings. If a page demands immediate action, treat it as a red flag and verify before you trust any warning.

Share This Article
Cybersecurity Analyst
Follow:
Brendan Smith has spent over 15 years knee-deep in cybersecurity, chasing down malware from the gritty reverse-engineering of old-school trojans all the way to wrangling full-blown incident responses for small-to-medium businesses that couldn’t afford a full-blown breach. Over at Gridinsoft, he’s the guy piecing together those double-checked guides on nasty stuff like AsyncRAT ransomware—take last year, for instance, when his breakdowns caught more than 200 sneaky variants right in live scans, knocking user cleanup jobs down by a solid 40% and saving folks hours of headache.
Leave a Comment

AI Assistant

Hello! 👋 How can I help you today?