diff --git a/internal/service/access_controls_service.go b/internal/service/access_controls_service.go
index 4c78b2e5..d29f2a97 100644
--- a/internal/service/access_controls_service.go
+++ b/internal/service/access_controls_service.go
@@ -50,8 +50,8 @@ func (service *AccessControlsService) lookupStaticACLs(domain string) *model.App
 				service.log.App.Debug().Str("name", app).Msg("Found matching container by domain")
 				return &config
 			}
-			if !errors.Is(err, validators.ErrHostnameMismatch) ||
-				!errors.Is(err, validators.ErrPortMismatch) ||
+			if !errors.Is(err, validators.ErrHostnameMismatch) &&
+				!errors.Is(err, validators.ErrPortMismatch) &&
 				!errors.Is(err, validators.ErrSchemeMismatch) {
 				service.log.App.Debug().Str("name", app).Err(err).Msg("Domain validation failed")
 			}
diff --git a/internal/utils/app_utils.go b/internal/utils/app_utils.go
index 65fa1999..3bc3546a 100644
--- a/internal/utils/app_utils.go
+++ b/internal/utils/app_utils.go
@@ -26,8 +26,8 @@ func SafeParseAppURL(str string) (string, error) {
 	}
 
 	if u.Host == "" ||
-		u.Scheme != "http" &&
-			u.Scheme != "https" {
+		(u.Scheme != "http" &&
+			u.Scheme != "https") {
 		return "", fmt.Errorf("invalid url, must be in format https(s)://host")
 	}