diff --git a/pkg/tools/integration/web.go b/pkg/tools/integration/web.go
index 4a50d3e55..70ca33b3c 100644
--- a/pkg/tools/integration/web.go
+++ b/pkg/tools/integration/web.go
@@ -2419,8 +2419,8 @@ func allowConfiguredProxyFirstHop(req *http.Request, rt http.RoundTripper) {
 }
 
 func isAllowedFirstHopHost(ctx context.Context, host string) bool {
-	allowed, _ := ctx.Value(webFetchAllowedFirstHopHostKey{}).(string)
-	if allowed == "" {
+	allowed, ok := ctx.Value(webFetchAllowedFirstHopHostKey{}).(string)
+	if !ok || allowed == "" {
 		return false
 	}
 	return allowed == normalizeAllowedFirstHopHost(host)