Merge pull request from GHSA-2wmj-46rj-qm2w
* fix: find instance by original domain
* return instance not found on invalid origin
* test: ensure correct host validation
* test: instance not found is translated
(cherry picked from commit 11d7a8ce619b03c9388371f08082984a3f8f7dd8)