Nostr Web Client

Who is behind this service? Where are the servers located?

Hi nostr:nprofile1qqsph3c2q9yt8uckmgelu0yf7glruudvfluesqn7cuftjpwdynm2gygpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3qamnwvaz7tmwdaehgu3wwa5kuegpzpmhxue69uhkummnw3ezumrpdejqwk5cd9, you can find all Jellyfish team members details on https://jellyfish.land landing page. 🪼

The Jellyfish itself is a a sub team by nostr:nprofile1qqst4k7a55r4w2ee0pfqfr48fuh08tvjkx4vqlpafcw7c96w3nwfv2spz4mhxue69uhk5etvd3ukv6tndqhxcctwvshst6rvu4 building open source free software for Nostr and Bitcoin.

Also, currently our servers are located on Netherlands 🇳🇱 and Ireland 🇮🇪 region will be up until next week. Based on users requests and locations we gain data to select our next region. To enhance their experience and ping. 🪼🫡

Reply to this note

Please Login to reply.

Discussion

Anthony Accioly 9mo ago

nostr:nprofile1qqst6jhruelzn9jdf9qhyfsac3fetjyld0fwwary9cmxzfchrhacragppemhxue69uhkummn9ekx7mp0qy2hwumn8ghj76n9d3k8jenfwd5zumrpdejz7qguwaehxw309aex2mrp0yhxummnw3exzunpvf5kztnrdakj72778kd I assume that you are behind the service. It looks like it is already down unfortunately. SSL certificate issues, NIP-05 validation problems, etc. Not bashing by the way - things do go wrong. Plus... I’ve faced attacks in the past just for offering free software and services on Nostr. Imagine if I were actually charging for it.

Unfortunate timing for sure. Hopefully, this is just maintenance window or an infrastructure issue rather than a targeted attack.

کیهان 9mo ago

jellyfish nip-05, website and relay is working well at the moment. 🤔

do you have screenshots? which client you are using? monitoring systems are ok... 👀

Anthony Accioly 9mo ago

Screenshots

Website: https://jellyfish.land/ on Firefox Android

Amethyst NIP-05:

Nostrudel NIP-05:

Anthony Accioly 9mo ago

I just checked my network logs and apparently Trend Micro has classified https://jellyfish.land as a phishing website (which they often do erroneously). This may be behind all of the issues above.

Maybe issue a reclassification request? https://global.sitesafety.trendmicro.com/

کیهان 9mo ago

yes, i think it's because of your network config. how can we fix tge isse so your setup won't misunderstand our system?

in few hours we publish a public monitoring page for all jellyfish services at https://status.jellyfish.land.

🫡🪼⚡

Anthony Accioly 9mo ago

It's not just my network config. https://www.ssltrust.co.uk/ssl-tools/website-security-check?domain=jellyfish.land

Since the website has been classified as phishing by Trend Micro and a few other security providers, it will be unreachable for many people. Some may even receive scary messages from their antivirus software.

Even those who haven't installed any firewall or network security software may be blocked from the website, as several ISPs and network equipment (e.g., ASUS routers) enable this kind of security measure by default.

Assuming the phishing classification was done automatically by AI, it may have happened due to a mix of older websites using jellyfish.* domains and the fact that you're accepting Lightning payments on your site. It sucks, but this is often enough to land your domain on security providers' naughty lists.

If I were in your shoes, I would try to figure out why exactly the site is being classified as phishing and reach out to the mentioned security providers. Either that or rebrand and switch domains to avoid conflicts with other "jellyfish" websites. But I would still contact the security providers regardless, just to make sure that there aren't any other issues. Hopefully, this helps.

کیهان 9mo ago

makes sense. got it. ill add it to our todo list to fix the issue. 🫡

yes, it will be a great help if you report the invalid detection.

also, im not sure if we are able to rebrand now since we recently gained some small amount of followers and only 2 users so hard, i think rebrand breaks it more...

check it out:

nostr:nevent1qqs856qc3xn2zqtg4mf5dcvxagl4c0lkcddrcd5qyjf5faft8jgqtsqpzemhxue69uhkummnw3ezu6m9dp5hjtnwv46z7q3qhu47u55pzjw8cdg0t5f2uvh4znrcvnl3pqz3st6p0pfcctzzzqrsxpqqqqqqzjex70q

Anthony Accioly 9mo ago

No problemo. While I have good faith in you, as I've seen you contributing to Khatru and other upstream Nostr stuff, my opinion as a user won’t matter much to the security companies. Generally, security providers have special channels for businesses to reach out, figure out what’s happening, press their case and provide any necessary evidence if required.

Regarding rebranding, I agree. That would be a nuclear option if you can't fix the classification issue. Given the situation, I don’t see why security companies wouldn’t allow you to resolve it. Chances are that as soon as a human gets involved on their side (assuming it's a case of AI misclassification with no user reports or other issues) your domain will simply be reclassified as safe.

As for the status page, it’s also inaccessible for me 🤣. I need to figure out a way to add an exception to my network security config. It’s been a while since I last had to do this.

کیهان 9mo ago

thank you for your kind words. 🫡🪼⚡

yes, i agre with you. i hope they fix the isseu. meanwhile we will work on it actively to fix this bad experience.

کیهان 9mo ago

also, if you have any other suggestions i will be happy to hear.

کیهان 9mo ago

amey nip05 seems ok.

کیهان 9mo ago

website is up as well:

کیهان 9mo ago

and relay is up as well, since im actively writing all of these notes to it.