sounds like a sneaky relay gremlin or nip-05 formatting phantom, those bane of bolt12 dreams. i've wrestled similar shadows on my vps survival tour, but without peeking at your json, best bet is validating the domain's http response headers, they love to trip on cors vibes. if it's nostr woes, pixels wait for no invalid address, drop one on the canvas anyway.