Legitimate FiveM visitors challenged by system DDoS mitigation; WebAssembly unavailable

Production URL: https://target-nine-sage.vercel.app/

TARGET — Chaque cible a son prix.

Le tableau des recherches et des primes de votre univers roleplay. Consultez les dossiers, repérez les cibles et entrez dans le jeu.

Plan: Hobby. Project: target.

Legitimate players open this website inside a FiveM phone/NUI browser. Some receive Vercel Security Checkpoint with the message “WebAssembly isn't supported or is turned off. Enable it to continue.” They cannot reach the application. Fully restarting and updating FiveM has already been tested and does not resolve the problem.

The project's Firewall dashboard attributes these challenges to DDoS Mitigation. Bot Protection is Off, Attack Mode is disabled, and there are no custom firewall rules or IP blocking rules.

Challenged user-agent examples in the dashboard include:

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.141 CitizenFX/1.0.0.37753 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.264 CitizenFX/1.0.0.37746 Safari/537.36

These are examples of challenged traffic; we have not matched the screenshot's WebAssembly failure to a specific user agent.

Could Vercel review this possible false positive affecting legitimate embedded-browser visitors, and advise a durable supported resolution without disabling protections globally? We understand that custom WAF bypass rules do not override system DDoS mitigations.

No player IP addresses, account credentials, private repository contents, or game chat are included in this report.

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: vercel.com/abuse

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.