It likes like an ISP may have blocked some of Vercel’s IP ranges. That the *.vercel.app address works while the custom domain doesn’t makes me more sure of that since they typically use different IPs.
I shared your reports with our team so they can investigate further. Thanks for letting us know 