Since the domain is resolving to 216.198.79.1 but the TCP connection to port 443 is timing out, I’d separate DNS resolution from network reachability.
The DNS lookup itself appears to be working. The failure is happening after that, when your network tries to connect to the Vercel edge IP. That makes this look less like a Next.js/app issue and more like either a regional ISP route issue, stale local resolver cache, or an apex-domain-specific DNS/routing problem.
I’d also test the same URL from mobile data, another ISP, and a VPN. If it works through VPN/mobile but times out only on your normal Brazilian network, that strongly points to a regional routing/reachability issue rather than the domain being misconfigured.
If the subdomains work, compare their DNS records with the apex domain too. They may be reaching Vercel through a different record path.
Can you share the outputs of the dig commands and whether the site works from mobile data or VPN?