Vercel custom domain redirects to SafeBrowse with ERR_SSL_PROTOCOL_ERROR

Help
, ,
1

Summary

My custom domain demo.jointenpo.com redirects to SafeBrowse instead of serving my application. The Vercel preview URL works fine. This appears to be the same infrastructure issue as [Production Outage] Custom domains redirect to SafeBrowse.

Project Details

  • Working URL: tenpo-web-demo-git-main-sam-bonins-projects.vercel.app
  • Broken URL: demo.jointenpo.com
  • Other subdomains work: staging.jointenpo.com and jointenpo.com work fine

Symptoms

  • HTTPS fails with ERR_SSL_PROTOCOL_ERROR
  • HTTP requests redirect to https://www.safebrowse.io/warn.html
  • Vercel dashboard shows “Valid Configuration” with green checkmark
  • SSL certificate was never provisioned

DNS Configuration

$ dig demo.jointenpo.com +short  
cname.vercel-dns.com.  
76.76.21.123

DNS is correctly pointing to cname.vercel-dns.com (same as my working staging.jointenpo.com subdomain).

Edge IPs Returning Errors

216.150.1.129
216.150.16.129
216.150.1.193
216.150.16.193

These IPs serve plain HTTP redirects to SafeBrowse on port 443 instead of performing a TLS handshake.

What I’ve Tried

  1. Removed and re-added domain multiple times
  2. Changed from CNAME to A record and back
  3. Redeployed the project
  4. Verified CAA records
  5. Flushed local DNS cache
  6. Waited 12+ hours

Request

Can someone from Vercel infrastructure check why this domain isn’t being routed correctly? Based on thread #29159, this seems to require a server-side fix.

5

Hey @samuelobonin-1406!

The issue was resolved by submitting our domain for security review through Google Search Console:

After requesting a review, the SafeBrowse redirects stopped and SSL started working correctly. If you’re experiencing this issue, verify your domain in Search Console and check for any flagged security issues
there.

To send your domain to Google Safe Browsing for review, log in to Google Search Console, navigate to Security & Manual Actions > Security Issues, and click “Request a review” after fixing malicious content. Ensure your site is clean, as the review process can take up to 72 hours.

1 Like
6

Hi @organicnz,

Thanks for the helpful recommendation. I was able to use the search console but to my surprise there were no security or manual actions required. There is no were to request a review (likely because of the no flags).

I suppose this thread is still pending as I can’t solve the issue.

Sam

1 Like
7

Good luck, Sam! I really hope infra can clear up the SafeBrowse / SSL routing on their side soon.

8

I’m seeing the same issue on my side now without SafeBrowse redirect. I suspect Vercel is throttling/limiting my project after the “Approaching your limits: Upgrade now to avoid service disruption” warning. Might be time to experiment with Cloudflare Pages lol

image
image1322Ă—860 23.7 KB

9

@organicnz , do you have Pro account or hobby account? I have pro.

1 Like
10

@samuelobonin-1406, I have a Hobby account. Pretty tight on finances since I’m bootstrapping my startup :sweat_smile: