My domain sacredkriti.com uses Vercel nameservers (ns1.vercel-dns.com and ns2.vercel-dns.com), is assigned to my sacred-kriti project, shows “Valid Configuration,” and has valid managed SSL certificates.
However, both authoritative Vercel nameservers return 18.204.152.241 for sacredkriti.com and www.sacredkriti.com. That address serves a Heroku/Express 204 response over HTTP, and HTTPS fails during the TLS handshake with “tlsv1 alert protocol version.”
The locked Vercel ALIAS records in the dashboard point to vercel-dns-017.com targets. I also added an explicit apex A record for 76.76.21.21, but it is visible only in the dashboard and is not being published by either authoritative Vercel nameserver.
Please refresh or rebuild the domain’s DNS zone/ALIAS flattening and edge SSL routing.