Use a shorter TTL for rejected origins so unknown domains do not hit the database on every cross-origin request.
Avoid hitting the database on every cross-origin request by caching published custom domain checks for five minutes.