Thanks for quick response, @User - Not sure what

API domain

refers to. The sites are all statically hosted on Netlify if that helps clarify. I.E. there is no back end. Netlify checks for a valid JWT token before serving the page or denying access/redirecting. - They do have the same TLD.