Within a few hours would be optimum, we refresh many sites and once we publish, Google instantly flags the new site as suspicious not secure.  This is problematic if the legacy site domain has a lot of traffic.