There is up to six days as the average window of exposure before legacy security tools begin blocking pages from zero-hour phishing attacks.