Mine's set to 1 day (seems to be enough from all the cases we've learned about), I got you.
Also seems like this attack and most others were caught by automated tooling from 3rd parties