indexo.dev

zerodayclock.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 491 ms crawled 2026-05-19

US · 172.67.143.91 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Zero Day Clock
Description
Track Time-to-Exploit (TTE) across 83,000+ CVEs from 10 sources including CISA KEV, ExploitDB, and Metasploit. Median TTE trends, year-over-year analysis, and live exploit intelligence.
Language
en

Open Graph

url
https://zerodayclock.com
title
Zero Day Clock
site name
Zero Day Clock
description
The gap between disclosure and exploitation is collapsing to zero.

Technology

CDN
Cloudflare
CMS
Next.js

Registration

Registrar
NameCheap, Inc.
Created
2026-02-22
Expires
2027-02-22 277 days left
Updated
2026-02-22
Name servers
  • arely.ns.cloudflare.com
  • vin.ns.cloudflare.com

DNS records live

NS
  • arely.ns.cloudflare.com
  • vin.ns.cloudflare.com
MX
  • 12 route2.mx.cloudflare.net
  • 2 route1.mx.cloudflare.net
  • 62 route3.mx.cloudflare.net

Email authentication weak

SPF
v=spf1 include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-23 to 2026-07-22
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://zerodayclock.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
DENY
permissions-policy
camera=(), microphone=(), geolocation=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://jmcqeffsqckkefqiivhk.supabase.co; img-src 'self' data:; font-src 'self'
strict-transport-security
max-age=63072000; includeSubDomains; preload

Linked from (2)