technology software

healthcare medical

government public service

documentation technical

English

CassieGuid_a363400f-dda7-4d1b-8731-df252632081a

eli_lilly_session

XSRF-TOKEN

Domain 'startlilly.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 10 characters in 'startlilly' with 2 vowels and eight consonants. Splitting it apart reveals 2 words: start, lilly. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

html/79/15/79153f23-4095-40b9-8abf-b02ab868aac6_fallback.html.gz

Getting Started

html/79/15/79153f23-4095-40b9-8abf-b02ab868aac6.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline'; style-src 'report-sample' 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' *.cassiecloud.com *.cassiecloud.com; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; frame-ancestors 'self' *.lilly.com *.mici.lilly.fr *zepbound.lilly.com *.mounjaro.com *.raggiungituoiobiettivi.it *.verzenio.com *.olumiant.com *.lillymedical.co.uk *.lillymedical.es *.lillymedical.fr *.continuandobtk.com.br *.ilpesodeldiabete.it *.lillymedical.it *.gewicht-effekt.de *.opesododm2.com.br *.emgality.com *.morethannormalaging.com *.omvoh.com *.trulicity.com *.jaypirca.com *.lillypricinginfo.com *.basaglar.com *.lyumjev.com *.lillytempo.com *.humalog.com *.tap.lilly *.humulin.com *.humatrope.com *.rezvoglar.com *.true.lilly *.lillyinsulinlispro.com *.insulinaffordability.com *.lillyoncologysupport.com *.together.lilly *.lillyproducts.ca *.lillyloxooncologypipeline.com *.lrlscience.com *.taltz.com *.certuitad.com *.lillycares.com *.setmygoals.nl *.lillyplay.com.br *.poderdogip.com.br *.zypadhera.co.uk *.lilly-produkt.de *.cms.lilly.com *.cms-prodsupp.lilly.com *.cms-stage.lilly.com *.cms-dev.lilly.com *.powerofgip.it *.startlilly.com;

ea730ddf9fc02b354bd3c4a6443272e24d2c299bce3b49f77ab773ede2247dcd

4c4fb8f5638ec38ed0ef44214100c895c3e581f7d5a200312c3a8a586ea22e77

91f029dfd4e54d49238562f4ce3314098f2a980f7dccfcf8c6022c394c886064

e2d671aca04d377e80cf986e315528b811fd9076979f192fa987fd2551a7e6ed

9d841b497791fed2fb85799b800102b0f42f43bc9209f93019724bf15fbae1c9

7d146d47b9e902d6ceb5b80c5acf9e67d95f5850a522751f7ac799b7c21cef85

8c857b29d5c20db5ff6e6b68daf07335dd3316c65b818f4eb5e5b04c0253322d

3039698607781f5660ee573438ee3b17908d02db331bdb401fe20a88d5aa2290

d6ca0234b229adc546d7c0c1130745e2edca07341c054a761ed3d0359ffb39a8

viewport

cassie-viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy Corporate Domains, LLC

STARTLILLY.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


			(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-P8V2MQ8T');
		

!function(){var e={669:function(e,t,n){e.exports=n(609)},448:function(e,t,n){"use strict";var i=n(867),s=n(26),r=n(372),o=n(327),a=n(97),c=n(109),l=n(985),d=n(61);e.exports=function(e){return new Prom

Google

✅ Low Risk - https://startlilly.com/meet-zepbound-vial/getting-started

Requests	IP Address	Location	AS Autonomous System
22	104.248.234.127	North Bergen, New Jersey, United States	AS14061DIGITALOCEAN-ASN
21	3.33.169.150	United States	AS16509AMAZON-02
7	18.244.18.51	United States	AS16509AMAZON-02
6	15.197.161.29	United States	AS16509AMAZON-02
3	142.250.184.227	United States	AS15169GOOGLE
2	13.32.99.70	New York, New York, United States	AS16509AMAZON-02
2	50.16.21.252	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	172.64.155.179	United States	AS13335CLOUDFLARENET
1	104.18.41.143	United States	AS13335CLOUDFLARENET
1	104.18.32.83	United States	AS13335CLOUDFLARENET
79	84	-	-

Security Scan Report: startlilly.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History