Starting Nmap 7.98 ( https://nmap.org ) at 2026-08-27 00:16 +0200
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000059s latency).

PORT     STATE SERVICE VERSION
3000/tcp open  ppp?
| fingerprint-strings: 
|   GetRequest: 
|     HTTP/1.1 200 OK
|     Access-Control-Allow-Origin: *
|     X-Content-Type-Options: nosniff
|     X-Frame-Options: SAMEORIGIN
|     Feature-Policy: payment 'self'
|     X-Recruiting: /#/jobs
|     Accept-Ranges: bytes
|     Cache-Control: public, max-age=0
|     Last-Modified: Wed, 26 Aug 2026 21:00:23 GMT
|     ETag: W/"24b1-1a03fdfbe8f"
|     Content-Type: text/html; charset=UTF-8
|     Content-Length: 9393
|     Vary: Accept-Encoding
|     Date: Wed, 26 Aug 2026 22:16:58 GMT
|     Connection: close
|     <!--
|     Copyright (c) 2014-2026 Bjoern Kimminich & the OWASP Juice Shop contributors.
|     SPDX-License-Identifier: MIT
|     <!doctype html>
|     <html lang="en" data-beasties-container>
|     <head>
|     <meta charset="utf-8">
|     <title>OWASP Juice Shop</title>
|     <meta name="description" content="Probably the most modern and sophisticated insecure web application">
|     <meta name="viewport" content="width=device-width, initial-scale=1">
|     <link rel="preconnect" href="htt
|   HTTPOptions, RTSPRequest: 
|     HTTP/1.1 204 No Content
|     Access-Control-Allow-Origin: *
|     Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
|     Vary: Access-Control-Request-Headers
|     Content-Length: 0
|     Date: Wed, 26 Aug 2026 22:16:59 GMT
|     Connection: close
|   Help, NCP, RPCCheck: 
|     HTTP/1.1 400 Bad Request
|_    Connection: close
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port3000-TCP:V=7.98%I=7%D=8/27%Time=6A8F65DB%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,2668,"HTTP/1\.1\x20200\x20OK\r\nAccess-Control-Allow-Origin:\x
SF:20\*\r\nX-Content-Type-Options:\x20nosniff\r\nX-Frame-Options:\x20SAMEO
SF:RIGIN\r\nFeature-Policy:\x20payment\x20'self'\r\nX-Recruiting:\x20/#/jo
SF:bs\r\nAccept-Ranges:\x20bytes\r\nCache-Control:\x20public,\x20max-age=0
SF:\r\nLast-Modified:\x20Wed,\x2026\x20Aug\x202026\x2021:00:23\x20GMT\r\nE
SF:Tag:\x20W/\"24b1-1a03fdfbe8f\"\r\nContent-Type:\x20text/html;\x20charse
SF:t=UTF-8\r\nContent-Length:\x209393\r\nVary:\x20Accept-Encoding\r\nDate:
SF:\x20Wed,\x2026\x20Aug\x202026\x2022:16:58\x20GMT\r\nConnection:\x20clos
SF:e\r\n\r\n<!--\n\x20\x20~\x20Copyright\x20\(c\)\x202014-2026\x20Bjoern\x
SF:20Kimminich\x20&\x20the\x20OWASP\x20Juice\x20Shop\x20contributors\.\n\x
SF:20\x20~\x20SPDX-License-Identifier:\x20MIT\n\x20\x20-->\n\n<!doctype\x2
SF:0html>\n<html\x20lang=\"en\"\x20data-beasties-container>\n<head>\n\x20\
SF:x20<meta\x20charset=\"utf-8\">\n\x20\x20<title>OWASP\x20Juice\x20Shop</
SF:title>\n\x20\x20<meta\x20name=\"description\"\x20content=\"Probably\x20
SF:the\x20most\x20modern\x20and\x20sophisticated\x20insecure\x20web\x20app