{
  "port": 8008,
  "protocol": "tcp",
  "service": "HTTP alternate; Google Cast device HTTP",
  "oneLiner": "A registered HTTP alternate port, and the plaintext HTTP interface of every Chromecast.",
  "whatItIs": "IANA registers 8008 as http-alt, the same designation 8080 carries, so it is a legitimate second home for web servers — IBM HTTP Server and many appliances use it. On a home network the far more likely answer is a Google Cast device: pychromecast's DIAL client builds its device URLs as `http://<ip>:8008`, and that endpoint returns the device's `eureka_info` — name, model, firmware, Wi-Fi details — alongside the TLS control channel on 8009. Nmap sees 8008 open on roughly 0.7% of scanned hosts, making it one of the busier alternate HTTP ports.",
  "exposure": {
    "verdict": "careful",
    "note": "As a web port it is as safe as the app behind it. As a Cast device it is not: the 8008 interface answers device-information and setup requests without authentication, so it must stay on the LAN."
  },
  "checkCommand": "curl -s http://TARGET:8008/setup/eureka_info",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8008 (http-alt)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8008",
      "kind": "iana"
    },
    {
      "title": "home-assistant-libs/pychromecast — dial.py (FORMAT_BASE_URL_HTTP = \"http://{}:8008\")",
      "url": "https://github.com/home-assistant-libs/pychromecast/blob/master/pychromecast/dial.py",
      "kind": "github"
    }
  ],
  "ianaName": "http-alt"
}