Platform Info & API
7 supported platforms, the free API, and how it all works.
7 Supported Platforms
The original IoT search engine. Indexes MMH3 of every favicon it scans.
http.favicon.hash:{hash}
Open Shodan
Strong Asia-Pacific coverage. Query is base64(iconhash="<md5>") on zoomeye.ai.
iconhash="<md5>" (base64 encoded in URL)
Open ZoomEye
Censys Platform Web Properties search using an exact MD5 favicon hash.
web.endpoints.http.favicons.hash_md5="{hash}"
Open Censys
Searches favicon SHA256; its perceptual search uses a different algorithm.
http.favicon.hash_sha256:{hash}
Open Netlas
Uses VirusTotal Intelligence URL search by difference hash; access requires an eligible account.
entity:url main_icon_dhash:"<hash>"
Open VirusTotal
Signed hex of MMH3 hash. Positive: 72b36155 · Negative: -30149ea. Uses search.criminalip.io.
favicon:<hex> e.g. 72b36155 or -30149ea
Open CriminalIP
Quick API
API v2
RecommendedAll 5 hashes + 7 platform links + tech detection. Free, no auth.
GET https://faviconhasher.codejavu.tech/api/v2?url=https://example.com
Full API Docs
Bulk Processing
Up to 10 unique URLs with bounded concurrency. Rate limited to 5 req/min.
POST /bulk
{"urls": ["https://example.com", "https://github.com"]}
Bulk Docs
Technology Fingerprint DB
Every hash you generate is automatically checked against our curated database of 113+ known technology fingerprints. A match instantly tells you what's running on the target host.
Spring Boot · Jenkins · Grafana · pfSense · F5 BIG-IP · Cobalt Strike · Kubernetes · and 100+ more.
How it works
Fetch Favicon
3 strategies: HTML link tag parsing → /favicon.ico fallback → image href scan. Handles sites like Facebook that block HTML bots.
Compute 5 Hashes
MMH3 on base64 bytes (Shodan/FOFA), MD5 (Censys), SHA256 (Netlas), perceptual hash and difference hash (VirusTotal).
One-click Search
Pre-builds search URLs for all 7 platforms. One favicon → related internet-facing hosts instantly.
Auto-identify Tech
Matches MMH3 against 113+ known fingerprints — Spring Boot, Jenkins, Grafana, Cobalt Strike, pfSense, and more.