Platform Info & API
8 supported platforms, the free API, and how it all works.
8 Supported Platforms
The original IoT search engine. Indexes MMH3 of every favicon it scans.
http.favicon.hash:{hash}
Open Shodan
Chinese threat intel platform — often 10× more results than Shodan.
icon_hash="{hash}"
Open FOFA
Strong Asia-Pacific coverage. Query is base64(iconhash="<md5>") on zoomeye.ai.
iconhash="<md5>" (base64 encoded in URL)
Open ZoomEye
Comprehensive scanner, excellent US coverage. Uses MD5.
services.http.response.favicons.md5_hash="{hash}"
Open Censys
Supports SHA256 and fuzzy perceptual hash matching.
http.favicon.hash_sha256:{hash}
Open Netlas
Uses GTI URL entity search by difference hash. Excellent for phishing & malware infra.
entity:url main_icon_dhash:"<hash>"
Open VirusTotal
Signed hex of MMH3 hash. Positive: 72b36155 · Negative: -30149ea. Uses search.criminalip.io.
favicon:<hex> e.g. 72b36155 or -30149ea
Open CriminalIP
Quick API
API v2
RecommendedAll 5 hashes + 8 platform links + tech detection. Free, no auth.
GET http://faviconhasher.codejavu.tech/api/v2?url=https://example.com
Full API Docs
Bulk Processing
Up to 50 URLs concurrently. Rate limited to 5 req/min.
POST /bulk
{"urls": ["https://example.com", "https://github.com"]}
Bulk Docs
Technology Fingerprint DB
Every hash you generate is automatically checked against our curated database of 113+ known technology fingerprints. A match instantly tells you what's running on the target host.
Spring Boot · Jenkins · Grafana · pfSense · F5 BIG-IP · Cobalt Strike · Kubernetes · and 100+ more.
How it works
Fetch Favicon
3 strategies: HTML link tag parsing → /favicon.ico fallback → image href scan. Handles sites like Facebook that block HTML bots.
Compute 5 Hashes
MMH3 on base64 bytes (Shodan/FOFA), MD5 (Censys), SHA256 (Netlas), perceptual hash and difference hash (VirusTotal).
One-click Search
Pre-builds search URLs for all 8 platforms. One favicon → thousands of exposed hosts instantly.
Auto-identify Tech
Matches MMH3 against 113+ known fingerprints — Spring Boot, Jenkins, Grafana, Cobalt Strike, pfSense, and more.