Generate Website Favicon Hashes
Psst: 🔍 Get Favicon Drag this bookmarklet to automatically get the favicon of the active webpage
About Our Favicon Hash Generator for OSINT Research
This free online OSINT tool helps security researchers and threat intelligence analysts generate favicon hashes instantly. Simply enter a website URL to get multiple hash formats and direct search links to popular cyber intelligence platforms.
Key Features
- Instant hash generation (MMH3, MD5, SHA256)
- Direct search links to security platforms
- Visual favicon preview with size analysis
- Support for all major web protocols
- 100% free and browser-based
What is a Favicon Hash?
A favicon hash is a unique identifier generated from a website's favicon (the small icon shown in browser tabs). This hash can be used for various OSINT (Open Source Intelligence) purposes, including:
- Identifying related websites using the same favicon
- Finding subdomains of an organization
- Tracking website changes over time
- Discovering hidden or related web assets
Supported Search Engines
This tool generates hashes compatible with multiple search engines and security platforms:
- Shodan: Uses MMH3 hash for favicon searching
- VirusTotal: Uses MD5 hash for favicon searching
- Censys: Uses MD5 hash for favicon searching
- ZoomEye: Uses MD5 hash for favicon searching
- FOFA: Uses MMH3 hash for favicon searching
Practical OSINT Workflows
Pair the hashes with other tools on the site for deeper pivots. After identifying a cluster of related hosts, use the Domain Recon page to pull DNS and WHOIS details, or feed the results into the Search Dorks generator.
Frequently Asked Questions
- Does the tool support ICO, PNG, and SVG?
- Yes. SVG favicons are converted before hashing so the MMH3 value matches what Shodan and ZoomEye expect. We also expose MD5 and SHA256 for platforms like VirusTotal that rely on those fingerprints.
- Why do some sites return a different hash than expected?
- Many frameworks serve multiple favicon sizes. We resolve the icon using the HTML manifest and
then follow redirects, which keeps the output consistent. If you need to double-check, download
the file and hash it locally with
mmh3—the value should match. - Can I run this in bulk?
- The UI targets quick lookups, but the fetch endpoint can be automated, although I'd rather you did not ;).