Find sites by favicon
Find sites by favicon compares icons from observed hosts. Start with a domain or a supported MMH3/MD5 icon hash. For a domain, choose an observed icon from the picker before running similarity search.
A link can prefill your input, but it does not start a paid lookup. Check the input and your account or selected organization client, then choose Find icons. Returning after sign-in or reloading the page also requires this explicit action.
If the page says “This action has changed. Reload the page before trying again.” (HTTP 405), reload it, review the prefilled input and choose Find icons only when you want to try again. The failed request is not retried automatically.
Exact copies and similar icons
The result separates exact visual copies from lower-similarity matches. A percentage describes image similarity, not confidence that two sites have the same owner. A default application icon can appear on unrelated infrastructure.
The search sidebar can show a small free preview of lookalikes. Opening the full results is an explicit action with a displayed price. The base similarity search is normally 3 credits; optional deeper reveals have their own price where enabled.
Authorized results may include a sample observed hostname and a host count. The sample is not the full host inventory. Open the associated host search to inspect records; that search follows its own access and credit rules. The inspector and copy-hash controls let you compare evidence without treating a similarity score as a verdict.
For exact hash matching in Hosts, use favicon_hash:2087839499 or the appropriate hash field. This is a normal host query, distinct from visual similarity search. See Search syntax.
Account and organization access
Anonymous and free previews hide restricted rows. Signup preserves the search, but paid detail remains subject to entitlement. In organization context, start from the selected client space so its budget and permissions apply.