Hacker News Reader

Not just websites, but anything hosting a favicon. I've used runZero to find vulnerable internal assets that companies swore were no longer an issue.

Yes, Shodan searches for favicon hashes are a great way to find forgotten and vulnerable assests.