Even though it's not apparent from this demo website, the underlying code performs a preimage attack (it doesn't actually use a target image, just a target hash), so it's even stronger than a second preimage attack.