On a script info page it shows its icon from the script meta block
/^https://(sleazy)fork.org/.*?scripts/.*?/
The icon is shown on the left:
HTTPS icons are shown by direct url. HTTP icons are downloaded and stored in the database if the icon is less than 100kb.