What this endpoint does

Retrieves raw binary image data embedded in an alert hit — for example, a screenshot of a brand-impersonating website or a fake mobile app listing. Image IDs (in img:<UUID> format) appear inside hit objects returned by Alerts: Get by ID or Alerts: Get Hits. Not all alert types include images — this endpoint is primarily relevant to brand-protection alert categories (logo abuse, domain impersonation, fake apps). Pass the full img:<UUID> string as the id query parameter.

Response data

Returns binary PNG image data — write the response body directly to a file, do not attempt to parse it as JSON. Typical images are around 1600x1200 pixels. If the image ID is invalid or expired, the endpoint returns a JSON error with a 404 status instead of image data.