What this endpoint does

Retrieves an image embedded in an alert hit, such as a screenshot of a website impersonating your brand, a detected fake mobile app listing, or other visual evidence captured by alert rules. Image identifiers (in the format img:UUID) are found within alert hit data returned by the Alerts: Get by ID or Alerts: Get Hits endpoints. Not all alert types include images — they are primarily associated with brand protection alerts like logo abuse detection, domain impersonation, and fake app monitoring.

Response data

Returns raw binary image data (typically PNG format) that should be saved to a file rather than parsed as structured data. The Content-Type header indicates the image format. No filename is provided in the response headers, so clients should generate an appropriate filename based on the image ID or context.