This endpoint returns the short-lived signed URL of the PNG screenshot captured during a URL Analysis, wrapped in a JSON response:

{
  "data": "https://vturlscreenshot.commondatastorage.googleapis.com/u-af2c53e..."
}

Use this endpoint if you only need the screenshot link. If you prefer to stream the image bytes directly, use GET /analyses/{id}/screenshot

Note that the signed URL is valid for 5 minutes. If the link expires, you must request the endpoint again to generate a new one. The underlying asset is an image/png file.

Examples

Check if a screenshot is available for Analysis ID "u-109b1fe44b83bfdeaeee0d238e041915b6d71f6ce4b91f8f9ad79eac3ac7d27f-6d2fb381".

import requests

id = "u-109b1fe44b83bfdeaeee0d238e041915b6d71f6ce4b91f8f9ad79eac3ac7d27f-6d2fb381"
url = f"https://www.virustotal.com/api/v3/analyses/{id}/screenshot_url"

headers = {
    "accept": "application/json",
    "x-apikey": <api-key>
}

response = requests.get(url, headers=headers)