SupportInvestigation

Screenshot Triage

Extract and scan links from a screenshot a user reported instead of retyping them.

Start with 500 free creditsDocumentation

Malware image scan · 1 credit per lookup · no monthly fee

login-verify.co

How it works

1

Send the image

Upload a screenshot or image. Encrata runs OCR to pull out any text and links embedded inside it.

2

We scan every link

Each URL found in the image is resolved, followed and scored for phishing and malware.

3

Act on the findings

Get a verdict per link plus the indicators of compromise, so nothing hidden in an image slips through. One credit per scan.

One call, structured answer

Screenshot Triage runs on the malware image scan lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • OCR extracts links from screenshots and images automatically
  • Every URL found is scanned, not just the ones a user typed out
  • Indicators of compromise come back ready to block or export as STIX
  • 1 credit per scan, with free cached repeats of the same image
Terminal
curl -X POST "https://developer.encrata.com/api/malware/image/scan" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -F "image=@screenshot.png"
response.json
{
  "kind": "image",
  "verdict": "malicious",
  "score": 88,
  "ocr_urls": ["https://accounts-secure-login.co/verify"],
  "credits": 1
}

More malware image scan use cases

View all
receipt.pngOCR
pay-now.acme-bill.co

Attachment Scanning

OCR image attachments in email and scan any links hidden inside them

CybersecuritySecurity

Brand mention

acme-rewards.link

Link hidden inside an image

Social Monitoring

Scan links embedded in images posted across social channels for brand abuse

MarketingMonitoring
Link blocked

Chat Image Moderation

Check links inside images shared in chat before they reach other users

SocialSafety
Start with 500 free credits
$curl https://developer.encrata.com/api/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'