---
title: "Stat a hash risk list"
method: HEAD
path: "/hash/risklist"
tags: ["Hash"]
---

# Stat a hash risk list

`HEAD /hash/risklist`

Check hash risk list for changes via ETag headers without downloading the full file.

## Query parameters

- `format` 'csv/splunk' | 'xml/stix/1.1.1' | 'xml/stix/1.2' | 'application/stix+json;version=2.1'
- `gzip` boolean
- `list` 'analystNote' | 'default' | 'dhsAis' | 'historicalThreatListMembership' | 'large' | 'linkedToCyberAttack' | 'linkedToMalware' | 'linkedToVector' | 'linkedToVuln' | 'malwareSsl' | 'malwareTestingDetonation' | 'noKnownRisk' | 'observedMalwareTesting' | 'observedTelemetry' | 'positiveMalwareVerdict' | 'recentActiveMalware' | 'relatedNote' | 'rfTrending' | 'suspiciousBehaviorDetected' | 'threatResearcher'

## Response `200`

Result of operation

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)