---
title: "Stat a hash risk list"
method: HEAD
path: "/hash/risklist"
tags: ["Hash"]
---

# Stat a hash risk list

`HEAD /hash/risklist`

## Request

- Base URL: `https://api.recordedfuture.com/v2`
- URL: `https://api.recordedfuture.com/v2/hash/risklist`
- Auth: API key in header `X-RFToken`

Check hash risk list for changes via ETag headers without downloading the full file.

## Query parameters

- `format` 'csv/splunk' | 'xml/stix/1.1.1' | 'xml/stix/1.2' | 'application/stix+json;version=2.1'
- `gzip` boolean
- `list` 'analystNote' | 'default' | 'dhsAis' | 'historicalThreatListMembership' | 'large' | 'linkedToCyberAttack' | 'linkedToMalware' | 'linkedToVector' | 'linkedToVuln' | 'malwareSsl' | 'malwareTestingDetonation' | 'noKnownRisk' | 'observedMalwareTesting' | 'observedTelemetry' | 'positiveMalwareVerdict' | 'recentActiveMalware' | 'relatedNote' | 'rfTrending' | 'suspiciousBehaviorDetected' | 'threatResearcher'

## Response `200`

Result of operation

---

[API](https://skmtc.dev/recordedfuture/apis/connect-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/connect-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/connect-api/revisions/ca0276d265f0?raw)