What this endpoint does

Performs a HEAD request on the hash risk list to retrieve metadata (ETag, headers) without downloading the full file. Use this in polling workflows to check if the list has changed since your last download before fetching it with Hash: Download Risk List. Pass the same list and format parameters you would use for the GET — each combination generates a distinct ETag.

Response data

Returns HTTP headers only — no body. The ETag header is an MD5 hash for standard Recorded Future lists, or SHA-256 for user-uploaded custom lists. Compare the ETag against a stored value to detect changes and trigger fresh downloads.