Internet Explorer v11 Tracking Protection List file

application/octet-stream

Safe

Magic Bytes

Offset: 0
00 3B 05 00 01 00 00 00

The Internet Explorer Tracking Protection List (TPL) is a proprietary configuration file format developed by Microsoft for the Internet Explorer 11 browser. These files function as filtering databases that allow the browser to block content from specific domains known for tracking user activity across the web. While now a legacy format, TPL files are considered safe to handle as they contain static filtering instructions rather than executable logic or scripts.

Extension

.tpl

MIME Type

application/octet-stream

Byte Offset

0

Risk Level

Safe

Validation Code

How to validate .tpl files in Python

Python
def is_tpl(file_path: str) -> bool:
    """Check if file is a valid TPL by magic bytes."""
    signature = bytes([0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00])
    with open(file_path, "rb") as f:
        return f.read(8) == signature

How to validate .tpl files in Node.js

Node.js
function isTPL(buffer: Buffer): boolean {
  const signature = Buffer.from([0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00]);
  return buffer.subarray(0, 8).equals(signature);
}
Go
func IsTPL(data []byte) bool {
    signature := []byte{0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00}
    if len(data) < 8 {
        return false
    }
    return bytes.Equal(data[:8], signature)
}

API Endpoint

GET /api/v1/tpl
curl https://filesignature.org/api/v1/tpl

Related Formats