Overview

Page Paths
—
Asset URLs
—
Security-Relevant
—
Whitelisted
—

Crawl Summary

Crawled — pages from www.napsgear.org using stealth browser (CamoFox) to bypass Cloudflare bot protection. Captured all reachable internal links, images, scripts, stylesheets, and form endpoints. URLs classified into page paths, file paths, URL patterns (with ID placeholders), and security-relevant targets.

PHP Pages
—
URL Patterns
—
External Links
—
CDN Assets
—

Asset Distribution by Directory

DirectoryCountSample URLs

All Page Paths

Filter: All Allowed Blocked Unset
PathStatusCount

Files / Assets

Filter: All Allowed Blocked Unset Type: All CSS JS Images Fonts Video
URLTypeStatus

URL Patterns

Patterns strip numeric IDs (e.g. -p12345 → -p{id}) so you can whitelist slug patterns instead of every product. Use these in your WAF.

PatternMatch CountExamples

PHP Pages (Backend Routes)

These are the server-side script entry points. Common attack targets — login, signup, cart, checkout, search, account history.

PageForms / RefsStatus

Top Categories

Top URL slug prefixes — used to organize products and brands. Useful for whitelisting whole categories.

Slug PrefixPages

🔒 Security-Relevant Paths

Paths matching common attack keywords (login, admin, account, cart, search, password, register, etc.). These are the high-priority paths to whitelist or rate-limit.

PathStatus

External Links & CDN Assets

Off-site resources referenced from the main domain. Allow these to prevent load failures, but never expose your auth cookies to them.

External Links (0)
CDN Assets (0)
URL

Whitelist Manager

All your decisions, in one place. Click a row to toggle Allowed / Blocked. Changes are saved to localStorage.

✓ Saved
Status: All Allowed (0) Blocked (0) Unset (0)
Path / URLSourceStatus

Export Rules

Generate firewall rules in your preferred format. Only paths marked as Allowed are included in whitelist rules; Blocked paths are included in deny rules.