added curl command to scan app