curl http to spy web