Spirit Airlines' Abandoned Azure Booking APIs and Exposed Phishing Domains

BTheEPIC 12 points 6 comments May 02, 2026
braydenbte.substack.com · View on Hacker News

Discussion Highlights (3 comments)

BTheEPIC

When I heard about Spirit's liquidation today, I dug into their web infrastructure. After discovering that their entire booking flow and Azure API was left exactly as it was before their announcement, I grabbed 3 obvious phishing domains for $11.48 each to block malicious actors.

AmazingEveryDay

It's like they didn't even consult an LLM on how to perform an orderly shutdown! Thanks for the interesting read, I'd be a bit paranoid registering those domains though you seem to have benign intentions.

dlcarrier

Excluding Linux clients, as they are likely crawling bots… Is this why so many web servers assume I'm a bot? They often don't even give me a captcha, they just straight up deny entry. Should I put Windows or OS X in my user agent?

Semantic search powered by Rivestack pgvector
8,303 stories · 78,303 chunks indexed