Spirit Airlines' Abandoned Azure Booking APIs and Exposed Phishing Domains