More than 685 million users may have been exposed to XSS attacks due to a flaw in Branch.io service used by Tinder, Shopify, Yelp, and many others. Tinders security team immediately launched an investigation and discovered that the go.tinder.com domain was actually an alias for branch.io-owned custom.bnc.lt.lt. A large number of major firms uses an alias to point the same domain. The experts urge users to change their passwords as a precaution.”]
Source: https://securityaffairs.co/wordpress/77129/hacking/branch-io-xss-flaw.html