[liuliu]

That's appalling to say at least. But Snapchat implemented certificate-pinning since 2015. Does that mean either the analytics endpoint was not covered or somehow the certificate-pinning is circumvented in this case?

[KomoD]

> analytics endpoint was not covered

This sounds most likely