TP: For those who’re ready to verify which the OAuth application with examine scope is delivered from an not known source, and redirects into a suspicious URL, then a true positive is indicated. FP: If you're able to affirm that no abnormal functions ended up done through the application https://francisk900xup7.wikilima.com/user