TP: If you can verify the OAuth app has encoded the display name with suspicious scopes sent from an unfamiliar resource, then a real good is indicated..Shared redirects to suspicious Reply URL by means of Graph API. This activity tries to indicate that destructive application with significantly less privilege permission (like Read scopes) could be