TP: If you're able to confirm which the OAuth application is sent from an unfamiliar supply, and redirects to your suspicious URL, then a true optimistic is indicated.FP: If soon after investigation, it is possible to validate which the app features a respectable business use within the Corporation.Advised action: Assessment the Reply URL, domains