TP: If you're able to validate the OAuth application is delivered from an unknown resource, and redirects to some suspicious URL, then a true constructive is indicated. Encouraged Motion: Classify the alert being a Bogus constructive and think about sharing feedback according to your