TP: For those who’re in a position to substantiate that the OAuth app with study scope is delivered from an unidentified resource, and redirects into a suspicious URL, then a real be