Speak to end users and admins who may have granted consent to this app to confirm this was intentional as well as the excessive privileges are normal. .Shared redirects to suspicious Reply URL as a result of Graph API. This activity makes an attempt to point that destructive app with a lot less privilege authorization (including Read scopes)