OMICall

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-05-31. The review verdict is likely false positive with 80% confidence.

Recommended action: suppress false positive. Evidence context: threat category none; evidence quality moderate.

The OMICall extension has a large number of IoC findings, with 390 medium-severity IoC detections. However, upon closer inspection, these findings appear to be driven by the XIOC extractor, which is known to produce false positives. The detected domains, such as n.top-m.top, a.va, and r.iidxes.url.host, do not seem to be suspicious or malicious. Additionally, there are only two network findings, one of which is a fetch call to a Hubspot JavaScript file. There are no malware signatures or obfuscation findings that would indicate malicious intent. The extension's description and functionality suggest that it is a legitimate VoIP call feature extension. A potential counterargument could be that the large number of IoC findings indicates a potential threat, but given the nature of the findings and the lack of other suspicious indicators, it is likely that these findings are false positives. Therefore, the extension is likely a false positive.

Key Reasons

• Large number of IoC findings driven by XIOC extractor
• No malware signatures or obfuscation findings
• Legitimate extension functionality and description

False Positive Considerations

• IoC extractor garbage