Is HP Featured Offers safe?

const logger = new Logger('UrlWatcher');
class UrlWatcher {
  constructor() {
    this.activeDomain = null;
    this.interval = null;
    this.url = null;
    this.patterns = null;
  }

  run() {
    (async () => {
      // Ask the service worker: is this page an active affiliate merchant domain?
      const { payload: activeDomain } = await sendMessage(MessageStatus.GET_ACTIVE_DOMAIN, {
        url: window.location.href
      });
      this.activeDomain = activeDomain;

      // Download the remotely-configured URL pattern list
      const patterns = await sendMessage(MessageStatus.GET_URL_PATTERNS);
      if (patterns) this.patterns = patterns;

      // Poll every 3 seconds
      if (this.interval) clearInterval(this.interval);
      this.interval = setInterval(() => { this.start(); }, 3000);
    })();
  }

  async start() {
    if (this.url === window.location.href) return; // no navigation, skip
    this.url = window.location.href;

    // Case 1: active affiliate merchant page — send the full URL
    if (this.activeDomain) {
      return sendMessage(MessageStatus.LOG_TRACKED_URL, { url: this.url });
    }

    // Case 2: search engine — send the URL if the query matches a remote pattern
    if (this.isOnSearchEngine()) {
      const parsed = new URL(this.url);
      const query = parsed.searchParams.get('q') ?? parsed.searchParams.get('p') ?? '';
      if (!query) return;
      const matchesPattern = this.patterns?.Searches?.find(
        pattern => new RegExp(pattern, 'i').test(query)
      );
      if (!matchesPattern) return;
      return sendMessage(MessageStatus.LOG_TRACKED_URL, { url: this.url });
    }

    // Case 3: remotely-configured domain pattern match
    if (!this.patterns) return;
    const parsed = new URL(this.url);
    const domainRule = this.patterns.Domains?.find(d => parsed.hostname.includes(d.Domain));
    if (domainRule) {
      const pathMatches = domainRule.IncludePaths?.find(p => new RegExp(p).test(parsed.href));
      const excluded   = domainRule.ExcludePaths?.find(p => new RegExp(p).test(parsed.href));
      if (pathMatches && !excluded) {
        sendMessage(MessageStatus.LOG_TRACKED_URL, { url: this.url });
      }
    }
  }

  isOnSearchEngine() {
    return !![
      'google.com/search',
      'bing.com/search',
      'duckduckgo.com/',
      'search.yahoo.com/search'
    ].find(pattern => window.location.href.includes(pattern));
  }
}

async logTrackedUrl(payload, extraParams) {
  try {
    // Base URL: this.getURL('/personalization-url')
    // expands to loggingUrl + '/personalization-url'
    // loggingUrl is hardcoded to 'https://wild.link/_sales' (worker.js:42721)
    const endpoint = new URL(this.getURL('/personalization-url'));

    endpoint.searchParams.append('d',   this._client.getDeviceId().toString()); // installation device ID
    endpoint.searchParams.append('tc',  this.getTrackingCode());                 // affiliate tracking code
    endpoint.searchParams.append('app_version', this._client.wildlinkConfig.packageVersion);
    endpoint.searchParams.append('url', payload.url);                            // full visited URL

    if (extraParams) {
      Object.entries(extraParams).forEach(([k, v]) => endpoint.searchParams.append(k, v));
    }

    fetch(endpoint.toString()); // fire-and-forget
  } catch (err) {
    logger.error(err);
  }
}

// Fetches the list of sites and search phrases the extension monitors.
// Called on startup if cache is expired (2 h TTL).
async fetchPatterns() {
  if (!this._FEED_URL) throw new Error('FEED_URL is not set');
  try {
    const response = await fetch(this._FEED_URL, { method: 'GET' });
    if (!response.ok) throw new Error('Could not fetch url tracking patterns');
    return await response.json();  // { Searches: [...], Domains: [...] }
  } catch (err) {
    return { Searches: [], Domains: [] };  // fail-safe empty
  }
}

// wildlinkConfig object (worker.js:42724)
const wildlinkConfig = {
  // ...
  urlTrackingFeedUrl: 'https://www.wildlink.me/data/429/url-pattern/1',
  affiliateExtensionsFeedUrl: 'https://www.wildlink.me/data/429/affiliate-extension-selector/1',
  aiServicePermissionsUrl: 'https://storage.googleapis.com/ai-injection-control-dvhqwctt/feed/1/429/ai-injection-control',
  remoteVariantConfig: {
    manifestEndpoint: 'https://storage.googleapis.com/wildlink/cloud-db/1/429/application-experience-remote-config-manifest.json',
    flags: { miniEma: true, activationReassurance: true }
  },
  couponUrlBase: 'https://storage.googleapis.com/wildlink/cloud-db/1/coupon-target/',
  remoteSerpConfigUrl: 'https://www.wildlink.me/data/429/serp-config/1',
  genericConquestUrl: 'https://www.wildlink.me/webservice/v1/conquest/campaigns?application_id=429'
};