Is HP Featured Offers safe?

Question

Accepted Answer

HP Featured Offers is high risk. Our dynamic analysis captured GET requests from this extension to wild.link/_sales/personalization-url carrying the full URL of every page visited, including search engine queries from Google, Bing, DuckDuckGo, and Yahoo. The content script runs on all http and https pages. Every three seconds it checks the current URL and forwards it — without a prompt — when the site matches a remotely-supplied pattern list downloaded from wildlink.me. We observed three forwarding events during a brief session, including the full URL of an HP featured-offers page with a device ID (45261043) linked to the installed extension. When HP Featured Offers starts, the service worker fetches seven remote JSON feeds from wildlink.me and storage.googleapis.com. Those responses determine which sites receive affiliate-link rewrites, which AI assistant pages are injected, what coupon targets appear, and how search-engine results are modified — with no extension update required. Our dynamic analysis observed all seven feeds fetched within seconds of startup and confirmed that the cached responses are re-applied every 2–4 hours.

Is HP Featured Offers safe?

Findings