Hey you,

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:

Remove Yeabests.top Redirect


Yeabests.top is one of the domains for the browser hijacker Uportal. Copyrighted by ESOffers Network Co., Limited, that is believed to be the company that developed it. The hijacker can redirect you and shows the search results of “Plus! Network” which is another hijacker. Before showing that page, all of your search queries go through the servers of ESOffers. The hijacker redirect will alter the homepage, new tab and search engine of your browsers. To remove the hijacker and its files, you should read the article to the end.

Threat Summary

Name Yeabests.top
Type Browser Hijacker, PUP
Short Description All browsers on your computer can be affected. The hijacker could redirect you and filter your search queries.
Symptoms The browser settings which can be modified are the homepage, search engine, new tab, and browser add-ons. You might see third party content and advertisements.
Distribution Method Freeware Installations, Bundled Packages
Detection Tool See If Your System Has Been Affected by Yeabests.top


Malware Removal Tool

User Experience Join Our Forum to Discuss Yeabests.top.

Yeabests.top – Delivery Ways

Yeabests.top is mainly delivered via third-party installations. Bundled packages and freeware can place the hijacker on your computer device. Freeware install setups like these could have additional components ready to be installed by default. More settings can be changed before you realize that your browsers are affected. Preventing unwanted installations such as that is doable if you find a Custom or an Advanced settings menu in the setup to deselect components.

Yeabests.top could utilize more ways for delivery too. It could push its search engine through advertisement content on various websites by putting banners, pop-ups and more sponsored content. The hijacker might also be delivered using the aid of suspicious websites that host redirect links. All those websites might be in a partnership or business affiliation with Yeabests.top. These are the mostly affected browsers: Google Chrome, Internet Explorer, Safari and Mozilla Firefox.

Yeabests.top – Technical Details

Yeabests.top is one of the domains of the browser hijacker Uportal. The hijacker is very likely developed by the company ESOffers Network Co., Limited. The company’s copyright is provided at the bottom of the main web page. You can see how the website looks from the picture right here:


As you can see above, the Yeabests.top page consists of a search bar, and lots of on-page adverts, that redirect you to websites of unknown origin and related to targeted marketing. That exact page will be put in the place of your browsers’ search engine, new tab setting, and the starting home page too. Refrain from clicking on any of the advertisements as they are links that redirect you.

While you have any Yeabests.top related program inside your computer, you will see your browsers get modified settings. Software that does these changes can install on your computer machine through bundled software. All kinds of extensions and apps can generate advertisements, and show more targeted content and redirect you when you surf the Web. The redirects will probably send you to sites filled with ads. Those pages could be affiliated or even partnered with Yeabests.top.


In the snapshot above, you can see where the searches via Yeabests.top lead to. You are getting redirected to the search results page of Plus Network each time you do a search. It is not excluded for you to get redirected to other search engines. Looking more closely reveals how just before that every search query you make will go through the search.esoffers.com redirect.

Yeabests.top can acquire additional information about you and your browsing activity, when the search queries go through both search.esoffers.com and the Plus Network hijacker servers.

The two search engines are very likely to be partners or affiliates. Every bit of information obtained from your search queries can be disclosed to them. You should be very careful of what information you put inside search bars. Read on and see how much data can be acquired from you and how that happens.

Yeabests.top – Privacy Policy

The Privacy Policy of the Yeabests.top is short and transparent. It is interesting to see that it actually says the name of Greenet.xyz hijacker – it is from the same company and seem to push the same search page interface.

The policy says what kind of information the site collects and what third parties can also acquire information from you via its services. The redirects from the new tab, home page and the searches of Yeabests.top always go through the Plus Network. The website collects personally and non-personally identifying information. Reading the policy will prove to you that all of that collected data, may be shared with third-parties.

You can view the Privacy Policy from here:


Information which is gathered by Yeabests.top is the following:
  • Your name
  • Your E-mail address
  • Your IP address
  • Click-through data
  • Type of browser you are using (e.g., Chrome, Internet Explorer)
  • Type of operating system you are using (e.g., Windows or Mac OS)
  • Domain name of your Internet service provider (e.g., America Online, Earthlink)

As we already mentioned above – all of your searches go through the Plus Network domain, so its Privacy Policy applies here too. Its policy is short and not very detailed, but all personally identifying information will be collected.

An interesting quote from the Yeabests.top policy is:

Some of the web search services provided herein are provided by Trovi Search and powered by Trovi search partners. For information on the web search services data collection, please visit http://info.trovi.com/Privacy, and the search provider’s privacy policy, as applicable.

That means that the services of Trovi Search are involved, and that is not good – head over to the web address given in the above quote if you want to read their policy as well. Surely, all Trovi partners are probably involved, thus a lot of different information can be collected from you. So be very careful about what you search and what data you provide to such services.

By using any services of Yeabests.top or those of its affiliates and partners, including toolbars, extensions, add-ons, or applications tied to them will automatically grant your consent for personal data collection. In the policy, it is written that cookies and other tracking technologies are used in the information obtainment process.

Remove Yeabests.top (uPortal) Fully

To remove Yeabests.top manually from your computer, follow the step-by-step removal instructions provided below. In case the manual removal does not get rid of the hijacker redirect and all of its files completely, you should search for and remove any leftovers with an advanced anti-malware tool. Such software can keep your computer secure in the future.

Manually delete Yeabests.top from Windows and your browser

Note! Substantial notification about the Yeabests.top threat: Manual removal of Yeabests.top requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1. Remove or Uninstall Yeabests.top in Windows
2. Remove Yeabests.top from Your Browser and Your Registry Editor

Automatically remove Yeabests.top by downloading an advanced anti-malware program

1. Remove Yeabests.top with SpyHunter Anti-Malware Tool and back up your data
Optional: Using Alternative Anti-Malware Tools

Berta Bilbao

Berta is the Editor-in-Chief of SensorsTechForum. She is a dedicated malware researcher, dreaming for a more secure cyber space.

More Posts - Website

Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.