Is neosoulai.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

NeoSoul presents itself as a landing page for an "agent economy" platform, using the tagline "From Intelligence to Verifiable Execution". Its main call to action is a live "$NEO claims" banner with a Connect Wallet prompt. It also promotes a consumer product in which visitors create AI trading agents, set capital controls and trade on a perpetual-futures DEX. The apparent business model is a token claim funnel plus an agentic trading product that handles user capital. Fees, token economics and custody arrangements are not described.

Scam/Impersonation Risk

Multiple security engines currently flag the domain as malicious or suspicious, including tier-one vendors, and this has produced a confirmed blacklist listing. That is a hard contradiction and the decisive factor in this assessment. No brand impersonation and no conflicting legal identities were observed. The risk comes from the combination of the listing with the site's interaction design. The homepage stacks a "$NEO CLAIMS ARE LIVE" banner, a wallet selector covering about a dozen wallets (including Trust Wallet, TronLink, WalletConnect, Ledger and OKX), transaction-signing prompts, a network selector and a "Manual Claim" flow. This is the standard pattern of a token-claim funnel, and wallet-approval and transaction-signing flows of this kind are the usual mechanism for asset-draining abuse. The page also asserts "verifiable execution" and "proven performance", and says capital "can follow proven performance". No audit, track record or independent attestation supports these claims. The "Building with Leading Brands" strip is likewise unsupported by any named partner relationship. Sandbox testing showed that a large share of the page's outbound requests, including POST submissions, went to destinations outside the site's own infrastructure. Console errors were frequent, and the page changed heavily after interaction. None of this is proof of wrongdoing on its own, but together with the blacklist it points to an untrusted destination. Evidence:

• Homepage: security engines flag the domain as malicious or suspicious, and the listing is confirmed across independent sources.
• Homepage: the $NEO claim banner, the multi-wallet connection prompts and the transaction-signing and manual-claim flows appear without any accompanying legal, audit or tokenomics documentation.
• Behavioral sandbox: roughly half of observed traffic went to external destinations, including 9 non-whitelisted POST requests and 9 console errors across 3 runs.
• Domain provenance: registered 2026-09-27, about 22 days old (~0.06 years), with registration continuing to 2027-09-27 through NICENIC International Group Co., Limited.

Regulatory Verification Notes

The homepage shows no legal entity, named team, regulatory status, licence or registration number, or contact address. This is a significant content gap for a site that solicits wallet connections and offers leveraged-style trading with user capital. A missing licence is a verification gap and not evidence of fraud on its own. Here it adds to a pattern in which the stated claims of verifiable, proven performance cannot be tied to any accountable party. No third-party broker or regulator profile matched this site, so no regulatory standing can be inferred. The navigation menu links to documentation, a whitepaper and an events area, but none of that material was available on the page to support the claims. The site's archive footprint is also very young, and its short history provides no continuity from which trust could be built. Evidence:

• Homepage: no operator, jurisdiction, licence or contact details are shown, and no audit or token documentation is visible.
• Web archive: only 3 snapshots, spanning 2026-09-27 to 2026-10-09 (about 1 year tracked), all within the domain's first weeks of life.
• Transport security: a DV TLS certificate issued by YE2 and valid to 2026-12-26, served from AS13335 (Cloudflare). This shows only that the connection is encrypted and says nothing about the operator.
• No regulator or broker-database match was found for the site.

What to Verify Next

No wallet should be connected and no transaction signed until the operator is independently identified. Any operator named in the project's documentation or whitepaper should be checked against the relevant financial-regulator registry. Any claim about audits, partner brands or custody should be confirmed directly with the named third parties through channels the site does not control. The $NEO token should be checked against official project announcements from a source established independently of this domain. The official support and contact channels should also be confirmed through an independent route. Evidence:

• Homepage: the "Building with Leading Brands" strip names no partners that could be confirmed.
• Homepage: the "verifiable execution" and "proven performance" claims cite no verifiable record.
• Business model: custody, fee and token-economics terms for the trading product are not disclosed anywhere on the page.

Summary Verdict

The site is assessed at critical risk and rated untrusted. It combines confirmed adverse reputation from independent security sources with a high-stakes financial interaction design and no accountable, identifiable operator. The operator's real-world identity remains unverified. Its newness and its unsupported claims reinforce this posture rather than mitigate it.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and every observed address is a CDN edge address. The origin server is not visible, so hosting cannot be independently verified and content could be swapped rapidly behind the edge. The shared network is clean and carries no abuse reports. This is a mitigating factor only. It does not offset the external threat detections, and it says nothing about the legitimacy of the operator.

Closing Assessment

The site should be treated as untrusted. Read-only viewing is the most that is appropriate. Visitors should not connect a wallet, approve or sign any transaction, use the claim flow, fund an agent or enter credentials until reputable independent sources confirm the project and its operator.