Is nightbazaar.fun safe? TrustSniffer's low-trust assessment: 31/100

Overview

Night Bazaar is a newly launched, pre-release Web3 browser game branded around a forthcoming "$HAGGLE" token. The homepage presents a grid of twenty numbered market stalls that visitors rent with ETH. Visitors can also buy randomized "mystery bags" whose contents pay out from a shared prize pot. The apparent business model is a pay-to-play game of chance, with fees funding stall keepers, a prize pool, and a promised future token buy-and-burn.

Scam/Impersonation Risk

No contradictory signals were observed. There are no confirmed threat-listing hits, no phishing or brand-impersonation indicators, and no conflicting legal identities. One reputation source returned a single unconfirmed "suspicious" flag with no malicious detections, which is a soft signal only. The risk here comes from the mechanics of the offer, not from any impersonation. The homepage has visitors pay 0.0005 ETH to rent a stall for three days, or 0.0001–0.01 ETH per bag. Each bag sends 20% to the stall keeper and 80% to the pot, with the stated 20% buy-and-burn share dedicated to a token that has not launched. Advertised prizes are a "Jade idol" at 1-in-100 odds worth 12% of the pot, a "Silver" tier at 5-in-100 worth 2%, and a "Bronze" tier at 14-in-100 worth 0.5%. Everything else is an unvalued "Trinket". A "festival night" on day three triples the idol, and "holders" get two daily rolls and keep the better one. On day fourteen the top-earning stall becomes "Market Master" and takes the entire remaining pot. This is a winner-take-all structure whose payouts depend on later deposits, and the page offers no way to confirm that the pot, odds, or payout logic work as described. The page also advertises a "burn" tied to a token that does not yet exist, so a core value claim cannot be checked today. The site sits at launch state, with an empty pot and no sales, so the track record is empty. Nothing observed amounts to a confirmed scam, but the economics are opaque and high-stakes.

Regulatory Verification Notes

The site claims no license or registration and publishes no legal entity, named team, terms, refund policy, or risk disclosure. The homepage gives no audit report and no contract-verification evidence for the deposits it invites. Because the mechanics resemble a game of chance with randomized, pot-funded prizes, the absence of any stated gaming authorization or jurisdictional restriction is a material disclosure gap. This is a transparency shortfall, not proof of wrongdoing. Ownership and governance are opaque, and that is a separate matter from any identity contradiction, since only one site identity is presented. No third-party broker or regulator listing was matched, so no external reputational context exists in either direction. Registration through a mainstream registrar and a valid certificate show only basic hygiene, not operator identity.

What to Verify Next

Verification should start with the on-chain facts the page invites users to rely on. The "Game contract" and "Token" links should be checked on a public block explorer for verified source code, owner or admin privileges, and whether funds can be withdrawn outside the described payout rules. An independent smart-contract audit should be located, and its scope and the audited contract address should be matched to the one the site uses. The legality of paid, randomized-prize games should be confirmed for the participant's own jurisdiction, along with any gaming authorization the operators hold. The project's identity should be corroborated through its linked social account and other independent channels over a route not supplied by the site itself, including who is behind the stalls, the token, and any support channel. The token contract address shown as "CA" should be checked against the one posted by those channels once the token launches.

Summary Verdict

Available evidence places this site in a low-trust, cautionary category, driven mainly by what it is rather than by any detected attack. It is a very new, unproven pay-to-play game whose value flows cannot be independently verified and whose operators are unidentified. No hostile or impersonating activity was found, so the assessment is one of unestablished credibility and high financial exposure, not confirmed malice.

Infrastructure Integrity

The site resolves to a single address on a shared edge network operated by Vercel on Amazon-hosted infrastructure. Only edge servers were visible, so the underlying origin could not be independently assessed. A large number of abuse reports exist against that shared address, but they attach to the common provider infrastructure used by many unrelated sites, carry no confidence of abuse, and are discounted accordingly. The reputable hosting is a mitigating factor only and says nothing about the legitimacy of the operator. Content can also be changed quickly behind such a layer, and the young domain's sparse DNS footprint leaves little baseline to measure against.

Closing Assessment

Any interaction should be treated as a speculative, high-stakes purchase. Participation should be limited to amounts that could be lost entirely, and only after the contract and audit checks above are complete and the operators have been identified through independent channels.

Signals weighed against the site

• AbuseIPDB: 131 reports on hosting IP 76.76.21.21 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.