Lucky Vaults (luckyvaults.vip): what we found
A reseller of credits for "fish game" apps (Orion Stars, Fire Kirin, Juwa, Vblink). Deposits are checked by hand from screenshots and cashouts are paid by hand. A player was told the cashout server was down; our capture from that moment shows the server answering.
Public since 2026-10-31. A record of what we measured, not a verdict. Not yet reported to its host.
Site: luckyvaults.vip (written out, not linked: don't open it with a wallet connected).
Status: Unknown whether it pays out. Not a verdict: these are the facts we measured.
Findings
warning sign
"Server is down" while the server was answering
A player asking for a cashout on 2026-10-25 was told the server was down. A capture from the player's phone at that moment (10:49:50-10:50:10 UTC) shows 2 encrypted connections to luckyvaults.vip that both completed, with data flowing both ways for about 20 seconds, 0 resets and 0 TLS errors. At 11:06 UTC the cashout address /lv/api/cashout answered at once.
The capture can't show what the server said (it's encrypted), so it doesn't prove the cashout itself worked, only that it wasn't a network outage. Stalling cashouts ("server down", "system update", "pay a fee to unlock") is the common complaint about fish-game resellers.
luckyvaults.vip (199.188.201.173)/lv/api/cashout
What to do: Keep screenshots of every deposit and cashout request, and never pay a fee to unlock a cashout.
warning sign
Deposits by screenshot, charged under other names
"Send the exact amount and upload the payment screenshot. Coins are loaded after our team checks the payment." Cash App, Apple Pay and Google Pay go to a checkout at novapay.luckyvaults.vip ("CyberNet - Pay"); Chime goes to a personal Chime tag. A $4.99 deposit on 2026-10-24 was charged under a merchant name unrelated to Lucky Vaults, NovaPay or CyberNet, so a bank statement doesn't show where the money went.
the site's built-in settings (window.LV)novapay.luckyvaults.vip
warning sign
No terms, no company, one payout shown
/terms is a 404; there is no company name, address or email anywhere, and privacy questions go to the chat. The site's own "recently paid" list shows one payout ($20 on 2026-10-24) and no total.
luckyvaults.vip/termsthe site's built-in settings (window.LV)
info
The same operator runs a second storefront
playdesk.luckyvaults.vip ("PlayDesk") is a second fish-games storefront that uses the same Google sign-in app as Lucky Vaults (client 648503318097-ckids6o4…), so one operator runs both.
playdesk.luckyvaults.vip
What we measured
| What | Result | How | Checked |
|---|---|---|---|
| luckyvaults.vip registered | 2026-05-07 at Namecheap; shared hosting | RDAP (rdap.org) | Oct 25, 2026 |
| Cashout rules | $20 to $500, one request at a time, "Paid within 1-2 hours" claimed | luckyvaults.vip/how-to/cash-out | Oct 25, 2026 |
| Certificates | First issued 2026-05-19 for luckyvaults.vip, novapay., play. and playdesk. | crt.sh | Oct 25, 2026 |
| Public reviews or complaints | None found | Web search; urlscan.io | Oct 25, 2026 |
Tools run on this project
Check it yourself
Every Pulse tool, live on mainnet, starting with whats_this. Paste a Solana address a casino or game asks you to pay, before you pay it.
Toolbox
Pick any tool, change any input, run it on mainnet, and reopen any call to change it and run it again.
Ctrl ↵ runs the tool
Run when unsure what an address is, before sending to it or passing it on. SOL sent to a token or program address can be lost for good. Read the docs
Response
Run the request to see the live response. The inputs are real mainnet data, so it works as it is.
Your calls 0
Calls you run appear here and stay in this browser. Open one to change its inputs and run it again.