The confirmed addresses
According to CasinoGuard’s record of 5 November 2026, the casino’s main domain is lolajack.com, and three numbered mirrors are confirmed:
- lj53--lolajack.com
- lj98--lolajack.com
- ll92--lolajack.com
Mirrors are standard practice for offshore casinos; they keep the same site reachable when one address is blocked or filtered. The double hyphen and the number belong to the real address. Anything that looks close but differs — another number, a single hyphen, an extra word, a different ending — should be treated as a possible fake until support confirms it in writing.
Why the address bar matters more than anything
Phishing copies of casino sites usually look exactly like the real one. The address bar is the one thing they can’t fake. Before you enter a password:
- Read the whole domain, not just the first few characters.
- Check the padlock is showing and the connection is secure.
- Make sure you got there by typing the address or using your own bookmark.
If an email promising a bonus sent you to the page, close it and come in through your bookmark instead. Real offers will show up in your account.
Redirects you might run into
CasinoGuard’s access checks found the site behaving differently by location. From Canada and Finland the desktop site opened directly. From Italy, desktop visitors were redirected to the ll92 mirror, and from Poland to the lj98 mirror. On mobile, from the global, UK and Netherlands vantage points, visitors got an HTTP 307 redirect to a numbered mirror. There was no separate check from Australia. Landing on one of the three confirmed mirrors is expected; landing anywhere else is not.
Seeing a 403 page or an ACMA block
From the global rest-of-world, UK and Netherlands vantage points, the desktop site answered 403 “geo-blocked” on the day of the check — the casino turning away visitors from that location. In Australia you may also find a domain simply won’t load, or shows a block notice, because ACMA directs internet providers to block offshore casino sites under the Interactive Gambling Act 2001. Neither is a fault to work around.
We don’t recommend a VPN or proxy to get past a block. It can breach the casino’s terms, get the account closed and put winnings at risk, and it leaves you without any of the protections that apply where you live. If the site is blocked where you are, the honest reading is that it isn’t meant for players there. Our troubleshooting page goes into more detail.
Forgotten password or locked account
Use the password reset option on the login form and follow the link sent to your registered email. Reset links should come from the casino’s own domain; ignore any that don’t. If too many failed attempts lock the account, or the reset email never turns up, contact support through Live Chat or by writing to the casino’s support email from the email on the account. Never give your password to anyone, even someone claiming to be support.
Keeping your account secure
- Use a unique password you don’t use anywhere else.
- Bookmark the confirmed addresses on every device you use.
- Log out on shared or public computers.
- Look over your transaction history after each session.
- Lock down your email account, since it controls password resets.
Signing in on your phone
On a phone you might never see the main domain at all. CasinoGuard found that mobile visitors from several regions were sent via an HTTP 307 redirect to a numbered mirror. That’s fine as long as the mirror is one of the three confirmed addresses. Once you’ve arrived safely, add the page to your home screen or bookmarks so you come back the same way, rather than searching for the casino and tapping whatever result comes up first. Search ads and look-alike results are a common route to phishing pages.
If the mobile site loads but won’t accept your details, clear the browser cache, try a different browser and check your phone’s date and time are right. Then try a password reset before contacting support.
If something seems wrong
Stop, and don’t enter your password, if the address is unfamiliar, the page asks for card details before you’ve logged in, or a pop-up demands an urgent payment to “unlock” your account. Close the tab, go back in via a bookmark, and report the address to support so they can confirm whether it’s genuine.
Before you play
Logging in is the easy bit. Before you deposit, read the clauses most likely to affect you: 20x wagering on deposit plus bonus inside 10 days, a A$150 maximum bet while a bonus is active, and the exclusion of Skrill and Neteller deposits from the welcome offers. Keep in mind too that online casinos aren’t permitted to serve Australians under the IGA. Our bonus terms page spells the rules out, and the promotions page lists every offer. If you still want to go ahead, head to the casino. You must be 18 or over, and setting a deposit limit on day one is worth it.
