Vivaenergy.com.au presents itself as an energy retailer, but our analysis raises questions about how transparent it really is. Legitimate utility companies typically have a visible About page, clear contact details, and a published privacy policy — especially when they handle billing and personal information. This site, however, is locked behind Cloudflare's bot protection, so we couldn't verify any of that. The domain is registered to a real Australian company, which is a positive, but the SSL certificate is about to expire, and the domain has a renewal restriction that's unusual for an active business. If you're considering signing up with vivaenergy.com.au, be cautious. Look for alternate contact methods, try to find independent reviews, and make sure you understand the terms before providing any personal data. Until the site makes its operations more visible, it's smart to treat it as a 'use caution' situation.
In plain English
We have concerns about vivaenergy.com.au. The site blocks automated checks, and we couldn't find an About page or contact information. While the domain is registered to a legitimate Australian company, the lack of transparency is worrying for a business that likely handles customer data. Approach with caution.
Where the score comes from
The SSL certificate is valid but expires in just over a week, which is a red flag for any site handling customer accounts. The site uses modern TLS and has clickjacking protection, but it's missing several security headers that would help protect against common attacks.
The domain is registered to a real Australian company, GEM ENERGY HOLDING PTY LTD, with a valid ACN. The WHOIS contact details are visible, which is a good sign. However, the domain has a 'serverRenewProhibited' status that suggests a renewal issue, which is odd for an active business.
The domain is not on any blacklists and has a low but present web ranking. There's no Trustpilot profile, and we couldn't check the Wayback Machine history. Overall, no major red flags, but also no strong positive signals.
The site is blocked by Cloudflare's bot protection, so we couldn't see the actual homepage. But automated checks found no About page, no favicon, and no contact info. For an energy retailer that likely collects personal data, this lack of transparency is a significant concern.
We were unable to check for legal pages like privacy policy or terms of service because the site blocks automated access. Given that this is a commercial utility company, those pages are expected. The absence of evidence is not evidence of absence, but it's still a gap.
The site is hosted on Cloudflare with fast load times, strong email authentication, and modern TLS. DNSSEC is not enabled, which is a minor miss. Overall, the technical setup is solid and what you'd expect from a legitimate business.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →