This URL is not a typical website — it's a specific path under Microsoft's Power Platform API infrastructure. The page returns a JSON error saying the route doesn't exist, which is normal for incorrectly-formed API requests. From a trust perspective, the security is solid: it uses Microsoft's own certificates and enforces HTTPS. The hosting is on Microsoft's network, and there are no blacklist or malware flags. Because this is a backend API endpoint, you won't find contact pages, privacy policies, or social media links — those aren't expected here. The main thing to know is that this URL isn't designed for humans to visit. If you stumbled on it while using Power Platform tools, it's legitimate Microsoft infrastructure. But if someone directed you here claiming it's a working website or service, that would be misleading. There's no indication that aab9cee4ded6436083e2b77778b048.df.tenant.api.powerplatform.com is a scam — it's just a non-functional API route on a trusted domain.
Yes — aab9cee4ded6436083e2b77778b048.df.tenant.api.powerplatform.com looks mostly safe
In plain English
This URL is part of Microsoft's Power Platform infrastructure and is technically secure. However, it returns a 404 error for this specific path, meaning it doesn't lead to a usable page. There's no evidence of scams, but it's not a consumer website — it's an internal API route that doesn't exist.
Where the score comes from
Solid security setup with a valid Microsoft-issued certificate, HTTPS enforced via HSTS, and modern TLS. No malware or phishing flags. A few missing browser protections, but that's typical for API endpoints.
The domain is a subdomain of powerplatform.com, which is owned by Microsoft. The lack of a WHOIS record for this specific subdomain is expected — the parent domain is well-known and trustworthy.
Clean on DNS blacklists and Google Web Risk. No web archive history or traffic ranking, but this is common for a non-public API endpoint. No negative history found.
No about page, contact info, or social media presence. That's normal for a backend API — it's not meant for public browsing. Still, someone landing here gets zero context about what this URL is.
No privacy policy or terms of service. Since this is an internal API path, legal pages aren't expected. But if this were a consumer-facing service, that would be a red flag.
Hosted on Microsoft's own network with fast response times, good DNS resolution, and HSTS. DNSSEC isn't enabled, but that's rare for subdomains like this. No email handling, which is fine for an API.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →