This URL is part of Microsoft's Power Platform infrastructure — specifically a tenant-specific API route. The domain powerplatform.com is owned by Microsoft, a company with a long track record of reliable cloud services. The subdomain itself returns a 404 error because the API route doesn't exist, but that's not a sign of anything malicious. It's just a broken link on a legitimate backend. If you're asking whether this is a scam, the answer is no. The security setup is solid: valid SSL, enforced HTTPS, and clean blacklist status. For an API endpoint, the lack of a privacy policy or contact page is completely normal. There's no user-facing content here, so there's nothing to be deceived by. In short, you can treat this URL as you would any other Microsoft-owned subdomain — it's safe to visit, even if it doesn't lead anywhere useful.
Yes — f1289cc584564f288eab700d1300fc.5d.tenant.api.powerplatform.com looks safe
In plain English
This is a Microsoft Power Platform API endpoint, not a consumer website. It's hosted on Microsoft's infrastructure with strong security and no red flags. There's nothing to worry about — it's a legitimate subdomain returning a 404 for a broken API route.
Where the score comes from
Strong security setup: a valid Microsoft-issued certificate, modern TLS, and enforced HTTPS. This is exactly what you'd expect from a legitimate Microsoft-hosted endpoint.
This is a subdomain of powerplatform.com, which is owned by Microsoft — a well-known, trusted company. The lack of a WHOIS record for the subdomain is completely normal and not a concern.
No blacklists, no Google Web Risk flags, and the hosting is on Microsoft's own network. The absence of a Wayback snapshot is fine for a newly created subdomain that isn't meant to be a public website.
This is an API endpoint, not a consumer-facing site, so missing an about page, contact info, or social media links is expected. No transparency concerns here.
Privacy policies and terms of service are not relevant for an API endpoint that doesn't collect user data. The site is not a commercial business, so no compliance gap exists.
The subdomain resolves to Microsoft IPs, has a fast load time, and uses standard infrastructure. The lack of email servers or a sitemap is normal for an API route.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →