When a website hides who runs it, that's always a reason to pause. api.anywheredolphin.com does exactly that. The domain itself has no public WHOIS record, and the site returns only a 403 error page with no branding, no about section, and no way to reach anyone. For an API endpoint that might be part of a larger service, that's a troubling sign.
Most legitimate SaaS providers at least put their company name and a contact method somewhere — even if the API itself is locked down. Here, there's nothing. The SSL certificate is valid and the connection is secure, but security alone isn't enough when you can't verify who you're dealing with.
There are also no reviews, no archive history, and no social media presence. That could simply mean the site is very new, but it also means you have no safety net of third-party experiences to draw on. If you're considering using this API, push for documentation or a main website with real information. Until then, the safest move is to treat this as a red flag and look for a more transparent alternative.