News

ENDE.APP now runs behind Cloudflare: Here's what changes for you

November 6, 2026

On 3 November, ENDE.APP was attacked and was unreachable at times. That's why the site has been running behind Cloudflare since late in the evening of 4 November. While I was at it, I also changed a few things about downloads and registration. Here's what that means for you.

I explain how the attack came about in my article about the fake law firm with the fake Kerk Behrens.

Why Cloudflare

Cloudflare now sits between you and my server. Every request to ENDE.APP goes through the Cloudflare network first. Attacks are filtered out there before they reach my server. So a flood like the one on 3 November now ends up at Cloudflare instead of with me.

My server itself only accepts requests that come through Cloudflare. It can no longer be reached directly from the outside.

What you'll notice

Normally nothing. ENDE.APP looks the same as always, and the music stays free under CC BY 4.0.

Some visitors briefly see a Cloudflare check page first. Usually one click is enough, and then everything carries on as normal.

Cloudflare processes your requests on my behalf. You can read exactly what happens in the privacy policy under point 8e.

Shorter pauses between downloads

The pauses between two downloads are now much shorter. Your first five downloads each day have no pause at all. After that you wait 10 seconds, from the 11th download 30 seconds, and from the 16th two minutes. Until now, there was a pause even after the first download, and from the 11th download it was five minutes.

The pauses are there so that programs can't grab music in bulk. As before, the download window shows you the time remaining. The daily limit of 20 downloads stays the same.

No more throwaway addresses

To register, you need an email address that keeps working. ENDE.APP no longer accepts addresses from throwaway services whose inbox disappears after a few minutes. This also applies when you change your address in the settings.

The reason is simple: with an address like that, you'll never get back into your account if you forget your password. And throwaway addresses are the tool some people use to get around the daily limit with lots of accounts.

If you signed up with an address like that, enter a permanent one in the settings. Otherwise I may delete accounts with a throwaway address. This is also in the privacy policy under point 3a.

← Back to News