Looking in the Chrome console, I found what's is DDOSing their site: is the ajax request that don't have a timeout control when a request return a error, after a erro the site make immediately another request without timeout control.
So for any server they try to setup the site will overload and consume all resources in minutes.
They need to change the ajax request and make an error control, when returning a code other than 200, impose a timeout on the next ajax request.
For example, hundred of this requests are mede per second when a RESOURCE ERROR are returned:
GET
https://coinsmarkets.com/getbalancebuy.php?coinid=5&name=Bitcoin&pairid=1 net :: ERR_INSUFFICIENT_RESOURCES
If possible, send this information to them: add error control and timeout on ajax function, to delay request on error.And to get thinks worse, because the amount of request made in the loop, cloudflare immediately block the user, that explain why we get a cloudflare error page after few seconds, if they add a timeout on a error returned on ajax, they can stabilize the site.