They’re using Cloudflare for hosting the site itself? I assumed they were just using them for DDoS protection and caching while they have the site’s db and webserver on a separate host.
It looks like they updated their DNS today, so that’s probably the cause