There are about 4 or 5 services facing a ddos attack the last few days. It means ~30% of the websites. And in the others 70%, a lot of them are using CF, if they didn't, the 30% would be higher.
There is definitely a tendancy recently to attack the bitcoin mixers, and more than usual
When the service has been launched recently, it rather comes from the crooks who try to extort money by asking BTC as ransom, threatening to DDOS them if they don't accept. And if the admin showed a sign here that he has a big reserve, be sure he will be hit hard more than others.
But this theory is not valid today if I check my sheet.
When the service is old or a serious contender in the niche, it's another story, but the mixers currently targeted don't belong into the "old" group
Considering the very large number of sites, they often start from the beginning, I'm really curious, about how they promote the sites.
blackhat SEO, SMM, and hijacking methods, that's what I've always found