[vladvasiliu]

It could be argued that the website was an integral part of the operation, presumably for getting clients, or advertising the services. Even if the website itself or Cloudflare don't do the DDoS themselves, it's still something that's presumably important.

This kind of pedantic reasoning could be applied to any forum: the forum software doesn't do any active harm to anyone. It "only" serves to coordinate the bad actors.

Just like the DDoS site does. So, how is it different?