Probably because there are A LOT of people using that tor exit node that have visited that site recently. So, cloudflare sees it as a potential DDOS