"They used to use Cloudflare but stopped."

They are still using Cloudflare. Unlike CF, M5 does not require SNI.

   curl --resolve news.ycombinator.com:443:104.20.43.44 https://news.ycombinator.com