lpienia First thing is to disable all websites, what should lead to zero CPU usage.
Then you reenable one by one, and see what happens. With a bit of luck you'll find the culprit with no much work.
Once you find the domain causing overloads, take a look at
/var/log/nginx/domain.com.access.log and try to identify which requests are causing CPU spikes.