Cloudflare.net is behind Cloudflare, but the actual site is hosted by Q4. They provide hosted investor relations portals for a bunch of publicly traded companies.

Putting it on a non-cloudflare.com domain puts it outside the security context of the main site and they don't have to worry if it gets hacked. Google does something similar by hosting third-party stuff on withgoogle.com and a handful of other domains.