[deanhills]

Thing is, all my domains are behind CloudFlare, till date there was only a flood attack on one of my domains, and CF's anti-DDoS feature served quite well to mitigate the attack in hours. I think you should consider this rather than sticking to ".com", well they are company domains afterall, even though they've become general purpose nowadays.

I wouldn't recommend CloudFlare as a choice over .com. Any reputable company when dealing with traffic would rather be more suspicious of someone who is "hiding" behind CloudFlare and not clearly identifiable, than being out in the open with a reputable .com domain.

Only time when I do have respect for use of CloudFlare services, is when big companies like hostus.us or linkedin use the services to filter out bots. But if I can't recognize the identity of the Website when CloudFlare is used, I start to doubt the credibility of the Website.