Finding out what the hostname is for a website using Cloudflare is pretty easily actually. You'll need root access to a linux server with curl that is resolving to the Internet correctly. From there you simple run the command:
curl -v -H "Host: domain name"
It will simply post the domain's hostname.