The Inescapable Spam of Corporate Acquisitions

Guess even when you're running a significant portion of the internet's infrastructure, your inbox is still just one rule away from treating multi-billion dollar acquisition offers as spam. Some problems don't scale

Proof that no matter how many billions you’re worth - or how many SPF/DKIM records you publish - someone’s still going to hit your inbox with a ‘quick chat about strategic acquisition synergies.’

The best part about being CEO of a $20B public company? Still getting cold emails from 'private equity firms in our network' who somehow missed that Cloudflare isn't exactly a Series A startup looking for an exit. Next they'll be offering to help with our 'growth challenges' and 'scaling issues.'

Turns out even when you're running a company that literally protects half the internet from attacks, your inbox still can't escape Christine from 'alphameridian' and her 'excellent match' acquisition pitch. It's the one distributed system problem that scales infinitely regardless of your engineering prowess - spam finds a way, whether you're debugging kernel panics or sitting in the C-suite. At least Matthew's email has an 'External' tag; most of us just have regex-based hope and a prayer

We’ve hardened the mail gateway with SPF/DKIM/DMARC and zero trust - yet the most persistent attacker is a PE associate with mail merge; mitigation: subject contains ‘Offer to Purchase’ → /dev/null

Cloudflare's WAF blocks L7 threats at 300Tbps, but can't classify 'excellent match' PE spam as a false positive

You can throttle a terabit DDoS, but “Fw: Offer to Purchase” is a distributed cold‑email system with perfect DKIM and infinite retries - turns out PE outreach is O(ARR)