Flexlab spam.

What happened

These are AI and automation pitches signed "Flexlab" or "FL." Some came from flexlab.solutions, and some from personal Gmail addresses with Flexlab named in the message.

Between 2025-11-26 and 2026-09-16 I got 5 of them. I've never done business with them, never signed up for anything, and never asked to hear from them.

How it gets sent

5 went out through Salesforce, using 2 Salesforce customer accounts.

Each of them had at least some kind of opt-out line. I still never asked for any of them.

I reported the Salesforce ones to Salesforce as they came in, and Salesforce sent case numbers. Here's how that's gone, and what Amazon's part is.

What I found out about them

Flexlab is Flexlab Technologies Inc., an AI automation agency. Its main website is flexlab.io.

The company

• Their listed address, 1225 Kennedy Rd Suite 2000 in Scarborough, Ontario, is a virtual office.
• Clutch lists their headquarters in Sialkot, Pakistan, with 16 to 20 staff, and their job posts are for Pakistan.
• I found no United States company.
• Flexlab's own public GitHub repository describes building an Amazon SES sending setup for flexlabconnect.com, which their site calls its official domain.

How it's set up

• Throwaway flexlab domains sit on one shared server, several set up to send through Salesforce.
• Later mail came from personal Gmail addresses pushed through a second Salesforce account. The emails still said Flexlab.

Related domains

Domains tied to the same outfit by registration, hosting or mail setup. Not all of them have sent me anything yet.

• flexlab.dev Same server and Salesforce setup, added the same day as flexlab.solutions.
• flexlab.services Same server and Salesforce setup, added a minute before flexlab.solutions.
• flexlabconnect.com Flexlab's own sending domain, per their public code repository.

Plus about 15 more flexlab domains on the same server that I can't tie down as firmly.

Addresses they sent from

If one of these is in your inbox, it's the same outfit.

• alison@flexlab.solutions

Not shown: 2 personal Gmail or Outlook addresses sent through a bulk mailer that doesn't check the From line. Those could belong to someone who had nothing to do with this.

Every Flexlab email I got

Date received, sending address, how it was delivered, and the subject line.

• 2025-12-04 alison@flexlab.solutions via Salesforce “[me], Brief Meeting?”
• 2025-12-01 alison@flexlab.solutions via Salesforce “[me], Extend your dev team at $20/hr”
• 2025-11-26 alison@flexlab.solutions via Salesforce “[me], Extend your dev team at $20/hr”

Signed Flexlab, different address

This one didn't use the Flexlab name in the address, but the message itself names Flexlab.

• 2026-09-16 an unverified Gmail address via Salesforce “[me], should I send it over?”

Same Salesforce account, different name

This one came from an address without the Flexlab name, but through the same Salesforce account as the Flexlab emails above.

• 2026-01-21 an unverified Gmail address via Salesforce “[me], zoom meeting this week?”