Dayton247Now North Carolina Man Arrested for Dark Web Drug Sales Linked to Overdose Deaths
Article Content
- •Alexander Green was arrested for selling drugs on the dark web, linked to two overdose deaths.
- •He operated under the name Starlabs and sold various drugs, including fentanyl-laced heroin.
- •Investigators traced drug shipments back to Green using USPS labels from Orange Mailer.
Alexander Green, a North Carolina man, has been arrested for allegedly selling drugs on the dark web, linked to two overdose deaths in the Tri-State area. He faces federal charges for conspiracy to distribute and possess controlled substances. Green operated an online business called Starlabs, selling various drugs including heroin and fentanyl through the DrugHub darknet marketplace. Investigators traced packages containing drugs back to Green using shipping labels from Orange Mailer, which resells USPS labels. His arrest followed an investigation that revealed he had a history of drug-related offenses, including a prior incident involving his child. The Hamilton County Heroin Coalition Task Force conducted multiple drug buys from Starlabs, confirming the presence of fentanyl in the drugs. Green was arrested on July 16, 2026, after a search of his Google accounts revealed incriminating evidence.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Coinbase in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API… 
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…