Tech
I'm not a security person. I found cloaked drug-spam injected in front of a live NC town's website, and it's winning
A security compromise on the official website of the Town of Stoneville, North Carolina (stonevillenc.org) has been discovered.
Key takeaways
- The Town of Stoneville, North Carolina website is serving cloaked drug-spam pages.
- Googlebot receives ~85 KB of peptide article prose while human user agents receive a redirect script to WhatsApp numbers.
- Google's AI Overview answers queries using these compromised pages and attributes them to the Town of Stoneville, NC.
- The spam pages are unlinked, absent from the Yoast sitemap, and do not send WordPress wp-json headers.
- The incident was reported to the Town, MS-ISAC, the hosting provider, and Google on September 10, 2026.
A security compromise on the official website of the Town of Stoneville, North Carolina (stonevillenc.org) has been discovered. The site is serving cloaked drug-spam pages that are indexed by Google and cited in Google's AI Overview. When Googlebot crawls the site, it receives normal-looking article prose about peptides, whereas human user agents are served a small redirect payload that forwards them to WhatsApp sales chats for drug sellers. The injection appears to bypass the town's WordPress CMS, leaving the standard sitemap and visible pages looking clean.
Compromised municipal domains are being used to feed spam into Google's AI Overview search results.
By the numbers
- 85363
- bytes served to Googlebot user agent
- 1430
- bytes served to non-Googlebot user agents on September 10
- 2157
- bytes served to non-Googlebot user agents on September 11
How it unfolded
- Town of Stoneville domain original registration
- Last modified date on genuine town sitemap pages
- Spam behavior discovered and reported to MS-ISAC
- Spam payload updated with additional WhatsApp numbers
Turn stories like this into views
Ravenclip finds the Tech news, makes the video, and posts it before attention moves on.
Common questions
- What happened with Town of Stoneville, North Carolina website?
- The Town of Stoneville, North Carolina website is serving cloaked drug-spam pages.
- Where can I read the original report?
- Read the full report at Reddit Search.
