The Vapor Trail: How a Fast-Growing Vape Distributor Hid a $2.2 Billion Fentanyl Pipeline

ATLANTA — To the thousands of convenience store owners and gas station clerks across the Southeast, Cloud9 Distributors LLC was a model of modern corporate efficiency. Operating out of a retrofitted, 200,000-square-foot facility in unincorporated Fulton County, Georgia, the company was hailed as the region’s fastest-growing vape and e-liquid wholesaler. With a high-tech fleet of 47 trucks, an automated packing line, and a catalog featuring over 340 brands, Cloud9 appeared to be a standard-bearer for the booming nicotine industry, reporting an impressive $780 million in sales for fiscal year 2025.

But beneath the pristine logistics and corporate professionalism of the “Cloud9” empire lay a lethal reality. On the morning of February 19, 2026, federal agents shattered that facade, executing 53 simultaneous warrants across four states to dismantle an operation investigators say was responsible for a $2.2 billion fentanyl distribution pipeline hidden in plain sight.

The operation, dubbed “Vapor Trail,” revealed that the company was not just moving flavored nicotine pods; it was systematically poisoning its own customer base, lacing vape cartridges with lethal doses of fentanyl and funneling untraceable firearm components through a network of complicit retailers.

The Statistical Anomaly

The unraveling of the Cloud9 conspiracy did not begin with a midnight raid or a high-level informant, but with a data analyst named Pria Naier, who worked in the DEA’s overdose response unit. Tasked with mapping fentanyl death clusters to supply sources, Naier noticed a statistical pattern that defied the typical geography of drug trafficking.

While most fentanyl-related deaths in the Atlanta metro area correlated with known cartel corridors and major interstate routes, Naier spotted a jarring anomaly: convenience stores supplied exclusively by Cloud9 reported overdose clusters at 300% of the regional average. When she expanded her geographic model to include North Carolina, Tennessee, and Alabama, the correlation remained consistent. The math was impossible to ignore.

“It wasn’t a standard distribution hub,” one federal investigator familiar with the case noted. “It was a retail-level biological weapon. They were putting a lethal dose in the hands of people who thought they were buying a standard nicotine fix.”

By November 2025, a joint task force led by the DEA, FBI, and ATF had mobilized. Their first challenge was proving that the vape cartridges—which appeared identical to legitimate products—were actually contaminated. Through a coordinated effort with three unsuspecting, cooperating store owners, agents secured samples from a Cloud9 delivery. Forensic testing at the Southeast Laboratory in Miami confirmed the worst: of 2,900 cartridges tested, 231 contained liquid fentanyl dissolved in vape glycerin.

The concentration was terrifyingly high, with some cartridges holding enough fentanyl to cause respiratory failure in an opioid-naive user. Roughly 8% of the inventory was lethal. For a store moving a thousand units a month, that meant nearly 80 death traps sitting on the shelves.

The Logistics of Death

Cloud9’s infrastructure was a masterclass in modern concealment. The enterprise was spearheaded by Marcus Ellerby, 44, a former logistics manager with no prior criminal record who leveraged his industry expertise to build a sophisticated supply chain.

The fentanyl itself originated in Sinaloa, Mexico. It arrived at the Texas border concealed in agricultural equipment before being transported to a transshipment point in Montgomery, Alabama. From there, it was loaded onto refrigerated poultry trucks belonging to Southern Feather Logistics, a company based in Coleman, Alabama, and operated by Javier Soto Mendes.

Because these trucks were licensed for agricultural transport, they were subject to USDA inspections but largely ignored by drug enforcement units. The fentanyl arrived in Atlanta hidden among crates of chicken and raw poultry products, then was offloaded near the Cloud9 warehouse.

Inside the warehouse, the operation was divided into two distinct worlds. In the front, a legitimate, fast-moving business operated with standard HR protocols and payroll departments. In the back, concealed behind a reinforced, false wall disguised as a utility closet, sat a 1,200-square-foot “clean room.” Outfitted with pharmaceutical-grade mixing equipment and automated filling machines, this hidden laboratory operated between midnight and 5:00 a.m. while the rest of the facility slept.

The company even turned its failures into a weapon. Cloud9 maintained a suspicious 26% return rate—far above the industry average of 4-6%. Investigators discovered that this “return” system was actually a rotation mechanism used to cycle tainted product back into the warehouse for relabeling and redistribution, ensuring that no single store could accumulate enough defective inventory to trigger a local audit.

The Ghost Gun Connection

While the DEA focused on the fentanyl pipeline, the investigation took a dark turn in December 2025. ATF Specialist Rachel Odum, investigating a separate case in Bessemer, Alabama, executed a search warrant at a vape shop supplied by Cloud9. Inside a shipping box marked “Cloud9 mod kits,” she found no vape components. Instead, she uncovered 17 unfinished pistol receivers, suppressor baffles, and trigger assemblies—all without serial numbers and completely untraceable.

The investigation expanded rapidly. Cloud9 was not only trafficking opioids; it was operating a shadow armory. Components were manufactured by Curtis Wayne Phelps, a former firearms dealer whose federal license had been revoked in 2021. Operating a machine shop in Dalton, Georgia, Phelps would manufacture illegal weapon parts on a “second shift” after his legitimate employees left for the day. These “ghost gun” parts were shipped to Cloud9 warehouses and distributed to a subset of 340 “hand-picked” retail locations whose owners were active, knowing participants in the criminal enterprise.

The Takedown

By early 2026, the task force had documented a flow of over $340 million in cryptocurrency through the network, with much of it diverted to offshore accounts in the Cayman Islands and Dubai. The financial evidence, meticulously traced by FBI forensic accountant Sandre Yei, linked the operation to Alejandro Fuentes Rios, a Mexico City-based money manager who facilitated the payments to the Sinaloa lab network.

When an informant reported that Dalton manufacturer Curtis Wayne Phelps had become suspicious of surveillance, the federal task force made the high-stakes decision to accelerate their timeline. On February 19, 2026, the operation moved from the shadows to the streets.

At 4:47 a.m., 53 warrants were executed simultaneously. In Atlanta, Team Alpha breached the Cloud9 warehouse, finally exposing the fortified clean room and seizing 3.2 kilograms of raw fentanyl powder and over 112,000 contaminated cartridges. In Buckhead, FBI agents arrested Marcus Ellerby at his $1.9 million home. In Dalton, the machine shop was raided, revealing 11 CNC milling machines and thousands of illegal firearm components.

While most of the operation’s key figures were apprehended, the investigation encountered two significant obstacles. Javier Soto Mendes, the poultry logistics operator, vanished from his Alabama home shortly before the raid. Similarly, Dana Reeves, the manager of the Cloud9 facility in Charlotte, had already fled to Mexico.

A Sobering Reckoning

In the aftermath of the raids, the scale of the destruction became clear. The 112,000 tainted cartridges seized during the operation represent only a fraction of the millions that flowed through the Southeast over the last two years. The investigation, spanning four states and involving dozens of federal and local agencies, has led to 92 arrests, with charges ranging from drug trafficking and money laundering to conspiracy and the illegal manufacture of firearms.

For the hundreds of retailers who unwittingly carried Cloud9’s inventory, the discovery has been a profound betrayal. For the families of those whose deaths were mapped by Pria Naier’s original data model, the raid brings a small measure of justice but highlights a terrifying vulnerability in the American supply chain.

“Cloud9 wasn’t just a business; it was a ghost-distribution network that used every convenience of modern commerce to disguise its poison,” said one senior task force member. “They built a system where the evidence was designed to disappear in the trash can, and where the product looked like every other piece of plastic on the shelf.”

As the federal cases move toward trial, the “Vapor Trail” investigation remains a haunting example of how transnational criminal networks have evolved. By hiding behind the mask of a legitimate, high-growth wholesale company, the perpetrators turned a neighborhood convenience store trip into a life-or-death gamble. With the network dismantled, the federal government now faces the task of tracking down the remaining fugitives and uncovering the full extent of the damage wrought by the Cloud9 pipeline—a task that, given the international reach of the conspirators, is only just beginning.