This interactive tool visualizes the relationships between people, groups, incidents, platforms, and countries connected to the 764 violent extremist network and its place within The Com, a decentralized meta-network of online violent extremist communities.
What You Can Explore
The network maps 319 entities and 843 relationships, including group lineage and splintering (764 → 8884, 7997, Harm Nation, etc.), who perpetrated which incidents and where, platform usage across the recruitment pipeline (Roblox and Minecraft to Discord to Telegram), cross-group alliances (764 × NLM, MKY × NLM), and the law enforcement response across multiple countries.
Navigating the Map
Pan and zoom by clicking and dragging the canvas, or scrolling to zoom in and out.
Click any node to select it. The right-hand sidebar will display details including aliases, group membership, case citations, and related edges.
Drag nodes to rearrange the layout. The physics engine will settle around your changes.
Sidebar Tabs
Details — Shows information about the currently selected node, including a full description for incidents and case citations for people.
Insights — Curated fact cards highlighting key findings. Click a card to zoom the map to the relevant nodes and dim everything else. Click it again to reset.
Legend — Color and shape key for all node types and edge types.
Sources — Full bibliography of court filings, DOJ press releases, analyst reports, and media sources used to build this network.
Narrative Timeline
The collapsible timeline at the bottom of the screen presents key events in chronological order. Click any event to focus the map on the relevant nodes. Click again to deselect. Toggle the drawer open or closed with the bar at the bottom.
Node Types
● Incidents — Attacks, arrests, and legal actions, drawn from the NVE Tracker dataset.
◆ Groups — 764, its splinter cells, rebrands, and sibling networks within The Com.
■ People — Perpetrators, founders, and key figures. Gold-bordered nodes indicate senior leadership.
▲ Platforms — Social media and gaming platforms used for recruitment, coordination, and distribution.
▲ Countries — Where incidents occurred or perpetrators originate.
■ U.S. States — State-level geographic detail for domestic incidents.
Tips
Hover over any edge (connection line) to see a tooltip explaining the relationship.
When an insight card or timeline event is selected, non-relevant nodes fade to the background so you can focus on the relationships being described.
Use Ctrl + scroll to zoom more precisely.
Frequently Asked Questions
What is 764?
764 is a violent online predatory network named for the first three digits of the ZIP code of Stephenville, Texas, where it was founded. The network systematically recruits and grooms minors through gaming platforms, Discord, and Telegram into producing self-harm imagery, CSAM, and violent content. It operates through decentralized cells coordinated by peers and adult recruiters who pose as peers, using blackmail and psychological manipulation to coerce increasingly severe compliance. The FBI designated 764 a “violent extremist” threat in 2023.
What is The Com?
“The Com” (short for “The Community”) refers to the loosely federated online ecosystem encompassing 764, TCC, MKU, and a constellation of affiliated cells that share infrastructure, membership, tactics, and content. Rather than a single organization, The Com is a distributed subculture with fluid membership, shared norms, and a common practice of coercing minors into producing violent and sexual content. It operates primarily through encrypted messaging platforms and private gaming servers. Beyond exploitation of minors, The Com is associated with hacking, SIM swapping, cryptocurrency theft, doxxing, swatting, and non-consensual distribution of intimate imagery.
What are the groups shown in the network?
Groups (shown as dark diamond-shaped nodes) represent organizations, cells, and factions within or adjacent to the 764 ecosystem. These include 764 itself, numbered rebrands like 8884, 7997, and 6996, inner circles like Tophet and 764 Inferno, and affiliated networks such as Harm Nation, CVLT, No Lives Matter, and M.K.Y. Many of these groups share overlapping membership and infrastructure, reflecting The Com’s decentralized structure.
What are artifacts?
Artifacts (shown as brown star-shaped nodes) represent key documents, manifestos, guides, and other operational materials produced or circulated within the network. These include instructional documents on recruitment tactics, coercion methods, and operational security, as well as manifestos and ideological texts. Artifacts help illustrate how knowledge and techniques are transmitted across the network.
What are aliases?
Aliases (shown as teal downward-triangle nodes) represent unidentified co-conspirators referenced in court filings. Federal indictments and plea agreements frequently mention individuals only by their online handles (e.g., “Blood Oath,” “Cript,” “Rex”) when their real identities have not been publicly established. These nodes are connected to the named defendants they conspired with, illustrating the network’s broader membership beyond those who have been publicly identified.
What do the node shapes and colors mean?
Each node type has a distinct shape and color: red circles for incidents (criminal cases), dark diamonds for groups, blue circles for people, teal triangles for aliases, green squares for platforms, orange triangles for countries, purple hexagons for U.S. states, and brown stars for artifacts. You can toggle each type on or off using the checkboxes in the Details tab. The Legend tab provides a full visual reference.
What are the centrality metrics?
Centrality metrics quantify how important a node is within the network. Degree centrality counts how many direct connections a node has. Betweenness centrality measures how often a node sits on the shortest path between other nodes, indicating its role as a bridge or gatekeeper. Closeness centrality measures how quickly a node can reach all others. Eigenvector centrality considers not just how many connections a node has, but how well-connected its neighbors are. Use the “Size nodes by” radio buttons to visually scale nodes by any of these measures.
What is community detection (Louvain)?
Community detection identifies clusters of nodes that are more densely connected to each other than to the rest of the network. This tool uses the Louvain algorithm, a widely used method that groups nodes by iteratively merging them into communities that maximize modularity, a measure of how well the resulting grouping captures the network’s internal structure. Selecting “Community (Louvain)” under “Color nodes by” recolors each node by the community it belongs to, and a set of filter checkboxes lets you isolate individual communities. In this network, communities typically align with operational clusters such as the 764 core, CVLT, M.K.Y., and other affiliated groups, so the view is useful for seeing which people, incidents, groups, platforms, and artifacts cluster together.
How do the entity filters work?
In the Filters tab, select a country, U.S. state, group, or platform to show only that entity together with everything connected to it. For a country or U.S. state, the view expands through that place’s incidents to also show the perpetrators, platforms, and groups involved; for a group or platform, it shows the incidents and people directly attached. One entity applies at a time, and the coercion-technique filter can be combined with any entity selection. The “Clear filters” button resets everything in the Filters tab.
How does the “Coercion Technique” filter work?
The “Coercion technique” dropdown, in the Filters tab, isolates the network by a coercive-control mechanism coded for each incident: sextortion, coerced self-harm, doxxing/swatting, coerced animal cruelty, or physical assault/threats. Selecting one hides everything except the incidents coded for that mechanism, together with the people, aliases, and platforms directly connected to those incidents and the edges among that set, so you can see who was involved in a given type of harm and where it occurred. Groups, countries, U.S. states, and artifacts are not shown by this filter, which is limited to incidents, people, aliases, and platforms. It composes with the “Show node types”, community, and entity filters, and the “Clear filters” button resets everything in the Filters tab. Mechanism coding reflects the project’s incident dataset and records documented conduct only, so it represents a floor rather than a ceiling; incidents with no coded mechanism do not appear under any selection.
How do I navigate the network?
Click and drag on the background to pan; scroll to zoom. Click any node to view its details in the sidebar, including case information, connections, and centrality metrics. Hover over any edge (connection line) to see a tooltip explaining the relationship. Use the search box to find specific nodes by name. The filter checkboxes let you show or hide node types, and the timeline drawer at the bottom lets you explore cases chronologically.
Is the network comprehensive of all 764 nodes and connections?
No. This map reflects what is available in public sources, including federal indictments, plea agreements, DOJ press releases, analyst reports, and open-source research. 764 is a secretive network, and it is reasonable to assume that many of the network’s members and their connections have not been exposed in the public record. The map should be understood as a partial view of a larger, largely hidden network.
Where does the data come from?
The network is built from federal court filings (indictments, criminal complaints, plea agreements, and sentencing documents), Department of Justice press releases, analyst reports, and open-source investigative journalism. Each source is listed in the Sources tab.
How often is this updated?
The network is updated periodically as new court filings are unsealed, new cases are charged, and new research is published. Because the 764 ecosystem is the subject of active federal investigations, new information becomes available on an ongoing basis.
Rohan Rane founds the CVLT Discord server. Members use sextortion and coercion, setting the template 764 would later follow.
2020
Cadenhead meets Trippy through The Gore
After release from juvenile detention, Cadenhead reconnects with "The Gore," an online community focused on violent videos. On Snapchat, he meets "Trippy" (Prasan Nepal), who is near his age. Trippy invites Cadenhead to a server, sparking his deeper involvement.
Jan 2021
Cadenhead founds 764
Inspired by his time in The Gore, 15-year-old Cadenhead starts his own Discord server from his mother's apartment in Stephenville, TX, naming it after his zip code. Initial rules prohibit animal and child abuse.
Early–Mid 2021
764 escalates after contact with Greggy's Cult
Cadenhead told a forensic psychologist that 764's original rules prohibited animal and child abuse and that those rules changed after he began interacting with "The Greggy Cult." He then, in his own words, decided to "take it to a whole different level…a lot worse." He begins extorting Greggy's Cult members, starts promoting child pornography, uses OBS Studio to broadcast CSAM during video calls, and coerces victims into self-harm through blackmail.
Aug 25, 2021
Cadenhead arrested
Stephenville police execute a search warrant after receiving dozens of cyber tips on Cadenhead. Tips include images of "I heart CP764" carved into a body. His arrest creates a leadership vacuum in 764.
Late 2021
Nepal takes over leadership
Prasan Nepal ("Trippy") — the same person who recruited Cadenhead into The Gore — emerges as 764's new leader, transforming a one-person operation into a structured network.
Jan 17, 2022
Coerced death of a 13-year-old
A 13-year-old from Gig Harbor, WA dies by coerced suicide, livestreamed on Instagram. Hamburg-based "White Tiger" (Shahriar Javan) is suspected.
2022 – 2023
764 splinters into rebrands
The group fractures into numbered rebrands (8884, 7997, 6996) and inner cells (Tophet, 764 Inferno). FBI opens 300+ cases.
May 2023
Cadenhead sentenced to 80 years
Cadenhead pleads guilty to possession of child pornography in Erath County, TX. Judge Cashon sentences him to 80 years in prison.
Jul 2023
CVLT indictment (6 defendants)
The C.D. Cal. CVLT case becomes the largest 764-adjacent federal indictment, charging 6 defendants with conspiracy and exploitation.
Sep 12, 2023
FBI delivers first public warning about 764
The FBI publishes PSA 230912, warning the public about violent online groups that target minors using threats, blackmail, and manipulation to coerce them into producing CSAM and engage in acts of self-harm. Though the PSA does not name 764 or The Com explicitly, it describes their exact modus operandi and marks the first federal law-enforcement acknowledgment of the threat.
Sep 13, 2024
764 and No Lives Matter formally ally
The "NLMx764 Classified" manifesto is published, co-branding 764 with No Lives Matter and framing real-world violence as doctrine. That same day, NLM's Swedish cell leader "Slain764" stabs two elderly people in Hässelby, Stockholm. NLM had publicly split from 764 in May 2024 over ties to Satanism and pedophilia, then re-allied in August 2024 (per ADL). The manifesto disavows the sextortion history as a "troll."
Dec 2024
Harm Nation confirmed as 764 offshoot
Kyle Spitze's plea agreement in E.D. Tenn. is the first court filing to confirm that Harm Nation "is an off shoot of 764."
Jan 1, 2025
Europol launches Project Compass
Europol's European Counter Terrorism Centre (ECTC) launches Project Compass, a multinational law-enforcement effort targeting The Com and 764. The project coordinates partners across Europe, North America, and Australia, and later contributes to Operation Dolphin, a counter-terrorism program targeting non-Islamist entities.
Apr 2, 2025
First "NVE" charging document
The Ayala Casimiro complaint (C.D. Cal.) is the earliest known federal charging document to use "Nihilistic Violent Extremist" (NVE) terminology, formally defining the term and classifying 764 as an NVE network. A Joint Terrorism Task Force case.
Apr 30, 2025
Nepal and Varagiannis arrested
DOJ announces the arrest of the two senior 764 leaders, Nepal in North Carolina, Varagiannis in Greece. Charged with operating a global child exploitation enterprise.
Jun 17, 2025
White Tiger arrested in Hamburg
German police arrest Shahriar Javan in Hamburg-Marienthal. Charged with 200+ offenses. First major 764 prosecution outside the U.S.
Aug 28, 2025
NCMEC reports 1,000+ tips tied to 764 in first half of 2025
The National Center for Missing and Exploited Children (NCMEC) discloses that its CyberTipline received more than 1,000 reports with a nexus to violent online groups such as 764 during the first six months of 2025, on pace to exceed the 1,300 such reports it received in all of 2024. NCMEC notes that most victims were girls ages 14-17 and that most reports were submitted by the public rather than by tech platforms.
Oct 30, 2025
First terrorism charges in a 764 case
A 29-count superseding indictment against Baron Martin ("Convict") in D. Ariz. includes "conspiring to provide material support to terrorists," the first terrorism charge ever brought in a 764 prosecution. Prosecuted by DOJ's National Security Division Counterterrorism Section.
Dec 10, 2025
Canada first country to list 764 as terrorist entity
Public Safety Canada adds 764, Maniacs Murder Cult, the Terrorgram Collective, and Islamic State-Mozambique to the Criminal Code list of terrorist entities. The designation makes Canada the first country to label 764 a terrorist group and unlocks authorities to freeze assets and prosecute terrorism offences.
