CVLT Historical Threat Assessment of the Precursor to 764
Overview
This threat assessment evaluates CLSTST/CULTIST/CVLT (often referred to simply as “Cultists” or “CVLT”), a networked online group and direct precursor to the more notorious “764.” Both groups operate within the larger Com Network – a dynamic and loosely organized set of digital sub-communities connected by a nexus of sextortion, cybercrime, and, increasingly, offline extremist violence. The January 30, 2025, federal indictment of four CVLT leaders highlights a coordinated criminal enterprise.
The focus here is on Cultists’ historical development, tactics, membership, and evolution into or influence over 764. Evidence from court filings and self-published manifestos underscores how neo-Nazi beliefs, occultism, and accelerationism are intertwined with the weaponization of child sexual exploitation of minors, forced self-harm, and other violent acts as a means of accelerationism to attack normative democratic values.
CVLT: Refers to the precursor child exploitation group whose leadership core is charged in the newly unsealed federal indictment.
Cultists (CLSTST/CVLT): Initially a spinoff or adjacent community run by “vore” (Kalana Limkin) that embraced “no rules,” eventually merging tactics with CVLT.
764: A child extortion network founded by “Brad,” carrying forward CVLT’s sextortion methods. After multiple arrests, it fragmented into copycat or “LARP” servers, where members like Gustav, Trippy, Rabid (Richard Densmore), Criminal (Kyle Spitze) attempted to resurrect the brand.
Background and Evolution
Origins of CVLT
CVLT (often pronounced “Cult”) emerged as an online group around 2017–2019, organized primarily on platforms such as Kik Messenger (initially), Instagram, and later Discord and Telegram. According to the recently unsealed indictment and documents created by members of CVLT:
Founder/Leadership: Identified in multiple sources as Rohan Sandeep Rane (Rohan), joined by others who eventually rose to administrative roles (ended up on the official roster), including Collin John Thomas Walker (WRATH/O9A.WRATH), Kaleb Merritt (eTerror/o9a.evil) and, Clint Jordan Lopaka Nahooikaika (Whoops), Kalana Limkin (Vore), Bradley Cadenhead, Gustav and Trippy (see table in section 3).
Earliest Activities:
Grooming minors via direct messages on social media (Instagram, Kik).
Developing a cult-like identity with ritualsing forced self-harm, known as “cut shows,” where victims carved the names or aliases of CVLT admins into their skin. (several of the early leaders of CVLT identified with the ideology of O9A)
CSAM Production & Distribution: The group systematically coerced vulnerable minors to create explicit materials, sometimes involving bestiality or extremely violent fantasies.
Contemporaneous references show that CVLT (and parallel nihilistic/ accelerationist/ occultic/ gore servers) garnered clout for orchestrating child exploitation “events,” systematically documenting these acts in group chats, and threatening victims with doxxing or exposure if they refused further demands.
Transition Toward 764 and Intersection with CULTIST
The emergence of 764 as a distinct but ideologically and operationally linked successor to CVLT reflects the evolution of exploitative online communities within the broader Com Network. CVLT, which operated from 2017 to 2022, was one of the earliest known groups to systematically combine child sexual exploitation, coercion, and accelerationist ideology within a digital ecosystem. It functioned as a closed-circle network where members engaged in grooming, sextortion, and the forced creation of CSAM while simultaneously exposing victims to extremist and violent content. The group’s structure mirrored that of a decentralized criminal enterprise, with key figures such as Rohan, WRATH, and eTerror orchestrating a hierarchy in which members could gain status through acts of sadism, coercion, and ideological alignment with nihilism and neo-Nazism.
By 2021, CVLT and the early 764 offshoot had garnered attention from law enforcement due to the high profile arrest of Kaleb Merrit, for kidnapping and rape, as well as the arrest of Rohan in France. This disruption led to the fracturing of the group and lead to those who remained to create the 764 splinter. One of the interesting shifts between CVLT and 764 was the incorporation of explicit accelerationist rhetoric and deeper engagement with occultism. This shift was not purely ideological but strategic, as 764 members sought to cultivate a mystique that would further distance them from mainstream digital spaces while also attracting recruits who were drawn to a blend of extreme violence and cyber-enabled terror.
By 2022, 764 had fully absorbed many of the surviving members of CVLT and had begun implementing an expanded version of its predecessor’s tactics. The group’s influence grew as it became one of the most well-known entities within the Sextortion Com pillar of the broader Com Network. In particular as 764 leaders came from CVLT and the mystique it had accrued in the network increased their popularity and influence. 764 was responsible for a vast network of child exploitation, cyber harassment, and ideological radicalization, positioning itself as both an inheritor of CVLT’s methods and an innovator in the emerging intersection of online extremism and child exploitation. The arrests of key figures such as Cadenhead, Limkin, Alemida and other 764 members have have had a chilling effect and forced it into further fragmentation, with new successor groups forming under different names while continuing the legacy of CVLT’s criminal enterprise. After the dismantling of 764’s leadership, multiple offshoots emerged, each attempting to reconstitute the group’s structure and maintain its presence within the Sextortion Com and Offline Com pillars of the broader Com Network. These successor groups operated under different names, including 676, 7997, Court, Kaskar, Harm Nation, Leak Society, Court, KNR, NLM, and H3ll, among others. While these groups varied in size and influence, they all retained elements of CLVLT's 764’s operational model: child exploitation, online harassment, and ideological extremism.
Key Actors and Incidents
Below is a table summarizing notable individuals, roles, and statuses across CVLT, Cultists, and 764. This includes both perpetrators (“Leaders” or “Members”) and documented victims. Note that many minors are only identified by pseudonyms or “Minor Victim” references in indictments.
Tactics and Activities
Grooming and Sextortion
Primary Tactic: Members approach minors on gaming platforms (Roblox, Minecraft) or “gore/anarchy” Discord servers, gain trust, and demand escalating sexual or violent acts on camera.
Blackmail & Threats: If victims refuse to continue, group leaders threaten to “dox” them (expose addresses, social media details) or release recorded content to family and friends.
Forced Self-Harm: Victims are coerced into cutting themselves, carving members’ names in their skin, or attempting suicide live.
Production and Distribution of Child Sexual Abuse Material (CSAM)
Coordinated Exploitation: The newly unsealed indictment confirms that CVLT had an organized system for recruiting, grooming, and retaining minors to produce CSAM.
Cross-Platform Storage: Content was swapped or sold on Telegram and Discord. Group members often archived or “catalogued” explicit materials in “LoreBooks.”
Animal Cruelty and Incitement to Violence
Both CVLT and 764 inflicted or demanded extreme cruelty to animals, used as a method to degrade victims and test loyalty. Some accounts also show an interest in inciting real-world violence (random attacks, stabbings, or mass casualty threats).
Intersection with Extremism
CVLT and 764 adopted a fusion of accelerationism, occultism, and neo-Nazism as the foundation of their ideology and operational tactics. Accelerationist and occultic beliefs justified their engagement in sextortion and child exploitation as methods to degrade moral structures and hasten societal collapse. Neo-Nazi imagery, was used both to degrade and to further humiliate victims, reinforcing a white supremacist hierarchy. Occult influences, particularly from the Order of Nine Angles (O9A), Satanic Front, and Temple ov Blood, provided a framework for rationalizing extreme acts of violence, including forced bestiality, incest, and ritualistic abuse. While not all members were ideologically committed, these symbols and beliefs created a shared culture that maintained group cohesion and amplified the shock value of their crimes.
764, more so than its predecessor CVLT, integrated neo-Nazi accelerationism as a core component of its identity, drawing inspiration from both O9A, Satanic Front and the Terrogram Collective. Nazi iconography and accelerationist rhetoric were not just aesthetic choices but tools of radicalization and dehumanization, fostering a culture of extreme violence. While some members engaged in these themes for transgressive appeal, the leadership and core influencers used them to push followers deeper into sadistic and criminal behavior. The occult elements, adapted from O9A-affiliated groups, furthered this process by introducing a nihilistic worldview where exploitation and harm were reframed as acts of power and spiritual significance.
The fusion of neo-Nazi accelerationist rhetoric, O9A-inspired satanic rituals, and a nihilistic embrace of sadism made CVLT and 764 far more than just online abuse rings—they functioned as criminal enterprise that is a hybridized threat, blending elements of white supremacy, esoteric occultism, and organized crime into a unique and rapid victimization and radicalization pipeline. Their ability to integrate these belief systems into sextortion, child abuse, and coercion tactics created a multi-layered threat that continues to persist in rebranded successor groups even after the arrests of key leaders.
Threat Analysis
Targeting & Vulnerabilities
Primary victims are minors drawn from social media, gaming communities, or self-harm/gore forums.
High risk to minors who are lonely, experiencing mental health crises, or lacking adult oversight.
Continuing Capabilities
Persistent Online Presence: Despite repeated server bans, members rebrand and migrate.
Escalation Potential: Cross-over with extremist and terrorist offline violence, including doxxing, swatting, arson, and murder.
Resurgence: Known patterns of cyclical reformation; “hero worship” around indicted or convicted members can spur further attempts to replicate these crimes.
Means and methods of CVLT (According to the January 17, DOJ indictment of CVLT leaders ⚠️CONTENT WARNING⚠️)
Exploiting existing vulnerabilities, such as mental health challenges or prior sexual abuse to break down children’s willpower and resistance,
Degrading children, such as telling a Black child to call herself “slave” and “[N-word]”,
Offering to “protect” the children from other online predators,
Encouraging children to harm themselves and others, in order to desensitize them to extreme and violent acts, such as punching themselves, hanging themselves with belts, engaging in sexual or violent acts with their pets, and – eventually – escalating to killing themselves on livestream,
Exposing children to violent and extremist context, such as animals being tortured and crushed to death, women being raped, and BDSM, gore, and child pornography.
Promoting extreme philosophies such as Neo Nazism, nihilism, anarchy, pedophilia, rape, and lawlessness.
Having degraded and groomed the children, CVLT members would then knowingly employ, use, persuade, induce, entice, and coerce children to self-produce child pornography and self-harm. This child pornography sometimes included use of pets or other children, or insertion of foreign objects like knives or cacti into their genitals.
Once CVLT members had obtained the child pornography from child victims, they would often try to coerce the children to produce more child pornography, threatening to release the existing child pornography to the child’s friends and family – or the public – if the child did not produce more child pornography. Other times, CVLT members would reveal they knew the child’s true identity and location, and would threaten to “SWAT” or “dox” the child.
CVLT members would discuss child sexual exploitation, including encouraging other members to coerce the children to engage in more extreme, violent, and degrading behavior, and also encouraged others associated with CVLT to do the same. They also discussed the potential of being apprehended and how to evade detection by law enforcement.
Conclusion
CVLT represents an compelling precedent in prosecuting online extremist networks as criminal enterprises, and maybe setting the stage for broader legal action against successor groups like 764. The January 30, 2025, federal indictment of CVLT leaders highlights a coordinated criminal enterprise, which prosecutors have established a legal framework for dismantling similar groups that use digital platforms to exploit minors, distribute CSAM, and integrate neo-Nazi and accelerationist ideology into their operations.
This case marks a critical escalation in law enforcement strategy. Previous efforts against Com Network affiliates focused on individual arrests, but CVLT’s prosecution as an enterprise underscores its structured leadership, operational continuity, and reliance on group tactics. This legal precedent will likely influence future prosecutions of 764 and related groups, making it easier to pursue RICO (Racketeer Influenced and Corrupt Organizations Act) charges or similar statutes against online sextortion rings that function as structured criminal organizations rather than loose collectives of offenders.
Despite these enforcement successes, the Com Network’s adaptability presents a sustained national security and child protection challenge. CVLT’s demise has not eradicated the broader hybridized threat of online radicalization, coercive violence, and organized child exploitation. As long as Com Network cells can rapidly rebrand and shift platforms, prosecution alone will not suffice. A sustained, interdisciplinary response—merging counter-terrorism, cybercrime, child protection, and mental health intervention—is necessary to disrupt the full spectrum of threats posed by these groups. The DOJ’s actions against CVLT are a significant step, but without persistent monitoring, cross-platform enforcement, and international cooperation, the next iteration of 764 is already taking shape.