How we decide what to block, how to report illegal content, and how to appeal
Holos Discover is a consent-based Fediverse search engine. Because we index content at scale, we take a proactive approach to moderation: we rely on trusted third-party denylists, we react quickly to incidents, and we default to removal when in doubt. We never publish posts of our own — our only outbound activities are Follow and Undo Follow.
For the user-facing consent model (how we decide whom to index), see How it works. For user privacy rights and opt-out, see our Privacy Policy. This page focuses on moderation of instances.
We maintain a public list of blocked instances. Blocks come from four sources:
We import the IFTAS DNI list in full. This list is curated by IFTAS through its SW-ISAC programme and covers content that poses legal or safety risk to operators — primarily CSAM (child sexual abuse material), TVEC (terrorism and violent extremism) and NCII (non-consensual intimate imagery). Entries on this list are obfuscated on our public stats page to avoid advertising illicit domains.
We also import the IFTAS AUD list, which catalogues abandoned or unmanaged instances that are a common source of spam, LLM-generated content, and coordinated disinformation campaigns.
The operator may block additional instances for the following reasons:
We run scheduled checks that can result in automatic blocks:
detect-bridges: samples posts to identify instances that bridge Bluesky content (at://did: patterns) without user consentIf you find indexed content that is illegal in your jurisdiction — in particular CSAM, TVEC or NCII — please contact the instance administrator immediately. Reports can come from anyone (users, instance admins, law enforcement, IFTAS).
If you are an instance administrator and believe your instance has been blocked in error, you can request a review:
Note: blocks originating from the IFTAS DNI list cannot be lifted on our side — you must engage directly with IFTAS for removal from their denylist.
The full list of blocked instances is published on our public stats page, grouped by source (IFTAS DNI, IFTAS AUD, manual). Domains labelled CSAM, TVEC or NCII are obfuscated (TLD + SHA-256 hash prefix) — an operator can verify whether their own domain is on the list by hashing it locally, without us publicly advertising illicit domains.
For moderation questions, illegal content reports, or unblock requests, contact the instance administrator. We welcome dialogue with other instance admins, IFTAS, and participating platforms.