Listen to this Post
A New Academic Year, An Old Cybersecurity Crisis
As classrooms prepare to reopen and universities get ready for another wave of students, teachers, researchers and administrators, a different kind of back-to-school rush is already underway — and cybercriminals are participating in it.
According to research attributed to Check Point Research, the education sector has once again emerged as the world’s most heavily targeted industry for cyberattacks. Between January and July 2026, educational and research organizations reportedly experienced an average of 4,696 cyberattacks per organization every week, representing an 8% increase from the same period in 2025 and more than twice the cross-industry average of 2,150 attacks.
The timing is particularly concerning. As schools and universities prepare for the new academic year, attackers are simultaneously increasing phishing campaigns, registering deceptive education-themed domains and exploiting the digital workflows that students, parents and employees rely on every day.
This is not simply a story about hacked school computers. Modern education has become an enormous digital ecosystem containing student records, financial information, research data, employee credentials, intellectual property, healthcare information, payment systems and access to cloud services. One compromised account can potentially become a doorway into an entire institution.
Education Has Become a Prime Cybercrime Target
Check
In February, Check Point reported an average of 4,749 attacks per educational organization every week, while education also remained the leading target in March, April, May and June. June alone recorded approximately 4,816 weekly attacks per education organization.
That consistency is arguably more important than any individual monthly number.
Cybercriminals are not discovering education for the first time. They are building a long-term targeting strategy around it.
Why Schools Are So Attractive to Attackers
Educational institutions present an unusual combination of valuable information, enormous user populations and relatively complex environments.
A university may have tens of thousands of students, thousands of employees, contractors, researchers and external partners. Each person can have different devices, applications, privileges and security habits.
Schools also routinely operate networks designed to be accessible rather than restrictive. Students need internet access. Researchers need to communicate with external institutions. Teachers need collaboration platforms. Parents need online portals. Administrative teams need cloud services.
The same openness that makes digital education convenient can also make it attractive to attackers.
The Student Account Can Be More Valuable Than the Computer
A stolen laptop is replaceable.
A stolen identity can be much more valuable.
Attackers increasingly want usernames, passwords, session cookies, authentication tokens and access to cloud accounts. A compromised student account can potentially provide access to email, Microsoft 365, cloud storage, academic systems and internal communication.
An employee account can be even more valuable because it may possess administrative permissions or access to sensitive institutional systems.
This explains why phishing remains such an effective weapon against education.
The Back-to-School Attack Window
The weeks surrounding the academic calendar create predictable behavior.
Students begin registering for courses. Parents receive payment notifications. Teachers receive onboarding documents. Staff members reset passwords. Universities send financial-aid information. New employees receive Microsoft 365 accounts.
Every one of those legitimate processes can become a phishing opportunity.
Attackers do not necessarily need to invent an entirely new scam. They simply need to imitate something that people already expect to receive.
Fake Domains Create a False Sense of Trust
One of the most disturbing elements of the reported research is the scale of education-themed domain registration.
According to the supplied research, Check Point identified 18,954 newly registered domains containing education-related terminology in July 2026, an increase of 5% from June.
The problem was not merely the number of domains.
It was how many appeared to be connected to malicious activity.
The research reportedly found that approximately one in every 305 newly registered education-related domains was flagged as malicious in June, deteriorating to roughly one in every 226 in July.
That pattern suggests that criminals understand the value of timing.
They can register a convincing domain shortly before the start of the academic year, create a professional-looking website and then use email, advertisements or social media to direct victims toward it.
The Power of a Familiar Name
A phishing website does not have to be perfect.
It only has to be convincing long enough for the victim to make one mistake.
A domain containing words such as “student,” “university,” “school,” “portal,” “education” or “government” can create an immediate psychological association with legitimacy.
Examples cited in the research include domains such as education-gov[.]com, students-portal[.]com and checkmyschool[.]org.
The important lesson is that a familiar-looking domain is not proof of authenticity.
The domain itself must be examined carefully.
Criminals Are Automating the Infrastructure
The reported registration patterns are also significant because they appear to go beyond isolated scams.
Researchers reportedly identified groups of domains following predictable naming conventions, including student-loan-related domains spanning multiple years and a network of dozens of bootcamp-related domains.
Such patterns are consistent with an industrialized approach to phishing infrastructure.
Instead of creating one website and hoping it succeeds, criminals can create dozens or hundreds of domains, test which ones attract victims and abandon those that become blocked.
This is the cybersecurity equivalent of mass production.
Students Are Valuable Targets
Students may be particularly attractive because they frequently move between devices, networks and services.
A student may use a university network in the morning, home Wi-Fi in the afternoon and public Wi-Fi at a café in the evening.
They may also use personal laptops and smartphones alongside institution-managed systems.
That creates a complicated security environment.
Attackers understand that students are constantly receiving messages about tuition, scholarships, discounts, internships, examinations, course registration and account verification.
A malicious message can therefore hide inside a huge amount of legitimate communication.
Fake Discounts Turn Into Malware Campaigns
The reported research also describes a campaign involving a domain designed to impersonate a major retailer’s student rewards promotion.
The bait reportedly promised a $750 reward.
That is a classic psychological technique.
Rather than frightening the victim, the attacker offers something desirable.
A student who ignores an urgent security warning might still click a message promising hundreds of dollars in rewards.
Once the victim follows the link, the criminal can redirect them through additional pages, collect information or expose them to further malicious content.
Compromised School Websites Are Especially Dangerous
Another major concern is the abuse of legitimate websites.
If criminals compromise an actual school website, the attack becomes more difficult to recognize.
The victim may see a legitimate educational domain in the browser and assume that everything on the page is safe.
But a compromised website can act as a stepping stone.
A visitor might be redirected to a fake Microsoft 365 login page, a malicious download or another website controlled by attackers.
This technique demonstrates an important principle in modern cybersecurity: trust in the domain does not automatically mean trust in every page or resource hosted there.
Fake Microsoft 365 and OneDrive Pages
Cloud services have transformed education, but they have also created attractive targets.
Microsoft 365 and OneDrive accounts can contain emails, documents, research materials, personal information and authentication pathways to other services.
The reported campaigns involving counterfeit Microsoft 365 and OneDrive login pages therefore deserve particular attention.
The goal is often simple: convince the victim to enter their credentials.
The attacker does not need to break
They simply need the user to hand over the key.
The CAPTCHA Trap
The research also describes a compromised school website that had previously displayed a fake Spotify-branded CAPTCHA.
Fake CAPTCHA pages have become increasingly popular among malware distributors because they exploit a user’s instinctive assumption that CAPTCHA verification represents a security mechanism.
The irony is obvious.
The victim believes they are proving they are human while actually being guided through a malicious delivery process.
Security teams should therefore treat unexpected CAPTCHA pages with caution, especially when the page appears immediately before a download, redirect or suspicious browser action.
Europe Is Becoming an Increasingly Important Battleground
The regional figures presented in the article are also worth examining.
According to the supplied data, APAC recorded the highest overall volume, while Europe experienced an 18% year-over-year increase and Latin America recorded an even sharper 42% rise.
Check
Europe’s increasing exposure deserves particular attention because educational institutions across the region are rapidly expanding their use of cloud platforms, digital identity systems and online collaboration tools.
More connectivity creates more opportunities.
The Attack Surface Is No Longer the Campus
A traditional school network once consisted largely of computers physically located inside buildings.
That model has disappeared.
Today’s education environment may include cloud applications, mobile phones, remote workers, personal laptops, learning-management systems, research servers, online payment platforms, digital libraries, third-party applications and thousands of unmanaged devices.
The campus has effectively become borderless.
And cybersecurity must evolve accordingly.
The Supply Chain Problem
Educational institutions are also connected to companies they do not directly control.
Universities may use external payment processors, cloud providers, software vendors, online examination platforms, research partners and managed service providers.
A weakness in one of those organizations can become an indirect threat to the university.
This makes supply-chain security just as important as endpoint security.
A school can have excellent internal defenses and still be exposed through a trusted external service.
Research Data Makes Universities Uniquely Valuable
Universities are not simply educational organizations.
Many are research institutions.
They may possess commercially valuable scientific research, engineering projects, medical research, artificial intelligence models, intellectual property and unpublished findings.
For nation-state actors and sophisticated criminal groups, that information can be extremely valuable.
A university account may therefore be worth much more than the immediate financial value of a student’s identity.
Ransomware Remains a Major Concern
Phishing and credential theft are not necessarily the final objective.
They can be the beginning.
Once attackers obtain credentials, they can attempt lateral movement, escalate privileges, access file servers and eventually deploy ransomware.
The education sector is particularly vulnerable to disruption because schools cannot easily tolerate extended outages.
Imagine an institution unable to access student records during registration week.
Imagine lecturers unable to access course materials.
Imagine payroll, admissions or examination systems becoming unavailable.
The operational consequences can be enormous even when no money is immediately stolen.
Why Attackers Prefer the Human Layer
Technology can detect malware.
People can still click links.
This is why social engineering remains central to education-focused attacks.
Criminals understand that the weakest point is frequently not a firewall or server.
It is the moment when a busy employee receives an email that looks completely normal.
The attacker is exploiting attention rather than code.
What Schools Should Do Before the New Term
Institutions should treat cybersecurity preparation as part of their back-to-school checklist.
Security teams should review identity systems, privileged accounts, endpoint protection, backups, email security, cloud configurations and third-party integrations before student activity reaches its peak.
Waiting until the first week of classes is too late.
The highest-value security improvements should already be in place.
Multi-Factor Authentication Must Become the Baseline
Passwords alone are no longer sufficient.
Schools and universities should require multi-factor authentication for email, administrative systems, remote access and cloud services wherever possible.
More importantly, organizations should prioritize phishing-resistant authentication methods for high-value accounts.
If a password is stolen, MFA can prevent the attacker from immediately using it.
Patch Management Cannot Be Optional
Education organizations frequently operate large and diverse technology environments.
That makes patch management difficult.
It does not make it optional.
Internet-facing systems should be prioritized, especially VPN gateways, identity systems, remote-management platforms, learning-management infrastructure and publicly accessible applications.
Security teams should maintain an accurate inventory of exposed assets and continuously monitor for newly disclosed vulnerabilities.
Students Need Security Training Too
Security awareness cannot stop with employees.
Students are part of the attack surface.
Universities should teach students how to recognize fake login pages, suspicious domains, malicious attachments, fake scholarships and fraudulent payment requests.
The training does not need to be complicated.
A few practical rules can prevent major incidents:
Never enter credentials after following an unexpected email link.
Check the domain before logging in.
Use MFA.
Do not install software simply because a website tells you to.
Report suspicious messages immediately.
Parents Are Part of the Security Ecosystem
The same principle applies to parents.
Parents receive school communications, payment requests, registration notices and scholarship information.
Attackers can impersonate institutions because they know families expect these messages.
Security awareness therefore needs to extend beyond the classroom.
The education ecosystem includes everyone who interacts with the institution.
Monitor Newly Registered Domains
Security teams can also take a proactive approach.
Organizations should monitor newly registered domains containing their names, brands, campuses, departments and commonly used education terminology.
Early detection can allow an institution to identify impersonation campaigns before large numbers of victims are affected.
Domain monitoring is especially valuable during seasonal periods when attackers know victims are more likely to respond.
Deep Analysis
Why the Attack Pattern Matters
The most important development is not simply that attack numbers are increasing.
It is that cybercriminals appear to understand the education calendar.
They know when students register.
They know when teachers return.
They know when universities send financial information.
They know when parents begin searching for school services.
That predictability gives attackers an advantage.
Defensive Domain Monitoring
Security teams can begin with basic DNS and certificate intelligence.
For example, defenders can inspect suspicious domains with commands such as:
whois suspicious-domain.example dig suspicious-domain.example dig suspicious-domain.example MX dig suspicious-domain.example TXT
These commands can help identify registration information, DNS records and email infrastructure.
They should be used for defensive investigation rather than unauthorized interaction with systems.
Inspecting HTTP Headers
When investigating a suspicious website, defenders can examine HTTP response headers:
curl -I https://example.edu
For a suspicious URL under investigation:
curl -I https://suspicious-domain.example
Security teams should avoid submitting credentials or downloading files merely to test an unknown site.
Checking TLS Certificates
Certificate transparency data can also reveal suspicious infrastructure.
Defenders can investigate certificate information using:
openssl s_client -connect suspicious-domain.example:443 -servername suspicious-domain.example
The objective is to understand infrastructure relationships, not to attack the server.
Searching Logs for Suspicious Authentication
Identity logs should be examined for unusual behavior.
For example, administrators can search authentication logs for repeated failed logins:
grep -i "failed" /var/log/auth.log
Cloud environments require equivalent queries through their identity and security monitoring platforms.
Detecting Impossible Travel
A user who authenticates from London and then appears minutes later in another distant region may warrant investigation.
This does not automatically prove compromise because VPNs, mobile networks and corporate proxies can produce misleading locations.
However, combined with unfamiliar devices, suspicious applications or repeated authentication failures, the signal becomes much stronger.
Watching for OAuth Abuse
Modern phishing campaigns increasingly target authentication tokens rather than simply passwords.
Security teams should monitor unexpected OAuth application consent, suspicious third-party applications and unusual token activity.
Users should not automatically approve application permissions simply because an application appears familiar.
Protecting Email
Email security should include attachment inspection, URL analysis, impersonation detection and domain-based authentication controls.
Organizations should properly configure SPF, DKIM and DMARC.
For example, administrators can inspect DNS records with:
dig TXT example.edu
The goal is to identify weaknesses in the organization’s email authentication configuration.
Backups Must Be Tested
Backups are useless if restoration fails.
Education organizations should maintain protected backups and periodically perform restoration tests.
A simple recovery exercise can reveal problems long before ransomware does.
Segment the Network
Universities should avoid placing every system on one flat network.
Student devices, administrative systems, research environments, servers and sensitive databases should be appropriately segmented.
If one environment becomes compromised, segmentation can limit lateral movement.
Protect Privileged Accounts
Administrative accounts deserve additional protection.
They should use phishing-resistant MFA where possible, have limited permissions and be monitored closely.
Administrators should avoid using privileged accounts for ordinary activities such as browsing the web or reading routine email.
Endpoint Detection Matters
Students and employees use many different devices.
Endpoint detection and response can provide visibility into suspicious processes, credential theft attempts and malware execution.
Institutions should also have a clear process for isolating compromised endpoints.
Incident Response Should Be Practiced
A university should know exactly what happens after a phishing report.
Who investigates?
Who disables the account?
Who contacts the user?
Who checks for token theft?
Who reviews mailbox rules?
Who communicates with leadership?
Who handles legal and regulatory requirements?
These questions should be answered before an incident.
AI Will Change the Attack Equation
Cybercriminals are increasingly using automation and AI to scale social engineering.
That means educational phishing emails may become grammatically perfect, personalized and contextually convincing.
Traditional awareness training based on spotting spelling mistakes is therefore becoming less effective.
Users need to learn behavioral indicators rather than simply visual ones.
The Real Weakness Is Trust
Ultimately, this threat landscape is built around trust.
Students trust school portals.
Employees trust Microsoft 365.
Parents trust messages from teachers.
Researchers trust collaboration platforms.
Attackers are attempting to borrow that trust.
Once defenders understand this, cybersecurity strategy becomes clearer.
The objective is not merely to block malicious files.
It is to prevent unauthorized trust from becoming unauthorized access.
What Undercode Say:
Education Is Becoming a Permanent Cyber Battlefield
The education sector’s position at the top of Check Point’s attack rankings is not an isolated event.
It has remained one of the most consistently targeted industries throughout 2026.
Attackers Understand Seasonal Behavior
The back-to-school period gives criminals predictable opportunities.
Predictability is one of the most valuable resources in cybercrime.
More Digital Education Means More Digital Risk
Every new cloud platform, mobile application and online portal expands the potential attack surface.
Digital transformation is not inherently dangerous.
Unmanaged digital transformation is.
Students Are Not Passive Victims
Students can become entry points into institutional networks.
A compromised student account should therefore be treated as a potential security incident rather than merely a personal inconvenience.
Staff Accounts Are Even More Sensitive
Administrative and faculty accounts can provide attackers with broader access.
These accounts deserve stronger authentication and monitoring.
Domain Registration Is a Warning Signal
A sudden increase in education-themed domains before a new term should immediately attract security attention.
It may represent legitimate commercial activity.
It may also represent preparation for phishing campaigns.
Phishing Is Becoming Industrialized
Attackers no longer need to create every campaign manually.
Domain registration, content generation, hosting and distribution can increasingly be automated.
Trust Is the Weapon
The strongest phishing campaigns do not look malicious.
They look familiar.
Microsoft 365 Is a High-Value Target
Because education heavily depends on cloud productivity platforms, identity compromise can have consequences far beyond one mailbox.
One Password Can Open Many Doors
Password reuse makes the problem significantly worse.
Students and employees should use unique passwords and strong authentication.
MFA Is Essential
MFA dramatically improves account security, although organizations should increasingly prefer phishing-resistant authentication for sensitive accounts.
Security Awareness Must Become Continuous
A single annual training session is insufficient.
Threats change too quickly.
Education Needs Security Culture
Cybersecurity should become part of normal institutional behavior rather than an IT department responsibility.
Researchers Need Special Protection
Universities often store sensitive intellectual property and unpublished research.
Those systems may attract sophisticated espionage campaigns.
Third-Party Vendors Matter
A school cannot secure its ecosystem while ignoring vendors that have access to its data.
Ransomware Is the Endgame to Watch
Credential theft can eventually become ransomware deployment.
The initial phishing email may therefore be only the first stage of a much larger attack.
Backups Are Institutional Insurance
Reliable, isolated and tested backups can turn a catastrophic ransomware incident into a serious but recoverable event.
Network Segmentation Limits Damage
If attackers compromise one environment, segmentation can prevent them from freely moving throughout the organization.
Identity Has Become the New Perimeter
Modern education security increasingly depends on controlling identities rather than simply protecting physical networks.
Cloud Security Cannot Be Ignored
Moving services to the cloud does not eliminate security responsibilities.
Misconfigured identities, applications and permissions can still create major vulnerabilities.
Students Should Be Included in Security Planning
Students interact with institutional systems every day.
They must therefore be part of the security strategy.
Parents Can Be Targeted Too
A fraudulent tuition or scholarship message can be just as effective against a parent as a fake password-reset message is against an employee.
Attackers Follow the Calendar
This is one of the clearest lessons from the research.
Cybercrime increasingly operates according to predictable business cycles.
Back-to-School Should Mean Back-to-Security
Security reviews should happen before students return, not after the first incident.
Domain Intelligence Can Provide Early Warning
Institutions should monitor impersonation domains before they become active phishing infrastructure.
Email Authentication Needs Attention
SPF, DKIM and DMARC should be properly configured and monitored.
Privileged Accounts Require Stronger Controls
Administrators should not be protected exactly like ordinary users.
Their accounts represent much greater institutional risk.
Incident Response Must Be Fast
The first few hours after credential theft can be decisive.
Token Theft Deserves More Attention
Modern attackers may seek sessions and tokens instead of passwords.
Security Teams Need Better Visibility
Without centralized logging and identity monitoring, suspicious activity can remain invisible.
AI Will Increase Phishing Quality
Artificial intelligence can make malicious communication more convincing.
That means human judgment remains essential.
The Human Firewall Still Matters
Technology can block many attacks, but users remain the final decision point in countless phishing scenarios.
Cybersecurity Budgets Must Follow Risk
If education is consistently among the most targeted sectors, security investment should reflect that reality.
Universities Should Treat Research as Critical Infrastructure
Research data can have economic, scientific and national-security value.
Schools Need Recovery Plans
Prevention is important.
Recovery is equally important.
The Threat Is Bigger Than the School
Students, parents, vendors, researchers and government partners can all be affected by a successful breach.
Cybersecurity Is Now Part of Education Infrastructure
A university cannot operate effectively if its identity, communication and learning systems are compromised.
The Back-to-School Rush Is Also a Criminal Opportunity
Every increase in digital activity creates more opportunities for deception.
The Best Defense Is Preparation
Attackers prepare before the semester.
Defenders should do the same.
The Education Sector Cannot Treat This as Normal
Repeated high attack volumes should not become background noise.
They should trigger stronger structural defenses.
Undercode’s Bottom Line
The education sector is no longer simply another industry facing cybercrime.
It has become one of the most strategically attractive environments for attackers because it combines scale, valuable data, open networks, large user populations and predictable seasonal activity.
The answer is not to shut down digital education.
The answer is to secure it intelligently.
✅ Education Is Consistently One of the Most Targeted Sectors
Check Point’s published 2026 reports independently support the article’s central claim that education repeatedly ranked first for average weekly cyberattacks. February, March, April, May and June reports all place education at or near the top.
✅ Back-to-School Targeting Is a Documented Pattern
Check Point has previously documented seasonal phishing campaigns and large numbers of newly registered education-related domains immediately before the academic year. Its 2025 research reported 18,391 education-related domains in July and identified malicious or suspicious activity among them.
✅ Education Has a Structurally Large Attack Surface
Check Point’s previous education research identifies large user populations, open environments and limited security resources as factors contributing to the sector’s attractiveness to attackers.
⚠️ Exact July 2026 Figures Require Source-Level Confirmation
The specific figures of 4,696 weekly attacks from January through July, 4,848 in July, 18,954 newly registered domains and the one-in-226 malicious-domain ratio were supplied in the original article, but I could not independently locate those exact figures in the publicly indexed Check Point material available for verification.
They are therefore best presented as reported Check Point figures, rather than independently verified numbers.
⚠️ Regional Numbers Should Be Treated as Reported Research Data
The supplied Europe and Latin America figures may reflect a specific January–July methodology that differs from Check Point’s individual monthly reports.
That distinction matters because monthly attack averages and year-to-date averages should not automatically be treated as interchangeable measurements.
Prediction
(+1) Cybersecurity Will Become a Core Back-to-School Requirement
Educational institutions are likely to increasingly treat cybersecurity preparation as part of their standard academic-year readiness process.
(+1) Phishing-Resistant Authentication Will Expand
Universities and schools are likely to move beyond passwords and basic MFA toward stronger authentication technologies, particularly for administrative and privileged accounts.
(+1) Domain Monitoring Will Become More Automated
Security teams will increasingly use automated threat-intelligence systems to identify suspicious education-related domains before they are used in major campaigns.
(-1) Attackers Will Increase Seasonal Phishing
The predictable academic calendar gives criminals recurring opportunities, making it likely that phishing campaigns will become more sophisticated around enrollment, tuition, examinations and semester transitions.
(-1) AI-Generated Phishing Will Become Harder to Recognize
As attackers use AI to produce convincing messages and websites, traditional indicators such as poor grammar and obvious spelling errors will become less useful.
(-1) Compromised Educational Websites Will Remain a Major Risk
Legitimate school domains provide attackers with borrowed credibility, making website compromise particularly attractive.
(+1) Identity Security Will Become the Primary Defensive Focus
The education sector is likely to increasingly prioritize identity protection, session monitoring, privileged access management and phishing-resistant authentication.
(-1) The Education Attack Surface Will Continue Expanding
Cloud services, mobile learning, AI tools, remote collaboration and third-party platforms will continue adding new points of exposure.
(+1) The Institutions That Prepare Early Will Be Better Positioned
The most effective response is not waiting for September’s first phishing campaign.
It is identifying the weaknesses before attackers arrive.
Final Perspective
The most important message from this research is not simply that schools are being attacked more frequently.
It is that cybercriminals are learning how education works.
They understand the academic calendar.
They understand student behavior.
They understand the importance of scholarships, tuition, enrollment and cloud accounts.
They understand which brands students recognize and which messages they are likely to trust.
That makes the modern education threat landscape fundamentally different from a random collection of malware incidents.
The attackers are increasingly systematic.
Educational institutions must become equally systematic in defense.
The next school year will bring new students, new technologies and new opportunities to learn.
It will also bring another wave of cyberattacks.
The institutions that recognize that reality before the first bell rings will have a far better chance of keeping their students, staff, research and data safe.
▶️ Related Video (84% Match):
🕵️📝Let’s dive deep and fact‑check.
🎓 Live Courses & Certifications:
Join Undercode Academy for Verified Certifications
🚀 Request a Custom Project:
Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands
References:
Reported By: www.itsecurityguru.org
Extra Source Hub (Possible Sources for article):
https://stackoverflow.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon | 📺Youtube
