Government agencies are fighting a losing battle against email-initiated cyberattacks. Federal .GOV domains imply government authority and trust, and are uniquely targeted and vulnerable to phishing and fraudulent use. Federal agencies must not only protect elected officials, civil servants, and contractors from phishing and malicious email they also must protect citizens from fraudulent email appearing to come from .GOV domains.