Comment by sikozu

You say .gov-ish, does this mean compromised gov email accounts, spoofed email addresses or domains that look like government domains?