The Board recognizes that reducing the use of domains used in phishing or malware distribution is a difficult challenge and mitigation is a shared responsibility in which many types of service providers, law enforcement entities and users themselves can all play important roles.