Dear Sirs, yesterday we registered phone calls of the customers who had received a fake e-mail with a request for domain extension. According to our analysis the e-mails do not come from the register of .cz domain. We have detected.cz domains that have a registrar Internet CZ, General Registry and Ignum. In all captured e-mails is a proforma invoice with an account number 1287700016/3030 (Air Bank). Air Bank blockedthis account where the affected should have sent money to. We have added a warning to domain holders on our website. We communicate this warning by other channelstoo. If any other domain by any other registrar would be affected, please let us know. Thank you and kind regards Marketa Kusickova -- Markéta Kušičková CZ.NIC, z.s.p.o. Americká 23 120 00 Praha 2 T +420 222 745 125 M +420 603 826 732