Hi,
The email was not sent using the new format of HMRC domains. It may be genuine but has not yet been migrated to the new format, and should be treated as suspicious.
Please forward the suspicious email to the HMRC Online Security Team for investigation at
phishing@hmrc.gov.uk
We will act upon all HMRC related phishing emails and remove fraudulent websites. Please delete the suspicious email and do not open any attachments, in particular 'Zip files' - these may contain a virus or malware.
If you have opened the email, you should run any antivirus software as a precaution if you have opened an attachment.
Thank you.