Do not use tax-refunds-hmrc.co.uk, it looks like the real thing.

SMS txts are being sent out linking to this site which looks like an HMRC site but it isn't.

Now dead.

[root@server ~]# whois tax-refunds-hmrc.co.uk
[Querying whois.nic.uk]
[whois.nic.uk]

Domain name:
tax-refunds-hmrc.co.uk

Registrant:
Monica Tandon

Registrant type:
Unknown

Registrant's address:
Little Sutton Lane
Sutton Coldfield
B75 6SH
United Kingdom

Data validation:
Nominet was able to match the registrant's name and address against a 3rd party data source on 21-Oct-2015

Registrar:
GoDaddy.com, LLP. [Tag = GODADDY]
URL: http://uk.godaddy.com

Relevant dates:
Registered on: 21-Oct-2015
Expiry date: 21-Oct-2016
Last updated: 21-Oct-2015

Registration status:
Registered until expiry date.

Name servers:
ns1.suspended-for.spam-and-abuse.com
ns2.suspended-for.spam-and-abuse.com

WHOIS lookup made at 07:59:05 22-Oct-2015

If that's the real name and address of the registrant, she's really a rather stupid person.

I reported it to nearly everybody yesterday ....

Nominet (the UK domain name registry) who said they are not a regulatory authority so can't initiate take-downs but said they would report it to GoDaddy (the domain registrar) as a suspected incorrect registration details.

GoDaddy via their online form.

Merseyside Police who just gave me ActionFraud telephone number.

Actionfraud who I couldn't get a phone response so did their online forms (two ways, one for txt and one for site) which didn't even ask for the domain name or telephone number!!! It seems it just collects statistics on who is being targeted (HMRC in this case).

I presume the take-down was by GoDaddy after Nominet contacted them. I think that in obvious cases like this that Nominet should have near instant take-down authority, they have the facility to do the take-downs.

If Monica Tandon at that address created that site I'll eat my hat

It probably was GoDaddy that took it down, they seem to be quite responsive to abuse complaints. You rarely get an ack but they do read their abuse mailbox.

I think your hat is safe