peryourhealth[.]blog

This domain, peryourhealth.blog, poses as the legitimate PerYourHealth payment portal to deceive users into submitting financial credentials. Analysis indicates it presents a cloned interface of the authentic peryourhealth.com site, likely harvesting login details, payment card numbers, and personal identification information. The threat is classified as a generic phishing attack, with infrastructure designed to exploit trust in healthcare payment systems. Infrastructure analysis reveals the domain was flagged by 3 out of 95 security vendors on VirusTotal, indicating early detection but limited initial coverage. It resolves to the IP address 198.12.240.54 and appears on 2 security blocklists, including PhishDestroy and ScamSniffer. The domain was registered through ARIN, though no creation date is provided in available data. A Gridinsoft trust score of 0/100 further confirms its malicious classification, and the page title explicitly mimics the legitimate portal, increasing its deceptive potential. Users who visited peryourhealth.blog should immediately cease all interaction and assume credentials entered were compromised. Change passwords for any accounts accessed while on the site, particularly financial or healthcare-related portals. Monitor bank statements and credit reports for unauthorized transactions, as phishing attacks often lead to identity theft or financial fraud. If payment details were submitted, contact the financial institution to block cards and request fraud alerts. Report the domain to local cybersecurity authorities or anti-phishing organizations to aid in takedown efforts.