Dh ordered us some European Health Cards, which are free. He Googled E111 and it went to a site that asked for payment - not a huge amount of money: www.e111.org.uk - in the small print it says it's 'an unofficial third-party data processor for EHIC applications.'
The cards hadn't arrived so he phoned to chase - the official number. He was told that they're aware of the unofficial site asking for payment and trying to clise it down. Obviously the biggest worry is that he's given his credit card details - idiot!