If the regulator doesn’t know if a site’s legitimate