Have you read this? Section G3B reads to me as if it can apply to a website as I suggested, ie "covered company" which includes websites as per their definition controlled by a foreign adversary. What about what I said is incorrect?