If a site does not require ID, which is an enormous red flag