Websites for the two unauthorised firms remain online after the regulator said they had copied details of legitimate insurance firms.