< what is a mechanism to block incompliant website?

They don't need to block it. If the company is accepting money from Americans and it's not using crypto, then there are business entities that have a presence in the US and are subject to US law enforcement. It may just be payment processors, but it's easy for the US govt to cut off access to most of its citizens as consumers.