US financial regulator warns of phishing sites impersonating brokers