That's also my understanding of it, that does sounds like a business model based on trademark violation / brand impersonation.

The only reason they get away with it is they target small restaurants which are unable to defend themselves. They would try to create a fake <yourlocalcityname>mcdonald.com, it would be taken down immediately.