Probe finds online service hijacking restaurant delivery orders

Thousands of websites linked to the OrderAhead food delivery service are posing falsely as authorized restaurant websites — diverting traffic from official restaurant sites and taking orders for food without the knowledge of restaurant operators.

Reports of these sites have been trickling out over the past week, but new research by GeekWire has uncovered a much larger pattern, reaching from New York to the San Francisco Bay Area, Los Angeles and Seattle.

Frequently, the unofficial sites outrank the official restaurant sites in search results, using savvy SEO techniques. In some cases, for example, the sites have been connected to the Google Local listings for the restaurants, ensuring that the OrderAhead sites are featured more prominently in search results.

The unofficial sites are registered under a variety of aliases and domain name proxies — under names like Rosario Garnett, Chris Timm and Alan Small — making it more difficult to trace them back to their actual owners. They leverage multiple hosting providers but are all powered by a common infrastructure, pulling CSS, JavaScript and images from the same Amazon Web Services Cloudfront instance.

Records show that the registration of these domains started about a month ago — creating unofficial sites not for just mom-and-pop eateries but also for upscale restaurants, such Wild Ginger, Chinook’s and Crow in Seattle.

Restaurants are unaware

“I have not heard of them, and we have no association with them whatsoever,” said Bruce Michaux, a manager at Wild Ginger in Seattle, which promotes delivery of its food through Caviar. “This is the first I’ve heard of it. My reaction would be surprise, I guess. Yeah, I would hate for anybody to be kind of co-opting our name [without customers knowing]. That’s most upsetting.”

Look out, Burgermaster, you’re next: A site for the beloved Seattle-area drive-in chain been registered by one of the same aliases, but not yet launched.

The Crew, a small, family-owned Korean restaurant in San Francisco’s Sunset District, is another such case from OrderAhead’s home town. When shown the OrderAhead-powered website, owner Andy Jong Su Kim was stunned. He had no idea about the website, which comes up as the first Google search result for The Crew, and said that his restaurant’s only web presence was on Yelp.

The registered sites are concentrated heavily in the cities and regions where OrderAhead has launched its service.

OrderAhead has declined GeekWire’s repeated requests to comment.

A visit to the company’s headquarters on the border of San Francisco’s Mission District and Potrero Hill neighborhoods didn’t yield any answers.

The office, which is just down the hall from Le Cordon Bleu, is fairly spartan – four long tables with the startup’s employees crammed elbow-to-elbow. A well-read copy of “Growth Hacker Marketing” by Ryan Holiday sat at the top of one of the piles of books on bookshelves in the office’s entry.

When asked if anyone would be available to speak on the record, an employee of the company who didn’t identify herself said they “can’t just have people coming around here,” and that OrderAhead would follow up with GeekWire. They have yet to respond.

Backed by big names

OrderAhead is a product of the Y Combinator startup accelerator with a roster of high-profile Silicon Valley investors. Founded in 2011, the company has landed a total of $10.5 million in funding from backers including Salesforce CEO Marc Benioff, Google executive chairman Eric Schmidt, Reddit co-founder Alexis Ohanian and Ignition Partners.

Read the Full Article


More from our partners