The group began registering several decoy internet addresses last month and as recently as April 15, naming one 'onedrive-en-marche.fr' and another 'mail-en-marche.fr' to mimic the name of Macron's political party, En Marche.