Emotet links Jun 1

doc dl
some may be in urlhaus already
http://ingridkaslik.com/ups.com/WebTracking/PI-611937259971/
http://skg-service.com/ups.com/WebTracking/YDV-099117142253/
http://genesisenviroman.com/Past-Due-Invoices-May/
http://joedee.co.za/Payment-Receipt-052696/
http://kohnrath.com/ACCOUNT/HRI-Monthly-Invoice/
http://lolligirl.com/ups.com/WebTracking/UDT-83430965/
http://architektcordes.de/Inv-0213475/
http://smehlik.net/ups.com/WebTracking/UDJ-549630741788/
http://gk-werkstatt.de/ups.com/WebTracking/JRI-92186474000565/
http://vermeer-oomens.nl/Invoice-064382/
http://firstreport.com/Service-Inv-May/
http://zelltek.co.jp/gps/ups.com/WebTracking/BX-90797974/
http://timgiesecke.com/Paid-Invoice-Receipt-No.040050/
http://langstraat.com/ups.com/WebTracking/IS-76817254300/
http://outdoorspioneer.com/ACCOUNT/Services-05-31-18-New-Customer-TZ/
http://tittel-sound.de/ACCOUNT/Auditor-of-State-Notification-of-EFT-Deposit/
http://soniceyetec.com/Votre-facture-31-mai/
http://mickdoyle.com/ups.com/WebTracking/FJ-451643650237352/
http://solecom.com/ups.com/WebTracking/ALV-6082885/
http://hotprinter.com.br/For-Check-095372-May/
http://cripliver.com/ups.com/WebTracking/XTC-1841671832/
http://rosstec.net/_Media/ups.com/WebTracking/SE-28218937/
http://iqfperu.com/STATUS/HRI-Monthly-Invoice/
http://alpinewebgroup.com/ups.com/WebTracking/RG-2799447812/
http://opticflows.com/ups.com/WebTracking/DY-30247354/
http://rebovo.de/Facture-impayee-31-mai/
https://cdn.discordapp.com/attachments/388981385085452288/451497406215749632/Email_DB_2017_2018.doc
http://mohamedsamy.net/MODIF-FACTURE-31-mai/
http://jcstudio.com.my/Facture-impayee-31/05/2018/
http://petewilliams.info/Client/Auditor-of-State-Notification-of-EFT-Deposit/
http://ducro.nl/ups.com/WebTracking/DIZ-44503913/
http://meister-spec.com/ACCOUNT/Direct-Deposit-Notice/
http://peml.de/DOC/HRI-Monthly-Invoice/
http://indepmo.com/ACCOUNT/Invoice/
http://ravefoto.de/wpp-app/ups.com/WebTracking/WVV-5264773867145/
http://simp-consulting.pl/includes/ACCOUNT/Services-05-31-18-New-Customer-DD/
http://shabab.ps/vb2/attachments/ups.com/WebTracking/SD-599099569913/
http://planetkram.com/Invoice-Number/
http://villematti.info/STATUS/Invoices/
http://r-klecker.de/Outstanding-Invoices/
http://florissantfire.com/aspnet_client/STATUS/Payment/
http://henby.com.br/Notification-de-facture-31-mai/
http://autoteile-cologne.de/Fact-31/05/2018/
http://tomteuer.de/ups.com/WebTracking/BW-60430740213/
http://ticketdoctor.net/ACCOUNT/Please-pull-invoice-79481/
http://kadatagroup.com/ups.com/WebTracking/DT-102821543/
http://hotedeals.co.uk/Client/tracking-number-and-invoice-of-your-order/
http://delamargm.cl/STATUS/Invoice-3848971
http://harinsur.com/Facture-impayee-31-mai/
http://samsolution.it/ups.com/WebTracking/GOQ-568778565408/
http://mitresource.com/ups.com/WebTracking/OVG-774747853654/
http://pcxcomputers.com/FILE/Services-05-31-18-New-Customer-YC/
http://etchbusters.com/ups.com/WebTracking/WMZ-839539682/
http://larrysmith.com/ACCOUNT/Services-05-31-18-New-Customer-AF/
http://amemarine.co.th/images/stories/virtuemart/ups.com/WebTracking/CY-1797453432810/
http://wieleba.pl/FILE/Emailing-W93784FJ-38123/
http://suzman.net/ups.com/WebTracking/GOS-7198021/
http://fredmeseck.com/Client/invoice/
http://on-player.de/Facture-impayee-31-mai/
http://draftmailer.com/ups.com/WebTracking/RY-423444681/
http://thebluefront.com/ups.com/WebTracking/EK-76505310/
http://greenway-studio.de/DOC/tracking-number-and-invoice-of-your-order/
http://telestarinc.com/ups.com/WebTracking/BF-464670100345916/
http://onebrickmusic.com/ups.com/WebTracking/ZZP-344404271488/
http://thecentralbaptist.com/Votre-facture-01-juin/
http://ahi0000.de/ACCOUNT/Invoice-02432/
http://radtx.com/ups.com/WebTracking/PB-86416014/
http://tsuki.com/ups.com/WebTracking/DPU-17166855/
http://castlewinds.com/ups.com/WebTracking/SLN-568745929993732/
http://baute.org/ups.com/WebTracking/BBY-2645624401/
http://comprealm.net/wordpress/STATUS/Invoices/
http://vera-brunn.de/Facture-impayee-01/06/2018/
http://unclemame.com/ups.com/WebTracking/REE-2076965954890/
http://stevesmarineservice.com/STATUS/Pay-Invoice/
http://sereg.in/Available-invoices/
http://lidoconchiglie.com/STATUS/Auditor-of-State-Notification-of-EFT-Deposit/
http://k9mum.com/DOC/Payment/
http://geonatural.ge/ups.com/WebTracking/YF-1894256069597/
http://hyperfocusedcoaching.com/ups.com/WebTracking/ZUB-92151339286/
http://sundayplanning.com/MODIF-FACTURE-31/05/2018/
http://harshulnayak.com/STATUS/Auditor-of-State-Notification-of-EFT-Deposit/
http://gerbrecha.com/FILE/invoice/
http://tpc.hu/ups.com/WebTracking/OB-845334806311829/
http://bluemirage.com/Facture-impayee-31-mai/
http://zitoon.net/New-Invoice-0965050/
http://k8ir.com/ups.com/WebTracking/TCG-7542036320473/
http://maisbrasilphoto.com.br/ups.com/WebTracking/YBO-9538757/
http://heggemeier.com/ssfm/Facture-impayee-31/05/2018/
http://stevebrown.nl/ACCOUNT/Invoice-6195360/
http://legititsolutions.com/ACCOUNT/INV7668855707937698241/
http://reken-bhf.de/Past-Due-Invoices-May/
http://wickedskinz.net/ups.com/WebTracking/NWN-13870485791/
http://hireatradesman.com.au/ups.com/WebTracking/AQ-60083258137/
http://smpadvance.com/Companies-Invoices/
http://starcoimpex.com/STATUS/invoice/
http://stalzer.de/Open-Past-Due-Orders/
http://www.samoticha.de/ups.com/WebTracking/DN-356764375952/
http://clara-wintertag.de/Scan-No.015112-May/31/2018/
http://djzmo.com/ups.com/WebTracking/XNI-52018046/
http://deitmer.info/Facturation/
http://anzo.jp/Open-Past-Due-Orders/
http://dgnet.com.br/Need-to-send-the-attachment-June/
http://ratte-boulianne.com/Past-Due-Invoices/
http://planetferguson.net/Facture-01/06/2018/
http://smeare.com/Votre-facture-01/06/2018/
http://blucollarsales.com/Client/Invoice-7864488/
http://theisel.de/Notification-de-facture-30-mai/
http://retsreformnu.dk/Facture-01-juin/
http://romancech.com/Facture-impayee-01/06/2018/
http://trixtek.com/Facture-impayee-01/06/2018/