bunch of phish kits on dynamic dns domains

IP: 162[.]0[.]222[.]101
prepaidbankofam[.]servebeer[.]com/53rdBank[.]zip - https://malshare.com/sample.php?action=detail&hash=c4dd752000f991c7bee16ab6fc9b1f77
prepaidbankofam[.]servebeer[.]com/s2L_citizen[.]zip - https://malshare.com/sample.php?action=detail&hash=981b36d6d0bc773ccd6e33df121285bb
prepaidbankofam[.]servebeer[.]com/BankofamericaEDD[.]zip - https://malshare.com/sample.php?action=detail&hash=464d886328440343eb3265e7df52ac16

IP: 20[.]55[.]202[.]95
protect-user[.]ddns[.]net/Moded%20by%20Dr[.]Stone[.]zip - https://malshare.com/sample.php?action=detail&hash=3b17e6ffffffee24b2df71d1a90e9d2e

IP: 139[.]180[.]143[.]10
freeefirr-hadiahevent[.]duckdns[.]org/yesxcyclaimgg[.]zip - Too Large for malshare

IP: 129[.]159[.]37[.]62
secure4everify[.]duckdns[.]org/bankofamerica%20(2)[.]zip - https://malshare.com/sample.php?action=detail&hash=0bd7f2fdbd22d253ce738088df067173

IP: 129[.]146[.]247[.]181
chooser[.]serveirc[.]com/chasev3[.]zip - https://malshare.com/sample.php?action=detail&hash=df015f6f03176edc8470662bdc2209c2

IP: 143[.]110[.]235[.]210
dropship[.]servehttp[.]com/Chase%20fxd[.]zip - https://malshare.com/sample.php?action=detail&hash=0cc492f9c759576802ab0e40cc9ff19b