Web Browsing is the Primary Entry Vector for Ransomware Infections
The attackers have been spotted rotating different URLs/hostnames to host the same ransomware or using the same URL to deliver different ransomware. Some attackers do both of these things.