I have started to look for domain names inside my traffic. So I am interested to identify which one is malicious or doing some malicious acitivites.
I know by looking at online web-services such as
virus total or
url void I can get a general idea about domains or by looking at registration information but these still wont help me to say by a level of certainty that this domain is malicious.
So my question is that if you got a domain name what would be your work flow to manually analyze the domain and figure out if it is malicious or not or in more detail identify the malware family related to that domain.