I always thought it was something like visiting the site with a somewhat unprotected (but virtualized) computer and seeing if anything bad (registry keys change

I always thought it was something like visiting the site with a somewhat unprotected (but virtualized) computer and seeing if anything bad (registry keys changed) happened.