I have been working on stopping phishing for the last year and have read many malware analysis reports. Domain whitelisting will make it much harder for the attackers.

I just announced beta of host based DNS whitelisting app. It trusts top 10,000 domains, then user has to allow other domains.

https://twitter.com/mabraFoo/status/790678093618900993