I have been working on stopping phishing for the last year and have read many malware analysis reports. Domain whitelisting will make it much harder for the attackers.
I just announced beta of host based DNS whitelisting app. It trusts top 10,000 domains, then user has to allow other domains.