I use Pi Hole, which is mostly intended as an ad blocker DNS server. It's an open source project that maintains a list of domains that you would be better off not seeing. For those domains, it returns '0.0.0.0' for the IP address.
For some vectors, this can be surprisingly effective. But it won't save you from malware that's already on your machines; if the bad guys can run anything at all on your computers, they can run their own DNS servers.
The default Pi Hole setup if pretty good.
You can add more lists, if you wish. I know of one that was highly rated some time ago... pre-covid, when I had some spare cycles to set this up.
https://pi-hole.net
For some vectors, this can be surprisingly effective. But it won't save you from malware that's already on your machines; if the bad guys can run anything at all on your computers, they can run their own DNS servers.
The default Pi Hole setup if pretty good.
You can add more lists, if you wish. I know of one that was highly rated some time ago... pre-covid, when I had some spare cycles to set this up.