Cloudflare’s 1.1.1.2 blocks known malware domains, so that’s better than 1.1.1.1 unless you want nothing blocked.
If you want to block ads and trackers in addition to malware, try ControlD’s 76.76.2.2 .
Better still is to use encrypted DNS if your device supports it. I like NextDNS or ControlD for that, as DNS-Over-TLS or -HTTPS.
Maybe it’ll be the SWiitch.