The following video is a vendor trying to sell something :-
httpv://www.youtube.com/watch?v=jooV0HG01wg
The mechanism itself can be provided using a standard DNS infrastructure using the RPZ feature; the difficult part is the “Malware Data Feed” as this needs a high quality source of data with regards to DNS names that should be blocked.