[Havoc]

How realtime is this? Or well enough to not be noticeable while browsing

[mrbluecoat]

I'd be okay with a hybrid approach: lists for real-time blocking and machine learning for passive analysis to augment the lists over time.