[mrbluecoat]

I'd be okay with a hybrid approach: lists for real-time blocking and machine learning for passive analysis to augment the lists over time.