19. The system for identifying 419 messages in a live message stream of claim 15 , wherein the anti-spam pipeline further comprises: a whitelist filter stage implemented by one or more of the one or more processors associated with the one or more computing systems before the one or more metadata creating heuristic filter stages, the whitelist filter stage using one or more of the one or more processors associated with the one or more computing systems to analyze the message using heuristics utilizing one or more potential legitimate message parameters.
19. The system for identifying 419 messages in a live message stream of claim 15 , wherein the anti-spam pipeline further comprises: a whitelist filter stage implemented by one or more of the one or more processors associated with the one or more computing systems before the one or more metadata creating heuristic filter stages, the whitelist filter stage using one or more of the one or more processors associated with the one or more computing systems to analyze the message using heuristics utilizing one or more potential legitimate message parameters. 20. The system for identifying 419 messages in a live message stream of claim 19 , wherein: at least one potential legitimate message parameter is selected from the group of potential legitimate message parameters consisting of: text associated with vacation or out of office replies; text indicating the sender is unable to respond; addresses associated with known safe senders; attached URLs associated with known safe senders; phone numbers associated with known safe senders; and points of origin associated with known safe senders.