Spam marking

checkthreat() returns false if no KW found