Added $eml strings and condition. Set condition value higher for $body, requiring more string matches to avoid FP.