Sanesecurity.Junk.36471:4:*:shtyle.fm It triggers too much FP.shtyle.fm is community portal, just like many others. I am not an enthusiast of any of them (too much automatic notifications sent, not only to members) but some of my users use exactly shtyle.fm and receive notifications from it.
I'd suggest to make this signature more specific. PiK