We signed up to MS 365 using a subdomain and try to triage the issue and if anything it only made the issue clearer, that it has nothing to do with the sending domain but pure content filtering.