Fastmail also uses global blocklists and reputation scores that can override your training. Could also be the sending IP is shared with bulk senders.

Marking as "not spam" should help over time. If it does not, create a rule to always deliver from that domain. That is the only way to guarantee it never happens again.