found the error - typo in fax address in domain.
what is odd is that it would have been found with a simple SMTP log in 3CX...
instead had to dig through exch tracking logs to find it, saw an odd relay and there it was..
address was forwarding due to typo... doh..
my fault but crazy that there...