Below is a gif image I've made of the header from a bounced email returned to my XXXXX.COM domain. The person it's from, Huber R. Maria, does not exist. Apparently my domain is being "JoeJobbed". I have had the SPF set to FAIL for ages.