_spf1.wombatsecurity.com has no CNAME records.
Question and response
Question
dig _spf1.wombatsecurity.com. NS
Answer
The response has no answer records.
Authority
wombatsecurity.com. 520 SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
Additional
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0