Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain _spf.psm.knowbe4.com is not the root of its zone.
Instead, try zone transfer on psm.knowbe4.com .
Instead, try zone transfer on psm.knowbe4.com .