Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain d36u2k3m7a170f.cloudfront.net is not the root of its zone.
Instead, try zone transfer on cloudfront.net .
Instead, try zone transfer on cloudfront.net .